Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/W3RVVH9PE9hrzZaDAI3TVGC_6eg.roa
File: W3RVVH9PE9hrzZaDAI3TVGC_6eg.roa (raw, json)
Hash identifier: ExI365Gk8FopydCvtIBPmk6pUYmWFU82UOJ/Im98eOQ=
Subject key identifier: 5B:74:55:54:7F:4F:13:D8:6B:CD:96:83:00:8D:D3:54:60:BF:E9:E8
Certificate issuer: /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial: 0189AC4CE33B2F2B0890A4A635168056BB62
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/W3RVVH9PE9hrzZaDAI3TVGC_6eg.roa
Signing time: Mon 31 Jul 2023 14:14:27 +0000
ROA not before: Mon 31 Jul 2023 14:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59554
IP address blocks: 5.178.112.0/21 maxlen: 21
2a01:9b40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:4c:e3:3b:2f:2b:08:90:a4:a6:35:16:80:56:bb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
Validity
Not Before: Jul 31 14:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b7455547f4f13d86bcd9683008dd35460bfe9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:4e:e6:af:ce:72:c9:ca:9b:e2:a0:50:73:
3b:ef:d4:e9:cc:d9:5d:70:b3:01:58:7a:f6:3b:1a:
b2:95:5d:1f:47:d4:af:8a:79:20:c6:70:e3:f6:87:
73:b2:5f:1e:c4:98:cb:9c:45:89:94:4c:f1:1b:74:
5e:8b:ee:8c:7d:c2:ef:84:92:b9:38:96:0e:73:2c:
e8:b4:b6:33:c5:09:ff:ee:aa:2d:79:e0:39:b8:93:
3a:e6:3e:38:b1:80:71:74:8b:87:55:e5:32:91:22:
90:bc:05:08:87:3b:82:41:db:63:b7:69:ea:45:20:
b4:b9:7c:e0:78:aa:02:a4:9f:88:66:cf:c5:79:03:
68:ed:cc:ef:d1:81:5f:b3:ee:7a:07:50:3d:43:9f:
fd:98:50:31:1b:90:8f:39:2a:88:40:22:2a:fa:05:
6a:65:13:51:df:bd:02:9c:17:91:e0:6e:a0:25:94:
b1:7b:1c:59:e8:a0:84:bd:f8:1e:7b:20:6d:ef:72:
1a:70:e5:25:95:24:96:8f:54:7e:a7:58:93:95:be:
c0:b7:c5:be:9c:6c:c2:7b:33:a3:63:05:51:73:0b:
f1:b1:6e:49:47:ae:b2:10:f3:94:44:59:12:c8:0e:
14:7f:ec:42:1d:6b:fd:3f:64:2b:0b:8b:06:29:d8:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:74:55:54:7F:4F:13:D8:6B:CD:96:83:00:8D:D3:54:60:BF:E9:E8
X509v3 Authority Key Identifier:
keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/W3RVVH9PE9hrzZaDAI3TVGC_6eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.112.0/21
IPv6:
2a01:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
64:4d:a9:be:b8:fd:45:33:94:f0:90:2e:96:ff:2b:9f:82:14:
39:61:0e:12:0e:b3:b3:7f:9b:fd:cb:1e:10:e4:9c:37:2a:01:
89:e4:19:4a:e1:9b:81:a6:27:f2:cd:c5:5b:b7:e6:32:4d:5e:
ff:0d:77:d0:2b:c0:fc:f3:79:3a:e1:a9:fc:a0:f6:b3:d8:b3:
14:c2:71:44:ab:e3:1b:03:7d:63:4e:71:6f:c6:7c:84:40:51:
89:31:ca:63:89:a9:09:45:40:98:d8:ca:3a:b0:d0:3b:b4:d6:
38:e4:e2:95:3c:91:df:21:e2:fb:fa:1e:e2:f7:ba:28:f6:a9:
95:31:36:00:28:f0:2d:e8:1a:c7:8e:5f:38:89:3a:9e:70:46:
eb:32:d0:12:40:85:6c:31:48:c8:40:5d:9a:6b:84:6d:b2:cf:
c2:78:77:5e:82:b8:e7:8d:ff:28:84:5f:7a:55:8f:8f:57:85:
cc:5f:23:d0:67:49:fb:5b:b6:24:ed:7f:c4:ba:fe:3e:42:a7:
b2:af:3c:ed:cb:86:03:09:ba:26:44:97:e0:55:7f:ee:35:5f:
00:e8:e1:ad:bf:b9:5f:a8:02:82:88:9b:28:37:c4:ba:fb:cb:
4a:20:ab:eb:ca:de:2c:90:db:32:ca:11:00:2b:92:2d:4b:8e:
39:ae:e2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:42 2024 by rpki-client on console-ams.rpki-client.org