Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/pYAHEUHoe4Rfw05yqH89roUgIQ4.roa
File: pYAHEUHoe4Rfw05yqH89roUgIQ4.roa (raw, json)
Hash identifier: 1RE0qA672vgZImFPpqCGJONPb5ebSW63ca/4FpQLRg0=
Subject key identifier: A5:80:07:11:41:E8:7B:84:5F:C3:4E:72:A8:7F:3D:AE:85:20:21:0E
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 01856BEEB3DBCCC8D511CB5FC58260F157B9
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/pYAHEUHoe4Rfw05yqH89roUgIQ4.roa
Signing time: Sun 01 Jan 2023 06:04:43 +0000
ROA not before: Sun 01 Jan 2023 06:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 185.173.8.0/22 maxlen: 24
5.133.40.0/21 maxlen: 24
2a04:ed00::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:b3:db:cc:c8:d5:11:cb:5f:c5:82:60:f1:57:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jan 1 06:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a580071141e87b845fc34e72a87f3dae8520210e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:be:f0:f9:60:75:c8:c6:77:9c:58:47:c0:
c3:27:67:13:59:fc:bf:e6:ec:cd:c3:66:1d:79:78:
df:cd:49:0b:15:42:49:b6:6c:fe:ba:d2:c3:86:91:
b9:bc:6b:7f:c5:1e:ba:b1:aa:4e:29:ca:0c:73:d6:
cb:23:e9:8c:6a:00:9d:d5:09:cd:0b:f8:74:07:9f:
04:cf:f4:8c:9d:49:c8:20:92:19:37:fb:36:f4:e9:
60:c9:27:ed:7c:d1:fc:be:ad:95:20:d5:b9:ca:fd:
3e:f6:d9:e6:9a:ce:ff:29:8c:c3:d0:69:6b:0f:0b:
33:12:b3:97:20:72:ce:09:db:72:94:a0:d5:bd:b7:
09:9d:eb:3a:a5:e8:ba:85:a4:8a:32:a2:72:ad:b5:
10:d9:68:5b:c1:8e:02:9d:03:5e:59:8a:0d:86:eb:
26:7c:25:fb:fe:73:2b:40:2c:57:9d:51:2d:04:c2:
55:f6:95:45:39:d4:5b:93:9e:34:86:fa:bb:78:2e:
f0:0c:af:c7:ef:fe:9d:a3:e1:87:fe:a6:f8:66:5e:
ab:d1:09:3a:d7:15:6c:a0:da:e7:de:c1:61:01:3e:
2e:dc:27:ba:03:84:e3:fa:46:d7:61:a5:b0:fd:5d:
e5:6a:d5:2f:08:ec:6b:e6:3f:48:75:b5:38:b8:0a:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:07:11:41:E8:7B:84:5F:C3:4E:72:A8:7F:3D:AE:85:20:21:0E
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/pYAHEUHoe4Rfw05yqH89roUgIQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.40.0/21
185.173.8.0/22
IPv6:
2a04:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
92:c4:78:76:77:9e:13:19:b7:5f:8d:29:ee:a3:d7:99:e3:ca:
05:5b:e7:03:e1:1e:72:cd:07:2b:ea:2e:9b:42:16:e7:ac:ea:
df:7e:3f:f8:fd:29:51:99:06:82:63:bd:e8:bc:6f:17:6b:5d:
e3:8c:27:bf:5e:b5:ec:bc:80:46:ea:ee:52:48:56:b1:07:60:
9a:23:97:ae:1d:90:7d:69:78:81:0c:67:42:43:b1:41:ea:c4:
98:92:39:65:70:e2:49:3b:2b:fe:90:c2:5f:f4:78:f2:0a:b8:
69:3d:25:8e:40:7f:e6:43:51:08:62:fb:39:31:e2:61:54:4c:
dd:15:de:0f:9f:95:0d:5f:f3:02:c0:e2:c2:91:32:14:1e:f6:
70:93:0f:38:2d:2d:f1:65:8b:cb:59:7e:bd:65:00:fe:f7:79:
35:4d:5e:00:f0:6b:4d:46:b2:32:ae:4a:f9:3e:e9:00:f3:80:
8e:ca:b1:90:6c:76:aa:a3:9b:23:fe:0a:96:76:74:55:8e:17:
bc:59:45:ae:60:14:c9:b4:49:39:b7:ab:5d:4b:72:ea:c8:3c:
ed:3a:4a:12:c2:9a:88:ca:2f:e6:c6:bc:bd:60:69:0f:87:89:
75:1d:d7:e5:69:00:fa:2f:44:e9:f2:ee:82:90:e9:f3:80:50:
db:ae:5c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:03 2024 by rpki-client on console-fra.rpki-client.org