Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/2IIkARS4WK8epRRu1-bqn_3JI9g.roa
File: 2IIkARS4WK8epRRu1-bqn_3JI9g.roa (raw, json)
Hash identifier: w2Vg60tNMQK+kJJWp6GQQsNrAxUBlkvlI6e5Gm0EL+U=
Subject key identifier: D8:82:24:01:14:B8:58:AF:1E:A5:14:6E:D7:E6:EA:9F:FD:C9:23:D8
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 018CC3B73F8C758B288DC3715FF67273A0B2
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/2IIkARS4WK8epRRu1-bqn_3JI9g.roa
Signing time: Mon 01 Jan 2024 06:30:15 +0000
ROA not before: Mon 01 Jan 2024 06:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212954
IP address blocks: 5.253.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jan 2024 08:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3f:8c:75:8b:28:8d:c3:71:5f:f6:72:73:a0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Jan 1 06:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d882240114b858af1ea5146ed7e6ea9ffdc923d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:33:e1:b8:4c:3f:a2:f7:42:7a:f4:25:e7:
c5:db:39:93:6b:01:d0:31:7f:6e:a8:9a:3f:23:a2:
56:b8:44:e9:60:32:01:f3:2c:cf:a5:06:48:4b:35:
01:57:92:03:2c:66:43:33:d2:26:24:14:c6:0a:ed:
e3:e2:93:7e:2a:3a:7b:eb:2c:46:f0:4c:8c:c8:b1:
6a:d8:84:2c:49:96:28:46:04:11:5f:9f:0c:f8:0b:
d7:bd:bc:23:90:08:b4:28:82:f8:f6:58:76:04:ff:
42:6a:a9:2e:34:61:c4:56:54:9d:42:14:4b:82:de:
b4:48:b5:dc:f8:d1:a8:1d:68:38:7d:bc:ab:5a:86:
a2:62:36:3d:70:11:04:aa:fc:8e:33:d7:92:01:a4:
0b:f1:b4:39:e7:79:e3:a3:8e:45:33:cb:77:c0:97:
42:a4:64:13:20:4b:60:f0:38:19:1c:d3:57:71:c6:
52:92:8f:82:9d:2c:bd:29:e2:ab:0f:22:d3:a3:f6:
cb:53:f1:e3:62:8c:75:ed:27:22:c9:93:7b:29:8b:
92:6b:b5:5b:b3:13:31:bf:04:d0:b5:3b:74:91:2d:
03:c7:19:c2:d4:b2:ad:55:e6:f3:e6:f0:f6:15:57:
9f:f2:f0:84:69:71:0b:72:c1:51:8d:96:bd:39:79:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:82:24:01:14:B8:58:AF:1E:A5:14:6E:D7:E6:EA:9F:FD:C9:23:D8
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/2IIkARS4WK8epRRu1-bqn_3JI9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.130.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e4:8c:2d:78:20:2c:9f:36:4a:4c:24:c8:b7:5e:57:89:76:
36:3a:0f:84:b3:44:28:f5:a0:6b:f1:13:95:b6:87:54:a7:e9:
bd:a8:1b:e4:83:e6:f5:32:ee:ab:55:17:c9:a2:61:0d:a9:9b:
b1:0c:72:10:5d:10:8a:13:fc:01:d8:00:e0:3c:39:16:50:8d:
8e:af:27:57:0f:dc:18:e6:c1:1d:88:81:4a:84:52:8a:f7:d0:
85:f7:a8:9d:61:9c:bf:67:4e:c5:c1:25:d7:ae:3e:6b:a6:15:
55:e2:35:99:b9:8d:53:f7:38:fd:67:c5:ef:6b:8b:f3:27:e0:
08:9d:7b:12:94:61:17:79:ac:1e:0d:c1:72:20:20:52:b5:70:
66:6e:58:e0:83:bf:4b:28:68:27:39:e2:a7:00:34:4f:ea:08:
14:34:5e:51:45:5c:92:4e:d9:0e:70:b1:1b:4e:65:a1:5c:51:
44:07:a6:f1:d0:84:90:bb:f8:8c:48:16:d3:9b:8c:70:26:f0:
ab:02:12:de:03:00:99:03:57:d8:b4:b7:50:55:45:6b:28:f4:
c7:41:7a:15:e7:33:c0:de:c8:1d:04:13:f4:ba:e2:2e:7b:c9:
8f:8f:40:29:c1:30:92:62:74:a7:1a:a4:a1:69:9d:92:8f:07:
44:ee:99:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:54 2024 by rpki-client on console-fra.rpki-client.org