Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2EGwaarAg9JHTzkIyQkIkQYdHCQ.roa
File: 2EGwaarAg9JHTzkIyQkIkQYdHCQ.roa (raw, json)
Hash identifier: +qa8VEDLtIsqwsFmEFE0xfttZCrYqjYsLiuHWiaoRQU=
Subject key identifier: D8:41:B0:69:AA:C0:83:D2:47:4F:39:08:C9:09:08:91:06:1D:1C:24
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018AF031EC64C4A1A79554127737FF58EDE0
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2EGwaarAg9JHTzkIyQkIkQYdHCQ.roa
Signing time: Mon 02 Oct 2023 11:41:58 +0000
ROA not before: Mon 02 Oct 2023 11:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9087
IP address blocks: 5.182.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:31:ec:64:c4:a1:a7:95:54:12:77:37:ff:58:ed:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 2 11:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d841b069aac083d2474f3908c9090891061d1c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:ed:b5:09:ec:ad:d3:07:5a:ee:b4:93:e2:
d5:27:1c:c5:93:1a:cf:13:65:74:cd:38:cc:1d:f7:
5b:67:22:a9:09:d3:b3:0e:93:35:71:71:e1:16:ad:
88:c1:08:c7:a8:8d:c9:0a:34:4d:5b:ac:68:d0:36:
87:14:78:d9:1d:40:f0:06:e5:c8:d7:fb:0d:f5:36:
07:6c:da:f8:58:35:72:53:b1:74:2d:76:49:79:dd:
97:02:39:bf:42:49:f7:89:19:a7:ee:35:77:5c:51:
c8:07:6f:41:b5:78:94:9d:e2:6b:64:75:0d:f1:84:
66:f2:1c:93:2d:e4:5f:88:02:db:28:f2:dd:b7:fa:
d6:49:37:6c:34:c8:ec:d1:70:99:25:06:2f:f0:24:
08:3e:8a:81:62:23:99:2a:94:9a:e9:14:f3:12:1c:
0c:29:ae:c3:7c:42:f0:e3:8f:c4:4f:0f:e2:95:21:
9f:22:93:a2:ff:ae:f0:5b:3f:54:23:2e:4d:e6:c1:
e0:f0:63:94:2d:fd:37:1f:94:70:0e:59:e0:9e:af:
d3:0c:4c:55:36:26:fb:2d:ed:0e:2e:1c:f5:b7:be:
cf:33:85:e6:89:12:a3:cb:8c:2e:1e:aa:0a:5f:8d:
50:03:17:9f:9b:63:3f:1d:fd:57:13:5e:10:e9:20:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:41:B0:69:AA:C0:83:D2:47:4F:39:08:C9:09:08:91:06:1D:1C:24
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2EGwaarAg9JHTzkIyQkIkQYdHCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.113.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e7:0c:27:76:c7:de:96:1a:e0:d5:d8:4c:23:de:b9:af:66:
78:77:fe:7d:26:d3:1d:a3:05:6d:f7:3e:69:4a:c3:e4:9a:70:
0a:ae:35:cd:81:da:23:e8:b7:13:95:d7:f2:03:6e:7d:4d:46:
b0:99:36:94:0b:b4:0d:05:f3:ca:ba:05:b9:96:72:fe:90:2b:
7e:b0:bf:28:13:3c:3e:d4:0e:a0:bc:ff:fc:a9:6a:98:cf:4c:
a2:6e:ea:bd:b3:bd:d6:2f:f4:9a:41:97:18:bd:73:7e:7d:e6:
88:e7:49:da:90:aa:fe:40:94:a9:10:93:a9:80:fb:4a:fc:d5:
3f:99:7a:3d:7a:4c:21:33:01:0b:80:b4:71:a8:61:39:d0:7d:
a1:17:55:c6:98:d2:da:1e:91:4f:1b:af:d4:09:0d:af:23:b1:
e7:63:1f:6a:95:4f:e2:86:52:0b:c7:38:d6:a1:c5:2c:46:c1:
86:92:c7:e1:b7:61:9d:51:c2:df:6d:18:fc:d5:1f:f9:a0:01:
44:32:31:67:7d:cb:21:3e:07:09:8c:a7:97:b9:41:5f:28:6f:
46:10:96:29:05:85:8b:82:69:ea:b9:83:59:39:80:0c:47:60:
5e:00:38:74:b5:55:f0:8c:49:27:e8:06:dc:a6:95:07:90:d4:
41:3e:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:26 2024 by rpki-client on console-fra.rpki-client.org