Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/ecAy7d-5LYa8ToyH-1H5pQgkvEQ.roa
File: ecAy7d-5LYa8ToyH-1H5pQgkvEQ.roa (raw, json)
Hash identifier: 5N5iMDh0AvBFBexSSHT9YLEBqAF2sOGI1osX4ybq7V4=
Subject key identifier: 79:C0:32:ED:DF:B9:2D:86:BC:4E:8C:87:FB:51:F9:A5:08:24:BC:44
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 018C67678331D3F89F323CC0A9EDD2595DFB
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/ecAy7d-5LYa8ToyH-1H5pQgkvEQ.roa
Signing time: Thu 14 Dec 2023 08:18:06 +0000
ROA not before: Thu 14 Dec 2023 08:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59720
IP address blocks: 185.5.232.0/24 maxlen: 24
185.5.233.0/24 maxlen: 24
185.5.235.0/24 maxlen: 24
185.5.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:67:83:31:d3:f8:9f:32:3c:c0:a9:ed:d2:59:5d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: Dec 14 08:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79c032eddfb92d86bc4e8c87fb51f9a50824bc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:97:a6:ad:ad:4c:e2:ef:5f:71:99:55:59:
96:11:85:e4:dd:a5:df:20:58:bd:55:15:6e:5f:18:
c2:0c:a2:02:88:3e:5f:3e:3b:ca:27:99:83:15:62:
91:81:a1:39:f4:2a:9c:49:ae:34:57:8b:f3:e8:1f:
ff:0e:29:1d:97:49:73:92:30:20:10:5d:45:91:49:
a9:e1:47:c0:16:c0:13:67:68:e7:3e:24:8d:8f:82:
62:23:67:6b:d0:b6:00:2e:e9:ba:ec:30:8c:dd:e5:
65:7b:8f:4d:9f:87:89:6d:12:80:3e:04:18:d9:8d:
ad:42:6c:72:52:42:5b:5f:93:eb:fa:7b:30:94:cb:
1d:ce:55:5a:64:5c:d5:e7:d8:ea:aa:5c:d0:d9:13:
ab:6f:fa:ab:3d:18:61:56:37:d2:fe:1e:ae:fa:ab:
9c:9e:55:a3:73:12:a4:fc:7f:13:b5:6e:17:97:6f:
68:3c:97:f0:07:1e:4a:7b:f6:20:dd:34:cc:7e:e7:
d1:86:5b:6e:94:a4:3b:d2:16:ed:c6:16:b1:75:05:
f2:cc:d8:f7:98:c7:0b:ff:62:cc:0e:bb:a3:d1:b1:
95:2d:8b:0f:fb:c8:85:ea:1a:38:eb:91:bf:af:8f:
17:98:4b:5b:0a:aa:62:2e:2f:5d:c1:57:61:b4:34:
1d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C0:32:ED:DF:B9:2D:86:BC:4E:8C:87:FB:51:F9:A5:08:24:BC:44
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/ecAy7d-5LYa8ToyH-1H5pQgkvEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.232.0/22
Signature Algorithm: sha256WithRSAEncryption
62:8d:d8:04:da:ea:c9:48:2e:ce:aa:c0:1b:a6:88:01:22:e9:
16:f7:63:ba:b1:88:56:ef:28:b7:d3:c0:bd:02:f6:15:9b:0b:
3b:70:e7:0d:86:b4:9b:71:68:00:0a:34:1c:83:fe:da:ad:c9:
dd:88:c1:09:77:c1:61:a6:05:cd:93:2d:8c:b7:d6:2f:18:3b:
8b:bb:c3:6f:95:c8:e7:7d:7e:13:5f:43:f8:58:cc:0f:48:0f:
3d:2d:37:6d:98:25:fe:6b:2b:c8:7d:85:15:25:b8:8f:94:2c:
f0:42:e8:3c:f1:aa:48:56:4e:5a:5d:1e:3f:58:59:29:89:e9:
e8:de:1d:8d:72:d2:d8:46:fc:96:c0:ca:87:d0:5f:0f:8a:3f:
3a:79:89:b7:20:76:d6:0d:fb:96:97:b4:f7:df:0f:45:2b:b2:
ff:f0:7b:98:e4:01:f7:65:f2:a7:2e:d2:7d:b0:9f:7e:5a:16:
9e:47:89:0b:89:cd:20:92:12:bc:09:33:54:77:93:9f:18:54:
25:97:2a:bb:42:90:3f:fa:9c:1a:33:11:f4:95:47:d0:e1:73:
ec:7f:84:58:45:25:35:c9:02:5b:a3:6e:22:5c:0d:74:80:d1:
06:93:14:7d:98:62:04:7a:8b:eb:a5:8d:65:78:5a:65:94:7e:
48:b5:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net