Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/_1whUp8SmyffUjTHTNLOZujNHqQ.roa
File: _1whUp8SmyffUjTHTNLOZujNHqQ.roa (raw, json)
Hash identifier: qpc4Uuhlbbzr2FNyFfyLU0dxCCQIJ7hXwNte6yy8y7Y=
Subject key identifier: FF:5C:21:52:9F:12:9B:27:DF:52:34:C7:4C:D2:CE:66:E8:CD:1E:A4
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01897411221D5E4D47E5CBE30E771C36FEEB
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/_1whUp8SmyffUjTHTNLOZujNHqQ.roa
Signing time: Thu 20 Jul 2023 16:10:27 +0000
ROA not before: Thu 20 Jul 2023 16:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 152.89.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Nov 2023 22:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:74:11:22:1d:5e:4d:47:e5:cb:e3:0e:77:1c:36:fe:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jul 20 16:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff5c21529f129b27df5234c74cd2ce66e8cd1ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:d2:51:c5:d4:22:56:04:b9:43:71:98:87:
29:30:ba:6d:aa:1a:fc:3b:f5:20:f2:5a:20:fb:f4:
bb:ff:63:5f:82:10:57:75:9c:5f:24:ed:b2:64:dc:
3b:ab:57:48:15:d0:3e:30:22:85:2c:fc:16:28:7e:
94:ed:5e:ac:70:e7:7d:dd:ce:ea:a8:82:0d:2c:4e:
6b:af:b3:52:55:b0:82:7b:79:63:80:20:85:b3:83:
46:22:86:c1:5a:95:20:90:04:e7:ef:74:7f:73:dc:
9e:ee:f9:0b:61:a3:53:02:cb:d1:a2:0a:db:8a:f2:
6f:3d:f9:59:00:fa:8f:a7:e9:ce:49:f3:08:98:44:
f9:c1:16:51:25:51:95:ea:c0:ca:b2:45:68:b2:89:
3b:c9:b5:31:ae:39:93:9e:3f:39:0d:c6:b9:d5:95:
d4:ed:12:10:ce:2d:44:51:9b:2e:bc:e6:bc:ff:67:
fa:a0:32:4a:70:72:33:95:be:85:17:5f:cd:4e:57:
95:2e:7b:2c:63:6a:42:6a:41:ca:05:8e:e2:d1:09:
34:39:23:7b:3b:d8:37:87:d9:5b:30:6b:fe:78:5a:
2a:c5:83:3b:06:73:ab:aa:11:99:92:1e:f7:fb:ae:
d2:4b:27:ca:53:c8:6b:3d:9f:24:99:bc:bf:25:d1:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5C:21:52:9F:12:9B:27:DF:52:34:C7:4C:D2:CE:66:E8:CD:1E:A4
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/_1whUp8SmyffUjTHTNLOZujNHqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f1:f9:f6:27:ec:19:ce:55:05:18:ed:16:ff:2b:dd:2c:4c:
b0:96:bb:a5:31:7b:87:95:be:f9:ef:e4:83:5e:07:29:60:2d:
f4:aa:a4:0f:e0:2c:50:7c:7a:e0:eb:34:e6:33:02:a8:c4:45:
17:98:21:02:bf:cb:9b:9d:df:84:b3:75:d2:c5:54:7e:d5:af:
c0:80:6e:e9:31:a8:0a:b9:dd:e1:f5:cc:5a:85:48:a0:0d:97:
66:b8:a2:1c:8b:66:89:1d:aa:85:f2:81:60:eb:13:6d:95:cd:
af:e1:5c:bf:59:36:0b:7b:1f:be:9a:2b:25:c6:69:12:df:f3:
7c:39:8e:0b:30:1a:ea:88:f8:cc:ea:9e:15:16:fb:e5:46:ce:
10:0d:80:78:3d:8d:ca:ce:66:84:71:28:13:bd:d7:69:87:c9:
10:5c:21:50:66:e9:e5:97:db:e0:03:b8:d9:86:77:8d:0c:03:
f7:68:e3:b9:b6:74:3c:31:bb:56:fe:f5:01:37:d2:e1:4d:36:
d5:8a:80:bb:53:27:ae:5c:f4:ac:ea:51:83:7b:0a:85:c3:7a:
c4:a0:80:92:a9:f1:d3:ee:49:0a:ec:ba:3d:ef:c2:a8:12:d9:
53:e2:9d:06:81:df:12:a7:af:97:cb:3c:2b:96:0c:e8:c0:e6:
e1:37:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:30 2024 by rpki-client on console-fra.rpki-client.org