Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/5OMvua6jmOkpNpKeaLj-dMddgsk.roa
File: 5OMvua6jmOkpNpKeaLj-dMddgsk.roa (raw, json)
Hash identifier: PPkLja72rF+tKej9prI6DLkNJz/XfojNbSoUe/jqY0U=
Subject key identifier: E4:E3:2F:B9:AE:A3:98:E9:29:36:92:9E:68:B8:FE:74:C7:5D:82:C9
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 0187995955B2CCDFEAB4C197BE624A190E8E
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/5OMvua6jmOkpNpKeaLj-dMddgsk.roa
Signing time: Wed 19 Apr 2023 11:49:41 +0000
ROA not before: Wed 19 Apr 2023 11:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58291
IP address blocks: 185.79.152.0/22 maxlen: 22
185.140.184.0/22 maxlen: 22
5.39.184.0/21 maxlen: 21
2a02:f640::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:59:55:b2:cc:df:ea:b4:c1:97:be:62:4a:19:0e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Apr 19 11:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4e32fb9aea398e92936929e68b8fe74c75d82c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:b2:3f:73:96:43:04:3e:45:b1:f5:44:ed:
8d:73:63:d7:8d:0d:00:74:4f:a3:c8:c8:d7:18:4c:
d5:b1:c5:de:ee:fa:cb:69:a5:33:cf:f7:06:7e:8b:
4d:30:21:fa:c5:12:4b:33:52:2f:2c:fe:0b:80:b6:
1c:64:ab:8c:eb:ee:65:f1:47:d4:93:3f:b2:14:f1:
3f:d4:bd:80:55:3d:ca:66:b8:52:a9:06:e3:b6:f2:
bd:e8:77:61:b8:7c:56:a1:33:19:c5:96:ee:d0:b4:
6f:07:28:2d:21:12:c3:ce:23:47:3e:f4:63:1a:2b:
c3:53:08:66:92:49:55:17:0a:d8:b7:8e:2f:83:6b:
ca:12:4b:1b:3f:1f:88:e0:a6:85:cf:0a:ac:02:d3:
77:ad:1f:62:a3:50:03:88:d7:1a:85:58:b3:e2:66:
ab:7f:21:cf:79:ba:5f:03:49:67:9d:3f:fe:d9:97:
90:c2:89:40:34:e8:df:c5:04:cb:4b:56:20:9b:77:
3f:fb:ae:b5:41:d8:38:2f:fe:08:13:02:fe:92:9b:
63:ba:1f:30:4f:82:e7:ff:0c:b8:25:a4:33:2c:f6:
06:ae:13:af:86:10:97:73:7f:2d:08:79:e7:0e:9e:
aa:89:2f:c1:5e:dc:02:3b:0b:05:8c:2d:fe:aa:9d:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E3:2F:B9:AE:A3:98:E9:29:36:92:9E:68:B8:FE:74:C7:5D:82:C9
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/5OMvua6jmOkpNpKeaLj-dMddgsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.184.0/21
185.79.152.0/22
185.140.184.0/22
IPv6:
2a02:f640::/29
Signature Algorithm: sha256WithRSAEncryption
08:73:3f:d4:4b:91:70:72:cb:b6:fc:bf:73:03:24:89:7a:5b:
9b:0f:fd:6a:e1:80:ed:44:d2:69:fd:30:37:bf:f3:c1:a1:06:
c7:33:5a:bd:35:ac:55:bb:ea:2f:0c:ab:8f:3b:7e:22:3c:93:
87:b6:96:d2:3f:db:c7:3b:06:9b:02:34:56:69:e1:90:dc:37:
16:fb:ca:9e:8f:d5:20:d9:cd:fe:38:f8:8b:27:5b:af:c4:98:
27:14:7a:2d:10:2c:18:92:8a:d9:2b:26:7a:9d:06:e7:b0:c4:
61:cd:fd:dc:81:36:02:a5:62:b3:56:ca:3b:e6:88:5c:2d:35:
f1:c6:3c:6a:37:e4:75:c3:f8:a5:88:41:14:df:d1:50:04:c4:
41:a5:26:98:36:90:fd:13:54:3d:d1:37:57:31:f1:24:b1:fc:
41:26:34:92:43:18:f6:5d:0a:ee:eb:14:a9:4c:d7:c5:a4:4f:
ae:1d:3c:49:0a:80:d2:18:10:bb:2e:88:86:59:b6:db:b4:df:
3c:bf:c3:e5:9b:a2:37:37:c5:9c:67:97:ba:ae:ac:42:aa:de:
61:2b:3f:85:94:37:3c:ca:b1:14:2f:af:e7:5b:e4:16:94:af:
19:03:bf:a6:8b:01:17:f0:66:12:3c:80:07:21:e1:76:a4:89:
f2:60:29:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:52 2024 by rpki-client on console.sobornost.net