Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/1vfOwB3X1OpoR84wEWmHlx_LM_o.roa
File: 1vfOwB3X1OpoR84wEWmHlx_LM_o.roa (raw, json)
Hash identifier: dSK+5DbJwuY0tGzMx18BWAG9TEWW3BqPDoxW3GMnFws=
Subject key identifier: D6:F7:CE:C0:1D:D7:D4:EA:68:47:CE:30:11:69:87:97:1F:CB:33:FA
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 0188B9C7DD9D1AC88BD508E6A6941A139309
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/1vfOwB3X1OpoR84wEWmHlx_LM_o.roa
Signing time: Wed 14 Jun 2023 12:01:03 +0000
ROA not before: Wed 14 Jun 2023 12:01:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199468
IP address blocks: 185.173.8.0/22 maxlen: 22
194.163.224.0/20 maxlen: 24
5.133.42.0/24 maxlen: 24
5.133.40.0/24 maxlen: 24
5.133.43.0/24 maxlen: 24
5.133.40.0/21 maxlen: 21
5.133.41.0/24 maxlen: 24
2a04:ed00::/29 maxlen: 34
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:c7:dd:9d:1a:c8:8b:d5:08:e6:a6:94:1a:13:93:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jun 14 12:01:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6f7cec01dd7d4ea6847ce30116987971fcb33fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ca:48:e4:f6:dd:f4:94:5f:6c:68:cd:62:51:
36:4d:24:61:36:de:b4:71:6c:00:34:82:28:77:45:
1c:ae:a9:f7:1b:c1:ce:7c:75:bc:43:a4:49:91:1d:
88:b6:9c:40:73:fe:a9:64:fb:e3:5e:54:e6:29:b2:
1e:d6:54:8c:95:fe:41:00:00:06:24:6f:05:11:88:
f2:d7:b9:c8:61:3d:b1:da:37:38:d8:ba:80:42:b6:
9a:6a:cc:a4:a6:8f:7b:fa:3b:1f:95:00:41:a9:4e:
b8:d4:5c:9e:8d:86:94:98:2c:62:14:39:57:d1:aa:
5c:51:96:a2:da:3a:ec:3c:27:77:ee:a9:78:ad:1f:
16:19:02:7a:1a:aa:06:6b:76:52:04:e5:94:d2:0f:
a4:b8:f0:ff:8d:93:cd:55:36:50:61:5d:6b:92:40:
04:f9:e1:66:ee:79:c5:89:3a:b4:e5:57:33:12:da:
56:7c:6a:10:72:a2:77:77:2c:b8:c8:0b:a0:2b:95:
89:77:60:31:b0:03:ed:00:07:02:16:a6:ec:7a:b3:
4a:8a:48:f2:7c:50:de:c6:51:7e:05:d2:96:f2:6a:
0f:87:89:2c:7b:dc:f1:a6:f0:4a:67:e6:b0:a8:07:
c6:4b:58:f5:44:46:40:89:08:72:ee:c0:dc:90:7e:
7f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F7:CE:C0:1D:D7:D4:EA:68:47:CE:30:11:69:87:97:1F:CB:33:FA
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/1vfOwB3X1OpoR84wEWmHlx_LM_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.40.0/21
185.173.8.0/22
194.163.224.0/20
IPv6:
2a04:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
01:c8:d4:60:29:67:fd:5f:47:03:b8:1b:19:21:c3:05:3c:ea:
84:7a:41:c1:9d:e9:cf:72:82:1c:a4:fa:ea:77:9f:9b:18:2a:
49:91:5d:85:c0:fe:80:f2:e8:59:86:5a:65:bc:e4:91:d8:20:
cb:4d:f9:71:73:34:a3:4c:76:c4:b1:a6:dd:a1:9f:c2:5b:19:
a2:5e:d9:01:60:9d:9e:ab:fb:d1:3e:05:8d:15:a2:f2:80:8f:
e6:05:1c:10:e8:22:5d:fa:f6:85:1a:0a:3e:0c:e1:f5:48:93:
4e:ae:b7:77:92:46:85:c2:01:67:3c:b8:00:24:ea:df:38:79:
44:09:46:dc:cc:6a:3a:3a:40:23:e7:60:28:e4:dd:6d:b1:2e:
cb:c6:6f:81:a1:a9:2f:04:70:13:60:33:d5:58:58:d2:5d:77:
25:5f:b6:92:b0:0f:8a:3a:94:10:ec:27:02:54:d0:9a:c9:8c:
0c:fe:bf:56:38:df:3d:06:31:a3:7d:64:bf:dd:43:60:0e:9c:
97:2d:49:5a:a7:bc:2f:25:42:e6:5e:6c:fe:43:0f:92:02:b6:
b5:3e:5f:e6:c7:60:62:93:14:89:ed:98:5e:38:31:97:b8:c9:
a9:1e:ab:fb:ed:40:b1:69:e2:14:0f:63:b8:23:2e:42:2a:15:
43:bf:5f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:03 2024 by rpki-client on console-fra.rpki-client.org