Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/urb937Ap-2NDWBRpMi0zJFK0eP8.roa
File: urb937Ap-2NDWBRpMi0zJFK0eP8.roa (raw, json)
Hash identifier: 5M2BeTUVwVqDgY5L1wEJPd4aN85MZf+fCyohQvwLhW4=
Subject key identifier: BA:B6:FD:DF:B0:29:FB:63:43:58:14:69:32:2D:33:24:52:B4:78:FF
Certificate issuer: /CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Certificate serial: 0185714C2A37C3F85AF17144DF89B0E7AE9A
Authority key identifier: 81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/urb937Ap-2NDWBRpMi0zJFK0eP8.roa
Signing time: Mon 02 Jan 2023 07:04:54 +0000
ROA not before: Mon 02 Jan 2023 07:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209448
IP address blocks: 5.253.164.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:2a:37:c3:f8:5a:f1:71:44:df:89:b0:e7:ae:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Validity
Not Before: Jan 2 07:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bab6fddfb029fb6343581469322d332452b478ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:56:98:3d:cd:1d:dc:b7:84:75:ec:40:0c:67:
ad:99:6c:0a:7f:1d:7e:4c:64:e1:de:f4:2f:81:3f:
e0:75:64:a5:1f:b3:15:94:c2:4c:ff:5f:48:d9:6a:
97:db:f9:c9:f4:b2:e0:f8:81:45:81:f4:7d:fa:4a:
98:3d:a6:1d:94:75:30:49:53:83:92:6e:a4:e5:4a:
11:ce:72:a8:ee:a4:c7:48:49:83:e3:4d:b1:1e:1a:
83:b2:a0:08:a9:55:9e:1a:bf:93:cf:87:64:e3:bd:
8e:78:0a:ba:24:b6:f1:36:d9:3f:bf:d1:95:47:c7:
e1:3d:c7:a1:db:8c:be:d5:89:88:26:73:80:85:47:
e4:bd:93:e2:8c:6f:11:02:39:c7:33:5f:58:ca:71:
3b:9d:75:91:3f:6c:bc:34:33:e3:44:9e:56:13:76:
57:89:72:11:33:04:1d:f5:c8:e1:e7:8b:1c:80:ca:
5e:bc:98:97:ed:5a:01:aa:d7:6b:c8:4c:bf:11:46:
b8:e2:9d:e5:1a:e8:b8:94:8d:8c:40:ed:07:b2:c0:
e1:62:fb:05:f8:36:4f:0d:c6:de:08:f5:1d:4a:81:
bb:e4:12:2d:ae:68:0f:2b:db:b9:7b:a9:5f:f7:3c:
f6:ed:e2:98:c5:a2:20:5d:59:66:b5:07:07:8b:cd:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B6:FD:DF:B0:29:FB:63:43:58:14:69:32:2D:33:24:52:B4:78:FF
X509v3 Authority Key Identifier:
keyid:81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/urb937Ap-2NDWBRpMi0zJFK0eP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.164.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:cc:78:be:bf:f4:8e:76:97:b3:fa:9a:14:59:13:bc:ea:d3:
8a:fb:67:c3:ef:36:22:6f:40:a1:d1:4a:5f:e6:eb:4b:07:d0:
cc:32:b2:f1:3c:6a:f6:54:dc:02:d4:5a:62:86:7b:23:04:b4:
97:f7:2a:b0:c9:b0:e9:4c:3f:bb:3f:0a:7e:74:c1:c8:c4:fe:
23:10:39:0e:67:6f:06:93:63:e7:d2:b8:59:84:31:78:71:c9:
e2:8e:72:8d:6e:81:58:b9:72:9d:2b:25:ef:99:a2:80:d9:cc:
eb:60:0b:a8:8b:34:20:60:fd:2f:6b:3a:41:4a:48:fb:fc:e4:
c0:a6:a3:8e:89:05:47:61:75:4c:32:fc:21:44:3c:a4:6b:22:
cd:09:a3:80:a1:6c:8a:19:6d:14:50:ce:9b:cf:56:41:6d:a8:
b6:2a:31:77:0f:76:fd:9b:8f:e6:27:87:57:6b:30:12:ad:fc:
76:ca:ca:71:ac:4d:98:a8:5e:c5:6b:2a:a5:29:be:84:4c:2b:
46:83:a0:6e:9b:56:01:0c:58:bd:3a:c0:45:a5:78:d7:5e:20:
b2:b8:0f:5b:e0:85:93:42:72:e2:38:74:41:c0:14:a2:83:c8:
47:d9:9f:11:86:a1:70:54:f9:f6:e0:fc:27:08:57:01:b9:f9:
f3:39:11:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:48 2024 by rpki-client on console-ams.rpki-client.org