Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/5OWbwkxsamQdtX8-UpX-zC0AYNI.roa
File: 5OWbwkxsamQdtX8-UpX-zC0AYNI.roa (raw, json)
Hash identifier: HwbPCzW5cYXwScxGywV18Izqe06zQR9+sv9ftHOClOY=
Subject key identifier: E4:E5:9B:C2:4C:6C:6A:64:1D:B5:7F:3E:52:95:FE:CC:2D:00:60:D2
Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial: 01856E78DA276409E630519F0B347886D35A
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/5OWbwkxsamQdtX8-UpX-zC0AYNI.roa
Signing time: Sun 01 Jan 2023 17:54:51 +0000
ROA not before: Sun 01 Jan 2023 17:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201996
IP address blocks: 87.246.42.0/24 maxlen: 24
87.246.43.0/24 maxlen: 24
87.246.40.0/24 maxlen: 24
87.246.41.0/24 maxlen: 24
212.5.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:da:27:64:09:e6:30:51:9f:0b:34:78:86:d3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Validity
Not Before: Jan 1 17:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4e59bc24c6c6a641db57f3e5295fecc2d0060d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:b9:c6:c2:e4:59:b1:31:1f:38:f7:d1:15:
66:ec:f2:ca:59:fd:63:80:2e:d9:36:54:84:f7:6f:
93:0c:77:11:ad:9d:92:f5:8b:01:44:63:b4:ea:54:
de:20:be:73:45:13:3c:c6:32:93:e3:90:37:79:d2:
c0:82:90:70:4c:67:2b:b7:84:4c:9d:44:6f:ed:08:
1f:29:0a:ee:90:2f:cc:1a:2b:6e:89:7c:d3:94:8f:
f2:25:69:cc:6c:be:d3:83:b5:94:c8:21:65:1a:de:
0c:cf:4b:a7:09:a6:cb:15:96:99:51:fa:ec:ac:9f:
ea:4c:fe:47:94:db:df:5e:d4:39:d7:c6:a8:11:34:
a8:e0:f9:70:52:3f:06:c7:4d:9e:3a:af:a8:36:c3:
06:5a:69:6e:fe:b3:2b:96:17:1b:e9:3f:25:94:f7:
5d:be:d3:54:dc:95:92:e2:88:18:75:d3:57:09:10:
07:c0:8f:b9:48:6d:82:e3:c0:42:cc:84:a2:d7:61:
61:db:b4:d9:20:33:2e:e6:0d:49:6b:2b:70:54:d0:
7a:24:5e:43:18:24:67:9b:69:d3:e6:d2:fc:3e:de:
c7:37:c3:35:aa:5f:f9:57:c9:f1:85:ed:d4:c4:58:
86:ad:f3:4f:b2:6e:68:0d:b4:f7:cf:17:58:6d:05:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E5:9B:C2:4C:6C:6A:64:1D:B5:7F:3E:52:95:FE:CC:2D:00:60:D2
X509v3 Authority Key Identifier:
keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/5OWbwkxsamQdtX8-UpX-zC0AYNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.40.0/22
212.5.60.0/24
Signature Algorithm: sha256WithRSAEncryption
27:2e:dd:99:48:d6:b6:52:06:41:19:64:dc:7b:34:41:14:9c:
36:cc:27:4d:de:b4:f1:ba:8d:b7:c1:aa:57:96:6c:95:77:47:
97:5e:10:6c:63:18:ca:cc:20:f6:60:ff:1f:76:9d:e9:13:c4:
4f:db:a0:ea:e6:df:1d:8f:67:a5:27:7c:c3:c8:2a:e3:90:87:
b3:44:ae:91:2f:a5:c8:3d:64:9f:fd:8a:f5:67:4f:7c:07:0a:
7a:5c:8a:8f:d2:53:cc:1f:2b:c3:97:14:f0:b7:5d:ec:3f:90:
7c:fa:40:e4:1a:b7:3f:eb:df:5c:1d:49:68:24:84:47:4f:47:
9c:eb:79:5c:7c:13:c6:ce:eb:e2:15:25:50:fe:84:5c:f1:c1:
31:fa:8e:bf:e1:40:fd:95:c1:a1:09:d2:9b:d6:ca:d1:cf:d8:
b9:d1:d5:cc:cf:4c:b7:43:4e:1b:b4:3f:1b:52:b4:04:56:1c:
96:33:79:92:b9:3a:17:45:c6:c2:a1:39:fa:5e:b9:47:4a:cb:
79:37:95:da:53:5c:05:0d:8a:26:a1:1b:33:2a:be:15:5d:5b:
1a:1c:a4:d9:43:ac:77:3d:73:46:77:e2:77:11:9c:13:32:94:
6b:20:e1:ce:d5:bf:89:ba:1a:8e:91:8c:bb:fc:97:d0:02:13:
bb:83:5b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:35 2024 by rpki-client on console-fra.rpki-client.org