Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/5rsaIx723aZeHahv9krrCiy3r94.roa
File: 5rsaIx723aZeHahv9krrCiy3r94.roa (raw, json)
Hash identifier: uvYVxkfsVhRaJJTFRH+JEZbDt785YVZz9Cy5dpVD8Pw=
Subject key identifier: E6:BB:1A:23:1E:F6:DD:A6:5E:1D:A8:6F:F6:4A:EB:0A:2C:B7:AF:DE
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 0185724C55D42E5A2AA0107BBE502468279F
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/5rsaIx723aZeHahv9krrCiy3r94.roa
Signing time: Mon 02 Jan 2023 11:44:43 +0000
ROA not before: Mon 02 Jan 2023 11:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59989
IP address blocks: 185.111.6.0/24 maxlen: 24
185.111.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:55:d4:2e:5a:2a:a0:10:7b:be:50:24:68:27:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Jan 2 11:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6bb1a231ef6dda65e1da86ff64aeb0a2cb7afde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d5:0a:a4:45:21:b4:3c:55:a6:ad:c6:89:9f:
d5:f5:0a:4a:5b:fe:76:01:b9:f5:7d:bd:d2:c1:10:
20:30:52:39:10:79:2f:f7:92:c8:5b:be:3a:b6:33:
30:55:3f:c5:42:6d:35:2f:5b:77:8b:09:4c:aa:dd:
29:65:98:c0:14:60:c7:f9:46:3d:58:5e:93:f8:85:
32:46:29:dd:b3:4b:cf:54:f5:a2:3f:f2:d9:41:3f:
33:c1:a1:33:f9:a0:56:41:4e:ab:87:9d:c7:7a:fe:
e6:9c:72:e0:16:cf:27:64:ed:98:52:41:f5:16:f5:
1e:e2:3b:e9:05:fc:ec:a6:49:da:f8:d5:28:b2:20:
e5:80:f3:c8:e4:d1:f0:2d:0e:fe:c3:2e:46:bc:55:
cd:8d:ee:8b:a4:b3:9c:d7:d1:ef:39:ff:f8:c9:59:
e8:57:a2:da:0c:64:be:96:db:b6:5d:f2:36:a3:6b:
ad:bb:35:84:8f:e7:6a:fe:20:aa:af:ae:12:a2:03:
12:a2:d7:26:43:c1:17:b3:b1:70:5e:08:65:79:c4:
c3:94:6d:d0:88:5c:94:c2:73:f7:8f:0a:a0:6f:0d:
f2:20:37:d3:66:ee:df:b0:72:cb:dd:5c:8b:52:00:
0d:18:94:70:7c:58:c9:6d:78:ce:b3:c4:34:d5:6f:
84:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BB:1A:23:1E:F6:DD:A6:5E:1D:A8:6F:F6:4A:EB:0A:2C:B7:AF:DE
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/5rsaIx723aZeHahv9krrCiy3r94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.5.0-185.111.6.255
Signature Algorithm: sha256WithRSAEncryption
4a:e3:b8:d4:3e:05:ed:1b:bc:b3:85:a8:89:bb:20:a8:41:d7:
b1:62:3d:43:dd:e6:57:16:b3:47:35:26:26:57:3e:f0:46:d2:
57:17:b3:1f:25:35:df:ec:98:b4:bd:8f:33:9a:02:c5:d5:98:
92:58:cc:2c:6a:3e:91:f1:87:9d:e5:67:1b:86:52:55:a6:5c:
76:58:3e:53:05:15:b3:58:f3:97:8f:eb:c0:4d:27:52:da:f6:
83:af:de:43:01:74:64:8d:36:1b:4f:c8:96:a3:b1:c8:57:68:
44:8e:86:50:f6:fb:07:64:65:ff:43:d3:e3:c5:f8:59:09:b6:
1c:95:6b:05:8c:7f:b8:ea:af:0a:c8:3e:3c:4f:c8:db:c3:aa:
d6:f0:50:79:7d:ba:57:57:79:f6:c0:f9:b3:22:86:da:be:ad:
33:ef:65:6a:da:8a:3f:82:05:b2:4d:26:99:b7:9f:15:b3:9c:
81:2e:ef:b9:b0:21:13:6d:b7:d0:72:47:a6:63:6c:3e:9d:e5:
38:c7:2e:1c:f3:25:31:b8:d8:47:f4:91:92:4f:8d:b6:de:1f:
7d:6d:58:ae:42:e8:4b:d2:7e:7f:b7:58:64:2e:4a:9d:64:5f:
bb:e9:ef:12:93:80:fe:ee:75:1a:e6:1b:94:f1:fd:92:0b:f8:
11:8b:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:56 2024 by rpki-client on console-fra.rpki-client.org