Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/MY5jZPsYXJm8c7cCKDlhbQ0XU2g.roa
File: MY5jZPsYXJm8c7cCKDlhbQ0XU2g.roa (raw, json)
Hash identifier: 5F2GC0wL2gqSjBOOtWtAlkyOxgIwqI9edQ7s69Sl1UQ=
Subject key identifier: 31:8E:63:64:FB:18:5C:99:BC:73:B7:02:28:39:61:6D:0D:17:53:68
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 018708EBDA0BF696DCE31987CD1CFD1F1605
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/MY5jZPsYXJm8c7cCKDlhbQ0XU2g.roa
Signing time: Wed 22 Mar 2023 10:44:47 +0000
ROA not before: Wed 22 Mar 2023 10:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 138.124.184.0/24 maxlen: 24
138.124.183.0/24 maxlen: 24
138.124.180.0/24 maxlen: 32
138.124.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:eb:da:0b:f6:96:dc:e3:19:87:cd:1c:fd:1f:16:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Mar 22 10:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=318e6364fb185c99bc73b7022839616d0d175368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:08:9d:e0:b3:01:42:78:d5:d4:30:10:7e:
ab:7b:a1:c7:ed:2f:0f:88:aa:b2:8e:1d:a1:ce:70:
23:c2:ef:86:ac:b0:01:e5:78:47:16:94:c7:dc:43:
15:91:04:5f:3d:49:50:fb:c6:82:9c:9c:d5:2b:c6:
cf:1e:e6:17:8c:80:38:35:c6:a4:e6:91:a9:15:c0:
05:75:9b:df:3c:63:2b:e1:d7:ad:17:80:3c:f8:ad:
b2:10:3a:ab:21:f1:2f:36:d1:76:75:0c:66:86:4d:
2f:b4:1e:40:ba:af:68:38:74:a1:cf:da:25:50:d0:
5e:c7:f3:d0:9f:a0:dd:11:0f:96:07:68:39:a5:8a:
a3:29:c6:b7:48:17:01:79:17:28:e8:52:86:46:fc:
6c:37:74:d4:4b:d7:2f:e2:a2:70:95:f6:43:93:0d:
57:86:80:97:a5:69:c6:00:27:51:3b:a9:b4:ac:a9:
40:68:7e:b8:df:bd:1f:00:e9:b7:cd:82:92:d2:c6:
fa:10:87:2f:23:41:81:42:65:45:64:c2:fd:6a:0b:
aa:c1:81:4d:05:f8:8e:a0:f7:b7:35:3e:e4:19:54:
2d:08:ea:41:75:e8:3f:c2:c1:8f:9f:1b:3d:e3:66:
0d:97:41:75:dd:4d:3b:54:be:69:15:2f:74:96:89:
42:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8E:63:64:FB:18:5C:99:BC:73:B7:02:28:39:61:6D:0D:17:53:68
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/MY5jZPsYXJm8c7cCKDlhbQ0XU2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.180.0/24
138.124.183.0-138.124.184.255
138.124.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:91:76:28:d3:18:2d:39:9e:0b:4b:d8:b4:0f:ba:f5:91:2c:
74:d2:19:1c:19:3f:fb:b3:07:d5:5b:c5:28:40:38:7c:b6:a3:
ed:1c:bb:2f:e0:8b:c3:dc:b1:70:3a:d2:5c:76:6e:67:ac:65:
bd:ae:ba:0a:6a:fa:ef:b6:16:6b:d7:99:ac:f5:5e:ac:71:41:
a1:c5:2d:a3:d7:21:41:d3:4d:33:85:d8:b2:72:54:a3:23:23:
b2:7d:75:93:63:59:8b:bc:0e:98:56:d7:1f:fe:20:d6:7e:e0:
ff:10:18:86:15:67:cd:f1:ab:d4:0b:ff:84:b2:14:62:2b:74:
41:f4:9e:2f:82:f8:66:c9:cf:3c:c7:ec:ee:87:9e:15:d1:ff:
af:e8:13:a1:8d:33:8f:ea:5d:5d:2f:b5:ad:e9:c1:ec:c8:60:
4d:9c:fe:6e:02:a8:98:46:9e:29:e0:d9:b0:b1:f7:b5:73:4a:
82:27:29:b9:87:05:71:4f:68:1c:00:7a:9a:e1:9d:40:3b:84:
90:e4:5b:50:b9:f2:f0:0a:c7:a0:2c:37:31:1a:3e:08:79:de:
69:55:3b:17:f1:31:4b:1a:1e:4e:35:1c:9f:53:66:15:c7:21:
0c:63:25:8e:89:75:14:e4:0b:22:19:ca:24:5d:9d:a3:aa:5f:
7c:21:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 20:28:29 2023 by rpki-client on console-ams.rpki-client.org