Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/NmBUj0HoQJno5K1ztjQ58QSdw18.roa
File: NmBUj0HoQJno5K1ztjQ58QSdw18.roa (raw, json)
Hash identifier: Yf1pAIS9lpPbCNECUYd7QpFnAPRfAwyfuPxoFP8mXnE=
Subject key identifier: 36:60:54:8F:41:E8:40:99:E8:E4:AD:73:B6:34:39:F1:04:9D:C3:5F
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2ECA6F77B8A797225B5F88F5AFE33B
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/NmBUj0HoQJno5K1ztjQ58QSdw18.roa
Signing time: Sun 01 Jan 2023 07:14:43 +0000
ROA not before: Sun 01 Jan 2023 07:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36352
IP address blocks: 5.252.234.0/24 maxlen: 24
141.98.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:ca:6f:77:b8:a7:97:22:5b:5f:88:f5:af:e3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3660548f41e84099e8e4ad73b63439f1049dc35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:37:25:68:92:8e:29:9d:46:db:59:3f:d6:3f:
01:74:65:dd:2b:ca:5f:e2:16:25:76:56:fc:d8:cb:
3d:85:b6:2c:ac:69:48:30:bc:b5:7f:b6:71:d3:5c:
6d:fb:5d:74:f9:bb:9f:92:a4:8e:e4:8b:94:c0:91:
95:13:7f:16:f5:17:1f:fe:c4:3e:99:0e:8e:1d:03:
65:a7:3d:ef:84:07:bd:76:e8:90:74:60:b7:f4:4d:
b1:78:7f:8a:41:53:53:3a:16:41:6d:8f:5e:55:ac:
98:64:a6:3a:80:01:19:9c:14:37:3e:28:23:de:e6:
72:55:7e:6d:c0:a7:64:4c:37:23:c1:62:41:06:91:
ba:f0:7f:06:46:63:04:89:6c:4e:23:05:95:8e:4a:
eb:71:93:30:6a:ac:2f:d8:83:59:3b:11:df:de:d7:
7e:47:7c:d3:bf:5e:04:2b:2b:3a:7d:16:e4:28:76:
57:e9:cb:77:e2:bd:75:30:8a:04:c0:18:99:a0:2c:
c9:d6:b9:4b:d0:1f:e6:50:cc:9f:43:1e:c2:ae:80:
b0:5f:f5:21:86:b4:f9:a7:b7:b9:26:3a:9e:8b:85:
bd:14:f9:b7:c1:9a:5a:42:4a:6d:d3:14:c4:63:3e:
21:a2:74:7e:9d:53:ed:b4:bf:90:0b:82:73:7a:59:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:60:54:8F:41:E8:40:99:E8:E4:AD:73:B6:34:39:F1:04:9D:C3:5F
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/NmBUj0HoQJno5K1ztjQ58QSdw18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.234.0/24
141.98.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:26:87:58:64:3e:a8:85:ff:3e:f4:64:d4:14:14:f4:fa:61:
68:11:f7:dd:52:b3:15:f1:a5:1c:28:0b:90:6f:8f:6f:db:06:
56:58:da:76:83:42:ef:75:0f:e4:24:94:55:0c:1c:18:92:31:
c6:ac:51:ad:33:5d:cd:ec:f7:36:ab:8c:64:06:3c:39:6a:d0:
91:87:25:cd:5c:28:24:f1:50:b2:9e:d2:d2:b7:74:83:99:84:
6e:0c:f7:97:a0:d9:13:f4:65:e6:7a:72:4e:c3:db:fb:1a:6e:
46:d0:64:ac:72:9f:11:c4:e9:33:b6:c7:d4:de:32:8a:a1:ef:
f0:a2:2b:f0:c5:57:9c:c2:94:fc:d7:25:69:d6:77:1c:28:15:
5b:42:1f:09:3a:04:05:9d:02:ad:e4:21:c2:90:49:61:4f:03:
74:22:7b:36:3e:a4:ee:5d:c5:10:e9:da:62:9b:90:5d:ad:64:
d1:dd:69:93:b5:a1:42:c5:19:bf:3d:51:cf:e8:ea:3a:ce:1c:
71:40:a6:f1:75:e9:ca:32:4f:3c:57:dd:aa:1a:a1:59:f8:3e:
45:05:c9:82:0e:d6:a2:90:c1:a0:97:0a:b9:0a:cc:72:24:33:
34:43:81:2e:51:a9:b4:6f:4e:84:98:9d:e1:45:13:42:e9:51:
ac:70:d8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org