Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5-3A-guw6l3sp2FvqF6-2oqsJp8.roa
File: 5-3A-guw6l3sp2FvqF6-2oqsJp8.roa (raw, json)
Hash identifier: IjHsnP+vFYeETtxGm59/UFX8DFBq8Zn/5nMTlndLkYY=
Subject key identifier: E7:ED:C0:FA:0B:B0:EA:5D:EC:A7:61:6F:A8:5E:BE:DA:8A:AC:26:9F
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 018570F0AAB7ABC8BEA4C686AAB6EBD754B8
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5-3A-guw6l3sp2FvqF6-2oqsJp8.roa
Signing time: Mon 02 Jan 2023 05:24:58 +0000
ROA not before: Mon 02 Jan 2023 05:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13170
IP address blocks: 213.255.163.0/24 maxlen: 24
213.255.164.0/24 maxlen: 24
213.255.184.0/24 maxlen: 24
213.255.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:aa:b7:ab:c8:be:a4:c6:86:aa:b6:eb:d7:54:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Jan 2 05:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7edc0fa0bb0ea5deca7616fa85ebeda8aac269f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:61:72:50:e9:6c:a1:d6:9c:71:44:00:30:
72:8d:eb:b8:91:b3:e3:9c:e2:0a:8f:ce:d1:bc:cc:
fb:dc:01:08:82:3c:40:84:84:1d:a2:52:94:2b:f2:
29:83:0f:27:90:7a:ea:c9:d6:b0:54:7f:4f:6a:d1:
63:c3:7c:07:8c:85:49:d8:d7:fa:65:1d:c0:64:eb:
3b:04:fc:2a:70:e7:93:b7:3a:c7:23:6a:f1:11:be:
8a:a3:42:a7:bf:88:c6:57:f2:15:e1:9b:0d:2b:46:
30:ac:2b:8c:eb:7b:e1:e8:f8:ed:c7:32:cf:83:a9:
21:eb:92:62:45:b7:dc:79:c8:3a:1d:9d:e7:73:76:
d5:cf:b2:d9:e4:37:38:aa:32:93:2f:ca:62:2a:42:
33:5d:f1:93:ec:27:12:de:61:fc:ee:14:b2:c8:4b:
04:7e:51:1a:30:14:40:24:e7:08:e1:e2:d0:65:62:
0d:1b:bf:e5:0f:45:de:3a:28:0b:b0:59:47:1d:99:
07:51:5d:67:2a:44:96:d6:a5:25:36:07:08:5e:35:
27:b3:5d:52:b5:ce:48:0e:5c:51:b0:30:4e:b4:6b:
17:df:48:0c:90:2e:7f:40:7c:6a:a7:f9:a9:52:79:
0c:a9:76:ba:04:d8:47:4d:85:c7:78:bd:25:f7:b0:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:ED:C0:FA:0B:B0:EA:5D:EC:A7:61:6F:A8:5E:BE:DA:8A:AC:26:9F
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5-3A-guw6l3sp2FvqF6-2oqsJp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.255.163.0-213.255.164.255
213.255.183.0-213.255.184.255
Signature Algorithm: sha256WithRSAEncryption
13:b3:5f:24:e6:c4:14:e2:55:4b:fc:41:5a:5d:64:e0:eb:07:
46:83:2d:0d:e3:ec:50:a0:ff:7c:f7:f9:3a:0c:5d:54:e5:a4:
f4:fc:3a:d7:a0:0a:4b:88:17:5e:36:29:7b:d3:40:a1:16:b2:
f5:4f:8d:ab:51:45:72:c7:07:91:19:82:e2:90:28:15:d8:9c:
10:d0:e3:0d:df:29:f6:24:9e:a5:67:f2:0c:cd:b8:91:e5:28:
b1:b8:3e:5b:a6:77:22:ba:f7:ae:9c:23:ce:74:29:35:b9:2b:
bb:e8:13:be:b3:5b:fc:49:de:44:68:0b:ae:52:e4:fb:d7:f6:
05:d1:e8:f6:37:8e:dc:0b:de:d0:34:18:bd:33:8d:ff:83:a6:
86:db:94:9d:58:d8:56:58:2e:9c:1f:a6:d2:94:84:13:9f:9d:
eb:94:dd:f5:60:a4:0b:7a:e6:15:42:49:a9:e7:5f:82:c1:06:
43:cd:11:25:12:19:62:d1:8a:61:9d:83:45:2d:00:90:1d:03:
b0:46:f5:8f:66:1c:bd:69:44:a5:82:2d:84:da:45:a3:82:3d:
2c:2d:b5:5a:36:9b:7b:a0:37:38:67:17:51:7c:5b:8a:c3:cf:
89:ad:3e:92:8e:72:97:80:01:84:e8:1a:5e:07:cb:f1:dd:95:
87:0f:7c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:17 2024 by rpki-client on console-fra.rpki-client.org