Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/4dJHlGWCTm4SvOIzJo3WtD4f7wY.roa
File: 4dJHlGWCTm4SvOIzJo3WtD4f7wY.roa (raw, json)
Hash identifier: gIh90ncGt7GXKZ9zWyqN1SWpyy2SEJKQxdu+/Y3/kDo=
Subject key identifier: E1:D2:47:94:65:82:4E:6E:12:BC:E2:33:26:8D:D6:B4:3E:1F:EF:06
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018EF7DD18EBDA851A95100EF313CFB874F1
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/4dJHlGWCTm4SvOIzJo3WtD4f7wY.roa
Signing time: Fri 19 Apr 2024 19:37:25 +0000
ROA not before: Fri 19 Apr 2024 19:37:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/20 maxlen: 24
5.102.96.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Apr 2024 12:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f7:dd:18:eb:da:85:1a:95:10:0e:f3:13:cf:b8:74:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Apr 19 19:37:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1d2479465824e6e12bce233268dd6b43e1fef06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:8f:d3:c9:75:7e:15:15:d1:58:ba:23:b4:
4d:f4:ce:aa:6d:12:84:a4:e4:1a:19:63:1e:eb:e2:
da:75:73:88:93:d8:69:a3:8b:d3:c1:79:67:08:6b:
31:9f:02:85:c6:c7:26:4c:fb:fa:6f:50:2f:47:93:
9b:5f:ea:cd:90:9c:6b:43:77:13:7c:a6:cd:2f:df:
c3:81:15:8f:a6:7f:48:20:9e:25:9d:bd:e2:54:5b:
fd:da:9c:cc:38:ec:2a:77:81:5f:36:4d:7b:32:6e:
d4:3f:87:cf:ac:61:28:06:b0:fd:16:02:b8:f8:2c:
e4:ff:89:25:80:a7:53:e5:dd:ed:27:39:27:0a:11:
df:9e:6e:dc:dc:9e:c7:4d:ea:c2:13:fb:16:04:ee:
f9:eb:a7:6d:48:8c:46:b4:be:1e:47:25:8a:ca:e9:
00:a8:09:e1:36:c8:43:bc:13:ac:a3:33:f0:d5:c5:
3c:c0:ad:96:f0:34:99:d0:d2:c0:db:84:c6:e4:dd:
7d:54:ce:48:de:21:39:eb:a3:d0:09:05:1e:95:d6:
b1:cf:ff:96:0b:2a:3e:84:1c:95:1f:e8:b5:80:87:
bf:75:4b:84:38:17:d7:54:90:94:b7:68:77:8b:ef:
45:de:56:ca:35:c3:80:bd:76:c7:0c:f3:88:f9:e7:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D2:47:94:65:82:4E:6E:12:BC:E2:33:26:8D:D6:B4:3E:1F:EF:06
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/4dJHlGWCTm4SvOIzJo3WtD4f7wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:e7:18:6e:ee:7d:e1:43:36:6f:4f:0c:db:01:fa:a4:d3:ba:
d6:cb:a5:2e:22:6b:3b:ad:ba:d8:eb:d7:a6:9e:ac:f2:af:8f:
80:23:72:57:e8:46:05:70:a9:f4:e3:2f:02:a2:81:bb:c3:29:
bb:31:70:3d:7e:d0:5b:6a:f7:20:05:47:1b:e3:67:60:4b:d3:
0d:0d:30:40:61:a0:3f:c1:02:0f:b8:1e:ca:d3:05:a1:81:e9:
53:58:5d:90:da:2b:64:2f:a7:5c:96:a9:f6:7d:fb:fc:fb:07:
5b:6f:4d:9c:e9:e4:67:f1:e3:3d:d7:ac:5a:93:a8:aa:fe:9f:
7f:68:41:b7:f5:e7:6c:50:61:96:dc:82:e2:24:e5:cf:27:57:
28:84:14:53:c0:16:42:ff:ce:dd:d8:15:84:67:8a:cb:88:03:
fb:2b:c0:74:00:54:98:40:a7:75:c7:35:f7:35:4a:93:89:1d:
2b:af:a5:4c:39:e9:7b:30:b2:3a:5a:b3:cb:34:18:d7:7f:44:
88:61:e6:5b:db:93:d4:26:47:a9:2d:d5:40:bf:c5:d3:b7:87:
17:84:31:d2:61:78:4b:08:9f:64:22:91:28:ec:2d:19:93:9a:
a9:ef:3b:b0:35:76:63:cf:6f:76:92:a2:6a:1f:14:d9:a3:de:
ed:59:76:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:14:08 2024 by rpki-client on console-ams.rpki-client.org