Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/5PIcdnIQc6T-s3P-_G7nlaO_kDY.roa
File: 5PIcdnIQc6T-s3P-_G7nlaO_kDY.roa (raw, json)
Hash identifier: 9Ter5jXa1YIVWVQ1kbTSA4RmIJNKCFnhvnxUjgENt5A=
Subject key identifier: E4:F2:1C:76:72:10:73:A4:FE:B3:73:FE:FC:6E:E7:95:A3:BF:90:36
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0192711481D6F643F38C1D06346A91D1F858
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/5PIcdnIQc6T-s3P-_G7nlaO_kDY.roa
Signing time: Wed 09 Oct 2024 11:40:22 +0000
ROA not before: Wed 09 Oct 2024 11:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 171.33.240.0/24 maxlen: 24
195.8.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 18:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:14:81:d6:f6:43:f3:8c:1d:06:34:6a:91:d1:f8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Oct 9 11:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4f21c76721073a4feb373fefc6ee795a3bf9036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:ef:96:52:8c:cf:c8:6a:0c:ed:40:16:13:
b0:2c:39:88:14:f4:bd:64:43:20:5f:bd:9a:43:8c:
2d:b2:68:79:3b:10:eb:b3:d6:7f:32:89:31:e5:b9:
d7:a1:f3:09:ef:0e:8e:82:95:be:60:42:16:cc:b7:
13:a9:be:6c:83:11:bc:a7:e4:11:00:be:81:80:9f:
f6:89:4c:ec:f9:81:c7:ea:39:d8:e5:7d:4e:4b:e1:
95:be:30:c7:67:cd:1f:86:d9:f0:40:6b:4f:ef:fa:
ab:be:91:e5:ce:2a:5a:7f:3d:c2:db:34:bc:ea:e2:
9e:32:48:12:a2:21:cc:43:34:fb:d4:8d:7c:bf:b0:
de:6d:4e:d1:2e:2c:ca:41:29:50:4c:30:20:94:81:
4e:3e:b7:d3:c8:8f:df:65:da:83:0b:1e:da:58:93:
b9:fb:8f:27:43:64:28:f5:7e:84:0c:f5:28:e8:46:
82:7b:a6:e2:dc:b2:a1:34:65:ea:f1:14:22:f2:d7:
b5:ea:7d:f7:a9:27:ab:f3:dc:bf:e3:5e:c4:22:a0:
4e:95:9c:1d:62:a4:03:5e:86:20:78:26:64:08:9e:
55:3f:2e:54:b3:dd:01:61:7e:14:c6:c7:ff:ec:dd:
9e:42:0a:4c:ce:c1:f1:84:d7:14:f1:b2:79:2d:d1:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F2:1C:76:72:10:73:A4:FE:B3:73:FE:FC:6E:E7:95:A3:BF:90:36
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/5PIcdnIQc6T-s3P-_G7nlaO_kDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.33.240.0/24
195.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5b:a6:05:b6:4c:3a:1d:6a:5d:1d:83:e1:f7:8b:4b:90:6d:
f6:e8:59:02:30:62:28:9c:4e:72:49:41:cc:70:68:cf:87:f9:
7a:08:e1:5e:e9:f3:91:92:91:c3:bc:9d:7a:df:4c:75:14:37:
15:cc:06:96:6a:36:c0:b0:9c:94:e2:d7:a9:d2:dc:6f:af:47:
10:b2:3b:a6:d5:90:58:a0:57:f8:bb:88:6e:e1:71:a6:b4:7e:
39:8a:f9:71:15:90:d7:df:f9:5d:1d:aa:eb:dd:ab:57:13:5a:
00:61:be:1b:ed:fd:4f:3a:e3:c8:f3:56:9b:51:f1:ed:a1:78:
df:6e:5f:0a:2c:e2:24:b0:46:74:e5:1e:52:8d:06:20:56:18:
a0:61:e5:f4:21:f6:b5:f0:32:83:7b:ab:f8:6d:f2:0a:8f:5a:
b9:ee:27:e3:01:e9:ce:bd:8e:dc:ce:61:0a:eb:a5:cc:9e:d0:
20:4f:c0:0d:61:47:b0:42:f9:62:34:49:a2:e6:f4:5b:76:14:
2c:42:5c:f0:e4:ef:f9:a9:cb:11:4a:d8:58:7b:18:fc:e7:17:
cd:ba:2e:fe:0a:ad:d6:b4:81:09:4e:30:47:3f:96:4b:19:77:
2a:e4:43:34:d6:80:77:4a:9c:1e:62:13:d3:2e:48:14:2c:2e:
e5:e6:ed:a4
-----BEGIN CERTIFICATE-----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Generated at Thu Oct 10 21:18:42 2024 by rpki-client on console-fra.rpki-client.org