Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/G59blAf2Lpuwhr-OkR8Xj85G6UM.roa
File: G59blAf2Lpuwhr-OkR8Xj85G6UM.roa (raw, json)
Hash identifier: v57EeDLq82lwyOnN6iJfUtktN5uRTEwMo2mQxryxi2M=
Subject key identifier: 1B:9F:5B:94:07:F6:2E:9B:B0:86:BF:8E:91:1F:17:8F:CE:46:E9:43
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 01889F6F4FCCE106E584FCB0B8522A3184CD
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/G59blAf2Lpuwhr-OkR8Xj85G6UM.roa
Signing time: Fri 09 Jun 2023 09:14:12 +0000
ROA not before: Fri 09 Jun 2023 09:14:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8274
IP address blocks: 5.153.180.0/24 maxlen: 24
5.153.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:6f:4f:cc:e1:06:e5:84:fc:b0:b8:52:2a:31:84:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jun 9 09:14:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b9f5b9407f62e9bb086bf8e911f178fce46e943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:5d:de:60:ae:53:12:b8:89:6e:1e:f3:11:
52:88:7e:1d:56:ee:34:e5:03:10:fa:f9:69:33:e0:
98:59:90:d1:c3:ae:45:3a:56:62:ae:bd:95:e6:6b:
1a:21:66:b7:23:6e:75:89:e3:dd:17:30:55:0d:d8:
9e:ef:b6:a1:a0:d6:45:ff:68:54:4b:e9:2f:7a:00:
8a:a9:70:85:1d:ea:58:10:45:79:89:85:89:ba:a8:
ca:29:1a:68:05:01:bc:74:ae:08:d2:f4:ab:e4:d2:
1f:3c:78:ec:2c:b0:4d:d2:60:f3:1b:dc:2b:dd:17:
ca:7a:3a:5f:63:bd:28:7b:3d:9e:41:ff:a5:d9:47:
17:c4:3e:6e:ad:53:ce:25:36:6a:38:c7:2b:63:7c:
e4:cd:f7:96:4e:0a:10:26:76:5b:2b:2a:65:01:c5:
d0:2c:79:58:12:9d:0d:08:09:db:35:e1:28:60:56:
1b:ed:b6:aa:e7:f0:e0:ab:aa:cf:b5:f3:48:7d:58:
9a:60:78:2c:53:f1:24:21:df:48:be:1d:30:82:7a:
0c:b7:cc:b9:87:21:1a:1b:73:ee:d6:7e:b6:8b:09:
f0:e0:8c:56:71:5b:01:d6:b9:4a:17:d9:2b:89:c2:
21:90:56:34:88:8e:06:0d:10:3b:a0:1a:bf:f0:d7:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9F:5B:94:07:F6:2E:9B:B0:86:BF:8E:91:1F:17:8F:CE:46:E9:43
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/G59blAf2Lpuwhr-OkR8Xj85G6UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.180.0/24
5.153.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:75:a7:cc:28:7b:59:3c:39:58:e6:ce:57:91:b8:37:6e:96:
30:36:a6:81:42:f9:e1:4f:fc:0e:21:41:8b:32:13:9c:0c:5f:
55:30:13:b8:07:23:57:b3:f2:6f:13:0e:89:cc:c4:7c:45:ea:
3f:5a:28:c6:48:d4:d9:86:3a:3f:22:5c:36:e3:66:76:6e:48:
56:99:0d:af:c5:71:20:e8:32:35:b2:70:83:93:79:29:cc:09:
bf:5b:0e:fe:7f:95:9a:e6:5c:c7:8b:96:58:02:de:fc:3d:6c:
69:36:e7:00:11:a0:81:94:23:ae:fa:1e:35:c5:66:45:92:55:
8d:6f:68:14:7e:9d:e4:5d:71:b8:59:27:07:12:fb:2a:52:fc:
09:77:3c:aa:63:32:54:75:46:71:a2:47:5b:b8:46:4b:ef:83:
04:0d:bd:5f:bc:47:e5:90:45:1a:a6:9a:c6:38:e8:7e:d1:04:
7a:d4:3d:77:59:bb:b1:0d:d9:b2:2d:5f:10:8f:39:ab:4a:b0:
f2:31:f7:2f:06:89:a7:e9:1f:d4:54:d7:fd:a6:3a:47:f2:1f:
db:42:0b:2c:5b:81:ba:ea:2a:b4:3f:01:66:3b:51:48:92:0c:
fd:e6:9d:23:7e:53:80:d8:7e:e8:0c:e4:4c:71:11:1a:52:8a:
f2:59:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:46 2024 by rpki-client on console-ams.rpki-client.org