Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/sl5b05JXmdXjn793ORqTK96gBE4.roa
File: sl5b05JXmdXjn793ORqTK96gBE4.roa (raw, json)
Hash identifier: vZiSLVlgZVr+WtYV6ku+NK0W2/PuezJG/ZtpWpBYAuo=
Subject key identifier: B2:5E:5B:D3:92:57:99:D5:E3:9F:BF:77:39:1A:93:2B:DE:A0:04:4E
Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial: 018571BA0717524A57BF675934A95305AFF4
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/sl5b05JXmdXjn793ORqTK96gBE4.roa
Signing time: Mon 02 Jan 2023 09:04:55 +0000
ROA not before: Mon 02 Jan 2023 09:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51691
IP address blocks: 37.16.96.0/20 maxlen: 23
178.213.232.0/21 maxlen: 21
37.16.112.0/20 maxlen: 20
2a00:4cc1::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Jul 2023 12:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:07:17:52:4a:57:bf:67:59:34:a9:53:05:af:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
Validity
Not Before: Jan 2 09:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b25e5bd3925799d5e39fbf77391a932bdea0044e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:da:3f:01:5e:67:92:48:11:11:74:a0:06:6a:
e3:cd:af:57:8e:74:a3:9f:83:1f:74:88:1f:e8:cb:
9b:02:e8:70:a8:78:22:d5:31:98:33:16:54:9b:4d:
3c:27:eb:c7:f2:7e:d0:03:12:ff:c3:b3:e2:c3:94:
a1:e0:de:ad:1d:c2:8c:58:e4:b2:c7:c8:64:61:df:
25:3d:27:c8:cf:01:78:f3:d6:22:6e:cf:19:fc:80:
65:0f:4f:09:02:82:75:cf:99:26:8f:dd:57:b4:43:
23:63:35:fb:54:72:70:1b:7c:9b:ba:0b:b6:ea:aa:
19:00:6c:ff:7b:34:ff:6e:b0:e8:db:90:15:7f:b8:
7e:9d:4a:61:ac:62:f6:d5:d8:13:0d:95:98:d0:88:
80:b0:c2:fa:03:5b:98:9f:3c:35:a5:7e:97:f6:80:
cb:19:6c:2b:ae:10:4e:51:c9:8a:da:09:c8:8b:23:
d8:6a:a5:12:56:99:85:d9:e4:9b:7b:a1:b4:23:6a:
69:8b:07:3a:77:0d:25:05:c4:c8:ba:cd:93:da:03:
db:e9:40:e4:07:b8:ff:d1:17:e9:1b:aa:9f:13:e6:
90:f3:7f:08:ad:4d:9a:1c:50:6e:99:5f:1d:5d:b3:
09:a7:f2:fd:24:b3:ec:d1:d7:09:80:ba:35:19:ce:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5E:5B:D3:92:57:99:D5:E3:9F:BF:77:39:1A:93:2B:DE:A0:04:4E
X509v3 Authority Key Identifier:
keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/sl5b05JXmdXjn793ORqTK96gBE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.96.0/19
178.213.232.0/21
IPv6:
2a00:4cc1::/32
Signature Algorithm: sha256WithRSAEncryption
ae:98:e7:4a:ac:ca:06:a6:e2:dc:f9:f2:c0:8f:5e:3d:0a:10:
e3:21:45:d8:13:46:c4:9d:93:17:97:e6:7a:56:0a:0b:94:1a:
06:84:11:c7:11:70:85:85:72:10:a6:46:79:ec:30:ee:b0:91:
5e:ba:ff:87:a2:ed:6d:d0:09:c0:15:df:d6:d3:46:6a:db:67:
37:11:89:6d:ae:26:f8:fb:3a:3f:24:75:a2:b1:e5:08:d4:26:
d9:66:f7:67:39:a4:7c:3b:7b:a7:07:4f:07:e1:2e:fd:ff:61:
ee:43:db:7e:dc:82:59:54:0b:a9:a1:9e:69:54:e7:fe:c4:c4:
1e:92:bd:76:a6:16:e3:a3:e6:91:48:2c:9b:76:cd:25:4c:41:
c8:b9:f5:e4:3e:b4:5b:17:da:90:4f:12:1c:76:de:46:9a:3d:
97:26:40:e2:78:96:8e:3b:12:97:45:a8:b0:88:1b:bc:c6:b4:
62:f2:81:a1:ae:86:44:7c:6d:7e:8f:50:ba:b6:a1:84:64:d5:
72:12:03:dc:5d:2d:64:bc:86:00:bf:f3:15:11:0f:b4:32:29:
ac:fb:a8:8e:0f:23:94:5a:6c:db:3e:13:29:7c:ed:e5:07:0d:
4d:df:69:9d:cd:ac:fd:d9:c1:1a:83:ce:f4:37:48:3b:dd:48:
45:d8:3d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:16 2024 by rpki-client on console-fra.rpki-client.org