Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/MiQiH-0A6ehAvwiH8LehT0V8NSE.roa
File: MiQiH-0A6ehAvwiH8LehT0V8NSE.roa (raw, json)
Hash identifier: zj9HEg3adQn/G0ehWOJxPaN93OMCDrcpX9WLR5BLzGQ=
Subject key identifier: 32:24:22:1F:ED:00:E9:E8:40:BF:08:87:F0:B7:A1:4F:45:7C:35:21
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018F724B42189825B55950AF4321B83245DA
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/MiQiH-0A6ehAvwiH8LehT0V8NSE.roa
Signing time: Mon 13 May 2024 14:11:25 +0000
ROA not before: Mon 13 May 2024 14:11:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 5.188.51.0/24 maxlen: 24
5.188.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 08:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:4b:42:18:98:25:b5:59:50:af:43:21:b8:32:45:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 13 14:11:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3224221fed00e9e840bf0887f0b7a14f457c3521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:4b:17:74:d5:a0:cc:02:d1:3d:f5:3f:73:
0e:3b:25:c8:d0:bd:72:dc:ec:0b:3e:48:6d:d4:81:
10:bc:55:e1:05:52:42:a1:f5:db:35:e9:78:73:e1:
6e:8c:da:c5:60:58:a2:f2:be:e4:bd:cf:80:a2:ef:
1c:9c:e4:f9:16:c5:95:7d:ae:23:cf:10:b3:ff:ca:
e9:b8:f7:90:6a:78:93:be:8c:58:87:bf:44:d9:5a:
f9:c2:d1:a3:5b:9e:51:4b:89:37:b7:97:ad:03:34:
db:36:b9:f9:94:ed:61:b7:1e:c6:04:b3:84:57:6c:
50:a1:60:f5:63:10:b9:c3:90:f9:6d:1b:b2:c2:ba:
c2:69:98:e4:7c:c1:b5:18:67:65:25:a8:b3:a2:4f:
52:88:b6:05:41:2e:8f:85:84:12:e1:a9:01:3e:9c:
fb:21:19:7b:f0:a6:0c:1c:2d:ea:a9:61:87:45:6c:
59:73:87:47:9d:ab:70:d9:70:1b:3d:18:d1:1e:76:
e3:10:f7:08:12:28:60:2f:08:57:bc:44:a5:e1:62:
00:f9:72:f4:b2:d8:f4:b9:6a:c9:da:a5:76:56:83:
2e:65:91:14:b1:a3:a4:8a:88:0a:ed:59:14:b8:50:
07:81:92:b3:f6:09:21:aa:a6:e0:9f:7e:34:ca:d5:
56:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:24:22:1F:ED:00:E9:E8:40:BF:08:87:F0:B7:A1:4F:45:7C:35:21
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/MiQiH-0A6ehAvwiH8LehT0V8NSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.51.0/24
5.188.203.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8a:56:8c:a0:b3:ad:4a:4a:ae:70:32:c6:4a:06:d2:e7:65:
73:94:bc:a6:7d:cb:75:27:74:ad:68:b2:12:2b:4c:84:ea:49:
c7:38:ff:8b:e5:1d:b0:ff:ac:34:0e:6e:1d:97:0c:70:a6:2b:
48:e7:d6:38:5b:df:ee:cc:79:78:a8:bc:69:67:b8:6d:e5:2f:
9c:b6:32:32:ad:d8:3b:4a:dd:aa:fa:98:7f:ba:44:72:78:a8:
a9:63:b8:16:0e:be:3f:0e:c7:63:58:2e:18:04:f4:7e:21:19:
c4:06:46:5d:b6:88:c5:81:de:99:40:f6:56:db:b0:7f:5b:81:
80:17:90:c2:0e:c7:9c:f1:9c:72:c9:63:1c:b2:d9:86:78:10:
da:3a:3b:82:28:7b:43:66:bd:64:dc:89:7a:d6:d1:0b:16:70:
a2:13:12:b3:10:7e:0b:5e:1b:b6:ab:c0:c9:04:48:0b:bf:a4:
fd:97:d8:de:19:43:70:0d:f6:9e:f9:a8:03:02:4a:f2:0e:65:
d1:ba:45:ed:4c:7d:b0:b4:7e:9d:00:53:b6:17:bc:da:f2:8c:
38:31:8a:b1:24:f0:26:35:1d:74:5c:ac:6d:1a:84:f9:86:5e:
7c:9a:b3:91:e5:e9:4e:7e:55:fb:42:6c:12:b0:09:2e:9a:0d:
fb:c2:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:55 2024 by rpki-client on console-ams.rpki-client.org