Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/DBpXP-h7ajH8IlSI5x29aNtyr7U.roa
File: DBpXP-h7ajH8IlSI5x29aNtyr7U.roa (raw, json)
Hash identifier: VkCZGzNswKRc/d+VLjMXd1kgVBSe9HsUdN2QD5OCS4w=
Subject key identifier: 0C:1A:57:3F:E8:7B:6A:31:FC:22:54:88:E7:1D:BD:68:DB:72:AF:B5
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 0185706723110FBF01D423AEB2580D8E5E97
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/DBpXP-h7ajH8IlSI5x29aNtyr7U.roa
Signing time: Mon 02 Jan 2023 02:54:45 +0000
ROA not before: Mon 02 Jan 2023 02:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201150
IP address blocks: 185.169.20.0/22 maxlen: 22
5.202.96.0/22 maxlen: 22
185.169.36.0/22 maxlen: 22
5.202.0.0/19 maxlen: 19
185.103.128.0/22 maxlen: 22
5.202.16.0/20 maxlen: 20
5.202.132.0/22 maxlen: 22
185.180.52.0/22 maxlen: 22
5.202.29.0/24 maxlen: 24
5.202.58.0/23 maxlen: 23
5.202.60.0/22 maxlen: 22
5.202.64.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 11 Dec 2023 05:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:23:11:0f:bf:01:d4:23:ae:b2:58:0d:8e:5e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 2 02:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c1a573fe87b6a31fc225488e71dbd68db72afb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:3f:b5:b9:3d:9b:a2:ae:3c:9d:b6:d5:bf:
68:dd:aa:70:24:8f:57:8b:ba:9d:41:91:69:41:20:
10:ed:93:ca:2f:01:58:d6:03:11:69:ae:6a:2a:1f:
90:5c:2a:00:8b:79:71:cd:39:25:0c:d6:ef:53:6a:
28:ea:14:95:b0:ea:f0:9d:63:3a:68:ce:a5:31:f8:
db:03:49:c6:1d:ff:a2:34:61:69:8f:19:2f:0e:e1:
c9:6d:b7:4c:4a:ed:87:8d:bb:5c:63:18:ba:02:78:
e8:76:4d:2b:70:9d:85:b1:e9:fd:e3:07:2f:fb:b3:
0b:34:f3:81:68:eb:87:7b:0f:bd:93:56:ab:52:e9:
e3:0e:06:ab:d6:af:5d:eb:e6:bf:0d:4d:83:df:40:
b8:76:8b:2a:96:c3:0f:de:a9:b7:d3:0e:7f:37:4a:
22:7c:3a:cb:59:41:10:cc:5d:a9:a1:8d:0a:0e:7c:
80:96:ed:f4:21:4f:bd:b4:19:2b:e4:6b:35:de:71:
d7:d5:2c:ed:57:40:c0:c5:44:ae:f1:fa:b7:ec:25:
53:6f:60:7e:ce:fe:4f:bf:9d:38:65:04:a1:42:a8:
9a:7f:a3:70:43:a5:1d:00:9e:df:10:03:b8:ca:7a:
98:0f:27:0c:6a:1e:78:98:d7:f9:dd:7f:46:83:e0:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1A:57:3F:E8:7B:6A:31:FC:22:54:88:E7:1D:BD:68:DB:72:AF:B5
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/DBpXP-h7ajH8IlSI5x29aNtyr7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.0.0/19
5.202.58.0-5.202.65.255
5.202.96.0/22
5.202.132.0/22
185.103.128.0/22
185.169.20.0/22
185.169.36.0/22
185.180.52.0/22
Signature Algorithm: sha256WithRSAEncryption
55:a0:8f:d6:17:05:56:1c:8a:54:c7:d8:1d:78:f6:43:30:5c:
c4:5f:90:23:0c:7b:43:be:bf:5f:6a:ca:76:70:a4:11:b6:7f:
42:0e:07:0b:20:2e:7f:66:81:eb:cb:f4:6e:9d:15:d8:f1:76:
48:3d:ca:30:a1:e5:84:97:ea:99:2d:15:bb:56:fb:fd:66:fa:
b8:f8:24:9f:77:9d:4f:b2:48:6e:27:0d:67:f5:11:7b:20:ad:
c2:76:6c:f0:0b:1f:66:12:04:a1:c7:92:0e:8c:cd:23:2f:4c:
e5:89:c3:f3:29:d3:c4:9d:fb:13:e5:56:fe:53:8e:b9:f2:52:
d3:cb:a5:7e:51:25:ff:9b:e5:71:d5:ae:ab:0e:6e:34:95:8c:
16:47:40:32:25:e5:c4:d7:0a:b2:e1:63:66:d0:ff:e2:29:0f:
5f:f7:f4:3f:4d:4b:8b:c5:12:fe:2d:d5:f1:13:d3:a8:3e:c6:
8a:cc:a0:65:9f:10:b2:cf:6a:3f:7c:7b:9d:bb:e1:83:22:8a:
ab:ad:91:3b:0b:cb:d9:ac:7d:10:dd:f9:51:24:18:8f:ae:92:
14:fb:9c:03:c0:91:7a:39:5f:2c:c6:4b:a7:27:39:b0:9a:99:
f7:21:47:46:b2:fd:d8:6e:f0:a4:1a:3e:05:98:46:95:21:d0:
fc:54:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:10 2024 by rpki-client on console-fra.rpki-client.org