Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/_T-nShSiTVKeY9m3VA7KUZ5egG0.roa
File: _T-nShSiTVKeY9m3VA7KUZ5egG0.roa (raw, json)
Hash identifier: hXN3ULbAZTishNHm9TSkoLGqn1pbbRBJ/a/4F/vYpks=
Subject key identifier: FD:3F:A7:4A:14:A2:4D:52:9E:63:D9:B7:54:0E:CA:51:9E:5E:80:6D
Certificate issuer: /CN=2b7c4264dacdfacb3b7a3aeeed565975aa52434c
Certificate serial: 018ECD87B606B4665E134A0C6F7E965EAE59
Authority key identifier: 2B:7C:42:64:DA:CD:FA:CB:3B:7A:3A:EE:ED:56:59:75:AA:52:43:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3xCZNrN-ss7ejru7VZZdapSQ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/_T-nShSiTVKeY9m3VA7KUZ5egG0.roa
Signing time: Thu 11 Apr 2024 14:20:06 +0000
ROA not before: Thu 11 Apr 2024 14:20:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20857
IP address blocks: 5.61.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Apr 2024 11:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:87:b6:06:b4:66:5e:13:4a:0c:6f:7e:96:5e:ae:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7c4264dacdfacb3b7a3aeeed565975aa52434c
Validity
Not Before: Apr 11 14:20:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd3fa74a14a24d529e63d9b7540eca519e5e806d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:f7:14:12:23:16:d4:be:0f:ef:59:08:d2:
8d:57:db:cc:f9:e4:99:fe:54:20:43:a0:e2:74:67:
e6:96:07:1a:36:b4:11:f1:a2:b8:94:82:84:9e:dc:
19:54:f2:20:2e:8c:34:bd:3c:c1:80:9b:7a:c2:8f:
6d:18:63:0c:9a:19:8d:22:aa:21:9d:0b:ac:d9:cd:
73:c7:0d:bf:04:0d:6c:9a:9b:ed:f1:76:ad:c8:7c:
8a:25:b5:4e:0e:34:32:0b:07:7b:d0:ef:5a:3d:2b:
87:15:91:49:43:0f:25:e6:82:08:2f:45:e9:b9:ca:
da:a9:db:a5:7b:a8:db:7a:71:29:33:20:b3:be:f1:
79:3d:2c:af:73:10:14:f4:96:08:92:90:0d:6c:e9:
b2:5d:92:08:cf:52:c5:40:3d:a5:a6:62:cf:57:76:
ee:da:88:99:bf:a2:89:f0:1b:4c:c3:16:d5:83:8d:
42:81:ba:0a:9a:8f:f2:af:71:d3:52:72:47:69:8a:
5c:12:c2:8d:4f:61:2f:78:3d:33:f7:5d:24:7e:f1:
b2:44:72:ff:4e:68:55:ef:bf:b9:3f:e3:66:cb:66:
cf:b9:07:44:7c:a7:ef:a3:b6:a7:76:44:88:e9:5a:
bc:91:ef:cc:03:ec:1b:4e:e6:4e:54:72:a8:d0:33:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:A7:4A:14:A2:4D:52:9E:63:D9:B7:54:0E:CA:51:9E:5E:80:6D
X509v3 Authority Key Identifier:
keyid:2B:7C:42:64:DA:CD:FA:CB:3B:7A:3A:EE:ED:56:59:75:AA:52:43:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3xCZNrN-ss7ejru7VZZdapSQ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/_T-nShSiTVKeY9m3VA7KUZ5egG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.255.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:3d:60:c1:e8:b7:4b:bf:94:e0:4a:63:db:dd:fc:d5:24:49:
25:ae:25:49:84:42:6f:70:20:b4:42:d1:60:e6:01:8a:4b:4a:
45:cd:2d:49:54:2a:cc:97:11:1e:d8:66:28:59:a9:12:d5:c2:
81:b0:5b:90:36:1c:45:25:2d:35:d8:2c:a5:e9:d2:ba:85:7e:
7c:87:0a:48:71:e4:2b:3f:39:07:79:4d:32:12:95:88:89:ea:
1f:a2:65:f1:ef:bb:85:d8:51:c3:b6:ce:a4:af:69:ce:3a:03:
d8:6d:77:b2:00:f9:07:21:73:38:11:f5:9b:6e:76:bd:60:21:
fd:5f:da:86:d8:27:31:ea:e7:9e:ae:97:e3:48:b7:29:da:f9:
23:fe:e1:b8:ca:2e:f9:6c:45:a5:b4:6a:66:0a:73:c6:6a:0b:
c0:59:24:1f:89:b6:38:d1:32:3b:aa:52:11:6a:8c:7b:70:1b:
5f:67:b9:24:44:67:b1:ba:7f:85:a3:db:ad:f6:f6:7c:a6:e2:
44:b5:dd:d8:9e:66:1f:81:f7:77:68:8f:59:83:ab:cc:49:12:
68:37:10:c0:b3:de:50:5a:80:1f:c9:9f:97:de:63:66:9e:14:
5d:3e:d3:92:71:fa:65:71:75:3b:a9:08:87:b9:cd:29:e4:7c:
93:16:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:08 2024 by rpki-client on console-ams.rpki-client.org