Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/u5GJSjn2h4mbL5a_-wvZtWzAzww.roa
File: u5GJSjn2h4mbL5a_-wvZtWzAzww.roa (raw, json)
Hash identifier: SZoOUOfEu4u7eQHM6h8OjXTQ4xICrbLzeJbQIipb9p8=
Subject key identifier: BB:91:89:4A:39:F6:87:89:9B:2F:96:BF:FB:0B:D9:B5:6C:C0:CF:0C
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 0187B43E1A8D03BF91FAF37EADFAE500B9E2
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/u5GJSjn2h4mbL5a_-wvZtWzAzww.roa
Signing time: Mon 24 Apr 2023 17:09:41 +0000
ROA not before: Mon 24 Apr 2023 17:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46844
IP address blocks: 86.104.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 08:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b4:3e:1a:8d:03:bf:91:fa:f3:7e:ad:fa:e5:00:b9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: Apr 24 17:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb91894a39f687899b2f96bffb0bd9b56cc0cf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:8b:ec:5b:59:cd:2b:86:e8:2c:15:69:8e:
b4:75:bb:b9:28:16:5b:30:ec:25:30:df:3d:15:6a:
be:6a:5f:a9:5d:92:20:37:98:68:7b:c7:c8:cd:85:
8c:8f:cb:3e:c4:f8:c7:5e:6e:c7:c5:2b:bd:6d:2a:
29:f0:4e:d0:dd:24:eb:70:a7:5d:19:12:e4:0e:bb:
6b:43:2d:cb:ed:76:52:82:d1:de:d0:90:81:df:b6:
4d:4b:bb:65:4b:dd:cb:29:b8:c2:8a:1d:1d:ec:23:
8c:ad:c1:4d:6d:dc:83:19:b1:c9:a6:c7:8a:b1:fc:
9d:ab:a3:4a:2f:b3:7b:fc:34:b8:5b:19:21:8a:e4:
cc:9b:f8:2b:c6:3e:76:99:f8:5a:70:bc:e1:c2:31:
98:61:e9:2d:ae:91:a0:32:c0:ce:93:91:47:7d:c8:
db:20:54:86:b4:2b:d2:dc:0b:5b:05:a0:9e:f0:9c:
86:7a:4b:e7:40:ce:45:d2:74:30:47:fd:22:f2:d0:
2f:37:e8:91:0d:ba:82:96:96:6e:64:bc:b5:89:4a:
62:a7:bc:fd:4a:06:57:71:87:7b:23:4e:70:9d:c7:
aa:39:d7:6f:58:3d:1b:b4:b5:e7:6c:3a:46:22:a3:
bd:1d:fb:f7:27:53:fd:6c:eb:94:5e:17:1e:4b:09:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:91:89:4A:39:F6:87:89:9B:2F:96:BF:FB:0B:D9:B5:6C:C0:CF:0C
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/u5GJSjn2h4mbL5a_-wvZtWzAzww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.8.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1e:51:55:41:53:cc:ea:09:52:cf:72:8b:ca:b5:9b:80:a5:
af:02:cb:8b:cd:c8:be:45:31:f4:15:67:27:98:b4:00:c5:70:
75:aa:cf:17:13:e1:65:72:6e:4a:ea:b6:e3:43:7a:76:d1:1a:
30:2e:61:9d:03:ed:36:dc:92:87:92:d6:8e:cf:54:a7:2b:90:
e9:d9:a1:15:cc:87:b5:cf:62:0a:7a:cf:60:2e:65:8f:d3:e5:
23:81:34:d1:65:99:3d:30:d1:d3:43:e8:8c:75:f1:03:cd:84:
3f:3c:b7:2a:e6:5d:6e:23:f0:04:4c:3b:ba:7e:9d:4e:bb:14:
b2:15:1b:0d:22:15:9b:b9:d9:6b:0c:25:7e:a4:6c:59:2c:47:
d0:04:7e:b6:9a:29:07:64:36:94:b9:09:26:54:ab:7f:72:97:
c9:21:f9:68:aa:f4:c7:44:6b:83:3e:41:ca:7b:45:4d:3d:b5:
24:c6:79:60:c9:80:51:57:9b:29:29:25:9f:38:12:38:a0:0c:
55:82:b9:1f:65:02:fb:16:78:5d:2c:f9:85:7f:d1:a5:fb:3e:
89:85:40:95:a3:8e:d0:10:ca:4f:8e:b6:3d:3d:67:b1:1e:56:
07:57:d8:84:40:3a:04:5d:1a:e5:c2:5d:9b:ab:c2:7c:ae:65:
65:9a:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:05 2024 by rpki-client on console-ams.rpki-client.org