Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/5-VafXmkVG7xBkLFE3ws5EkCY7s.roa
File: 5-VafXmkVG7xBkLFE3ws5EkCY7s.roa (raw, json)
Hash identifier: R42JUZYOB8CZM+flZFXZ1ILQBwY1n4VFp2bkJbMoKN0=
Subject key identifier: E7:E5:5A:7D:79:A4:54:6E:F1:06:42:C5:13:7C:2C:E4:49:02:63:BB
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01867EC57D59F9AEF2233F1A3F1CE536BB7E
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/5-VafXmkVG7xBkLFE3ws5EkCY7s.roa
Signing time: Thu 23 Feb 2023 14:55:17 +0000
ROA not before: Thu 23 Feb 2023 14:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49729
IP address blocks: 45.132.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Mar 2023 14:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:c5:7d:59:f9:ae:f2:23:3f:1a:3f:1c:e5:36:bb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 23 14:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7e55a7d79a4546ef10642c5137c2ce4490263bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:0b:19:6d:0f:0b:1c:37:30:61:65:0f:a5:
c6:56:33:b9:d8:b6:61:f6:c4:0a:89:f8:03:3f:43:
24:fc:fb:d8:41:1e:05:d9:08:47:3b:4c:90:4d:4f:
01:c1:c5:c4:07:b8:dd:79:35:98:d3:5b:50:a7:1a:
30:f4:e0:e3:4c:e4:84:9c:53:f3:d5:37:e6:2d:63:
e0:26:63:35:51:8d:a8:48:56:d2:01:7b:cf:0e:49:
06:2f:cf:d2:ca:f9:79:ee:86:e7:6f:47:3a:c0:d5:
17:0b:af:da:23:21:05:81:db:23:75:e7:31:31:f5:
7c:ce:1d:bb:05:80:7e:99:b2:89:61:d3:95:6c:a4:
1d:46:47:ff:b4:75:70:e0:2a:90:a2:d8:f6:5e:dc:
70:73:0e:c7:77:b5:16:7f:fa:d8:8c:8a:55:47:d6:
ee:f1:39:69:b7:bf:59:48:6b:da:f4:a1:35:c6:ba:
c2:39:96:e9:6c:93:98:09:b1:92:c8:5a:cc:f1:99:
73:78:16:0d:12:11:73:c1:13:a7:36:aa:0a:7b:d8:
33:19:8d:ff:91:40:c4:1a:e6:07:05:79:12:9c:21:
54:32:17:e6:8e:25:6c:f1:25:d2:a4:75:71:79:61:
fd:43:29:df:f5:71:fa:9d:6f:fc:e0:70:2e:60:59:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E5:5A:7D:79:A4:54:6E:F1:06:42:C5:13:7C:2C:E4:49:02:63:BB
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/5-VafXmkVG7xBkLFE3ws5EkCY7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.205.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c7:c0:e9:a4:b3:2a:ca:aa:a2:6a:a2:fa:56:b9:28:84:d2:
b6:2c:fd:f9:db:5b:c3:00:75:0b:b1:6c:e0:1e:65:7b:57:06:
d3:6c:06:86:af:b5:cc:21:42:35:8c:45:da:e7:16:93:15:28:
96:3d:ed:ca:d7:62:fc:d5:3b:fe:12:7c:52:9d:ac:d1:25:62:
ad:c3:92:cb:d4:ea:04:6c:09:cb:27:58:7d:34:48:11:c5:ab:
e5:4e:ad:b5:e8:da:17:f2:e6:61:c5:47:33:26:6f:39:f2:fb:
b8:1c:b7:50:51:30:2b:dc:80:40:64:37:6a:cf:11:80:aa:9e:
b2:fe:a4:16:4c:98:2b:07:f0:d8:31:cd:b3:d7:d3:65:8f:e9:
63:49:f1:4d:aa:86:ed:ec:ad:3d:85:20:d9:7a:5c:e4:cb:44:
0e:a4:ea:cc:c6:d2:e3:46:b6:1a:08:6e:8d:cc:43:b8:5a:0d:
cc:15:8d:cf:4d:e5:31:14:f6:93:cf:65:79:58:90:f2:e8:fa:
40:9e:ba:96:d2:4a:2b:be:12:c4:6e:24:e8:b2:04:39:f9:63:
51:d5:b0:26:53:0d:4e:12:b9:a9:82:5a:27:1f:c4:81:91:48:
42:0d:c8:f4:1b:b3:55:8b:a7:0d:39:a9:ee:15:8b:07:c1:b6:
1c:21:92:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org