Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/05IJrRUte2Wq6EoY8yUtsyj5KcA.roa
File: 05IJrRUte2Wq6EoY8yUtsyj5KcA.roa (raw, json)
Hash identifier: 5LL+MsX6qmTptaFayTi7XS/S5RjC1FW0yH5LglVvAHU=
Subject key identifier: D3:92:09:AD:15:2D:7B:65:AA:E8:4A:18:F3:25:2D:B3:28:F9:29:C0
Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial: 01856C1CAB596ABD193D3DDC18D7567CA7CD
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/05IJrRUte2Wq6EoY8yUtsyj5KcA.roa
Signing time: Sun 01 Jan 2023 06:54:56 +0000
ROA not before: Sun 01 Jan 2023 06:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 193.97.185.0/24 maxlen: 24
193.97.186.0/24 maxlen: 24
193.97.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:ab:59:6a:bd:19:3d:3d:dc:18:d7:56:7c:a7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Validity
Not Before: Jan 1 06:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d39209ad152d7b65aae84a18f3252db328f929c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:86:52:38:6a:cb:f5:d5:5b:1b:94:6f:80:
ac:93:58:4c:6a:7f:0d:3f:37:dc:b6:90:14:2b:ae:
18:72:09:68:f9:a6:91:57:c3:df:b6:0e:08:72:14:
2e:9a:d6:c7:9e:0c:e4:2a:b9:5b:72:5d:c1:cc:cc:
f5:fe:3c:d5:59:67:c5:32:cf:ef:92:67:19:24:d3:
ca:bf:31:bf:e0:d6:3e:4d:e0:25:b3:8f:3c:32:93:
de:4e:c2:76:bc:a6:35:33:61:db:22:89:3c:70:65:
73:18:37:60:fc:f3:e4:4b:0a:df:57:bb:c0:02:d6:
04:db:f2:19:55:5a:f9:b7:c5:44:8c:be:db:2b:0c:
cf:40:29:fe:eb:d2:14:a2:6e:53:18:a8:8f:5b:6a:
5d:a0:4f:36:38:d2:41:d9:6b:a6:33:d6:fa:1b:da:
09:7f:d4:d4:2a:4f:44:d0:c8:1d:f3:b8:84:ba:35:
0f:fb:c8:f6:42:92:37:0b:42:ef:0b:20:70:74:c7:
5f:31:1d:60:f4:23:f9:9b:42:bf:9e:57:fe:5c:7b:
a6:ed:b0:e0:91:93:1b:7d:18:c0:50:81:5d:01:fc:
ce:bf:e3:7a:16:6c:24:99:b5:1a:2a:9f:55:a6:1b:
a8:b3:d1:83:54:9c:7b:af:97:80:82:d2:b7:2d:c7:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:92:09:AD:15:2D:7B:65:AA:E8:4A:18:F3:25:2D:B3:28:F9:29:C0
X509v3 Authority Key Identifier:
keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/05IJrRUte2Wq6EoY8yUtsyj5KcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.97.184.0-193.97.186.255
Signature Algorithm: sha256WithRSAEncryption
85:68:d9:9e:45:ca:76:cc:4f:c2:cb:28:e9:d0:e8:dd:b9:80:
ea:e1:9a:7c:86:1a:01:df:ba:67:0a:1c:f1:97:d0:73:ec:75:
7a:ae:7c:ae:97:4d:9b:0b:49:5e:33:61:34:64:97:60:ff:95:
15:d7:9f:8b:26:1f:67:4b:84:b3:af:b8:2a:9b:f7:e2:13:b9:
91:74:de:22:b6:29:eb:05:be:32:36:e2:e5:c1:90:34:4b:69:
9b:56:e0:46:fd:b9:5c:bf:0b:2e:b0:fa:b1:3f:2b:06:19:c5:
d3:c7:83:d2:50:9a:f5:57:f5:ab:db:ac:c8:73:22:bb:a9:02:
aa:a5:d7:1e:c0:1d:23:59:00:86:5a:63:c8:25:00:ea:ca:17:
2e:f2:5e:93:92:c7:74:56:85:d0:22:34:e2:62:50:41:a3:e7:
36:ec:8b:b8:9e:38:a3:2d:04:fe:86:a4:a9:0e:72:43:1d:4e:
dc:ad:76:af:18:0e:9d:fb:65:5e:3d:22:1f:61:d0:87:0f:11:
1c:a3:dd:9d:90:f2:03:65:c2:87:3f:22:4b:f1:03:04:d7:78:
74:b7:d1:22:da:19:b2:36:ee:cc:31:61:28:5c:77:64:fa:8d:
09:e2:9e:71:8b:d6:54:f9:5c:7f:8f:32:aa:88:3b:7a:fd:0b:
fe:e2:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:47 2024 by rpki-client on console-ams.rpki-client.org