Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_x8ifi2n5zZeKBwUKEJDgfiyv7A.roa
File: _x8ifi2n5zZeKBwUKEJDgfiyv7A.roa (raw, json)
Hash identifier: LZojqD8pTQjJc9oEOfw8tMPuFP4Zg6cJQ9gMi4vIo1o=
Subject key identifier: FF:1F:22:7E:2D:A7:E7:36:5E:28:1C:14:28:42:43:81:F8:B2:BF:B0
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2ECD83957C3589C089836503ADAEB3
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_x8ifi2n5zZeKBwUKEJDgfiyv7A.roa
Signing time: Sun 01 Jan 2023 07:14:44 +0000
ROA not before: Sun 01 Jan 2023 07:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44599
IP address blocks: 5.252.232.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:cd:83:95:7c:35:89:c0:89:83:65:03:ad:ae:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff1f227e2da7e7365e281c1428424381f8b2bfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d2:04:6e:dc:63:97:06:83:da:71:54:9d:c6:
23:d0:ce:bc:77:73:f3:40:f1:d5:f4:f6:21:3c:de:
d4:2c:f8:bd:1b:16:4a:89:da:00:5c:f5:10:5f:8b:
cf:09:31:5b:6f:26:6a:04:86:3a:2c:9d:f7:18:99:
4d:bf:42:c8:d6:c1:04:82:e3:ac:1a:fc:2d:32:c7:
3c:aa:19:2a:6b:3d:cf:2e:0b:45:1e:cd:5b:d7:3e:
f3:1d:42:87:8a:c1:2a:ad:78:ac:44:aa:5e:1e:70:
fd:c3:c4:ac:ee:f7:ed:46:b7:72:91:09:a8:3d:94:
10:f3:fb:dd:fa:f8:d8:6d:d4:77:ce:48:8b:1b:6b:
3d:bb:00:49:50:54:8f:87:14:d6:4f:80:94:93:16:
5b:1b:5c:62:b2:a9:e8:2c:69:72:e8:c6:e8:ef:1c:
22:e3:41:3d:aa:5c:df:72:07:dc:83:7a:fd:41:e5:
6a:e7:6b:5e:75:c0:fa:3c:5c:f6:df:84:b2:72:49:
02:e5:43:8a:0c:d8:d3:bb:94:1f:9b:06:1b:bf:a0:
a3:cb:55:6c:94:86:e5:1a:65:71:f6:8e:73:00:e9:
04:7e:22:f7:ff:ed:c6:48:23:7b:c1:f8:0c:f8:c1:
43:ff:16:a3:2a:88:81:ae:1d:55:9f:af:1a:52:e1:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1F:22:7E:2D:A7:E7:36:5E:28:1C:14:28:42:43:81:F8:B2:BF:B0
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_x8ifi2n5zZeKBwUKEJDgfiyv7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.232.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d6:db:65:22:70:40:06:7f:34:ed:7c:42:7d:60:a1:67:73:
b4:80:66:8b:15:57:41:cf:61:08:1d:03:cc:c6:2c:af:84:b5:
15:24:08:c0:41:be:8b:cd:d9:22:5a:b9:09:10:01:50:c8:fa:
32:64:28:8e:20:8d:54:6c:b5:37:b7:37:4b:49:44:36:c6:c9:
f5:7e:9f:fc:6d:e2:99:83:3c:76:da:79:ec:1b:3f:be:3e:93:
b5:b1:17:57:3d:1c:ad:c9:90:35:b6:cc:5b:36:1e:d2:03:09:
ad:ba:5a:73:4b:57:b0:5a:dc:b3:61:15:d9:e7:ff:09:b4:e7:
2b:31:d7:f9:f0:fb:77:4a:11:65:0d:df:e7:21:7a:fa:36:82:
78:be:00:fa:a1:64:6b:0d:39:eb:19:44:a2:4d:03:69:df:d3:
36:45:74:a2:34:98:1e:7f:7c:15:5b:12:f4:65:ec:db:e4:d4:
6a:70:a8:62:93:46:44:3b:b1:b9:d3:5a:f6:4c:34:50:b8:2f:
fd:9a:60:d2:43:5e:76:28:55:fd:45:71:5d:f7:0f:8f:e9:4d:
4e:c1:6e:66:19:bf:f8:4c:1b:a4:0d:01:a9:43:2c:01:87:1b:
e8:7c:dd:12:f1:65:fa:99:4d:f9:18:91:6a:50:59:43:b0:ce:
99:8b:b6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org