Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/E-VRJfpLYps0w1bj0-qIsfysobs.roa
File: E-VRJfpLYps0w1bj0-qIsfysobs.roa (raw, json)
Hash identifier: 5rjKhb8n6Uptc/PaJjKnNjf2orVXk3bEbEizK7zcnyc=
Subject key identifier: 13:E5:51:25:FA:4B:62:9B:34:C3:56:E3:D3:EA:88:B1:FC:AC:A1:BB
Certificate issuer: /CN=b24d588df20b32db9787d77864394cd7a66d4030
Certificate serial: 01856DCB00EB78758FC979F14EB8D120B139
Authority key identifier: B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/E-VRJfpLYps0w1bj0-qIsfysobs.roa
Signing time: Sun 01 Jan 2023 14:44:58 +0000
ROA not before: Sun 01 Jan 2023 14:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61362
IP address blocks: 5.252.216.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:cb:00:eb:78:75:8f:c9:79:f1:4e:b8:d1:20:b1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24d588df20b32db9787d77864394cd7a66d4030
Validity
Not Before: Jan 1 14:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13e55125fa4b629b34c356e3d3ea88b1fcaca1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:86:28:e1:28:1c:54:51:80:fd:d2:a8:4a:
7a:53:4a:0f:45:d4:6d:e6:73:28:96:c9:ae:fd:ac:
0e:bf:b8:5b:05:ac:72:02:33:a7:23:da:fd:1f:b7:
d4:f1:da:e8:3c:7a:b8:bd:46:b6:1c:43:0e:ac:06:
23:17:de:27:8c:d9:33:07:6a:57:78:d1:fe:25:43:
46:62:de:3a:6c:f1:bb:a5:d6:8f:78:49:d1:2c:51:
2b:77:b4:96:3b:23:64:fc:4c:ea:7a:f8:68:0b:8b:
d4:18:ac:4d:1e:bb:47:1d:60:a6:5d:86:6b:56:24:
90:a5:53:6f:4d:e3:9f:1b:3c:5b:ff:79:52:e6:21:
cd:4d:3f:8a:f3:53:a0:44:ca:80:d9:35:7d:8b:f1:
ab:5c:db:9b:84:48:25:71:d1:d5:4f:bf:53:13:92:
ac:27:4f:a3:93:1a:50:f1:99:a2:e7:06:f9:b7:1e:
be:ef:0a:e5:6c:6a:d3:1a:75:c1:95:02:f7:ab:d3:
60:c3:f7:6b:9b:1f:98:3a:a5:aa:6e:0c:ba:b4:0b:
ba:60:29:b5:04:fb:ce:46:80:14:85:83:42:9e:d8:
ea:72:a5:2d:dd:c4:a4:fd:10:6b:14:21:35:c3:a0:
5f:cf:c9:68:e8:84:b6:47:ef:c0:a2:b5:ee:9a:e3:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E5:51:25:FA:4B:62:9B:34:C3:56:E3:D3:EA:88:B1:FC:AC:A1:BB
X509v3 Authority Key Identifier:
keyid:B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/E-VRJfpLYps0w1bj0-qIsfysobs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.216.0/22
Signature Algorithm: sha256WithRSAEncryption
46:56:8e:ea:a1:fb:ef:c6:6b:1d:e6:29:12:3a:49:c3:8a:67:
b5:d6:6a:d0:39:df:ca:cc:71:8e:58:26:5f:76:76:1e:cd:d4:
4a:d5:46:b5:40:18:0a:e9:f9:11:fc:96:cf:86:38:a1:00:79:
18:75:df:ad:5f:3c:c0:3c:b7:07:dd:4d:32:e7:cf:cb:ca:42:
72:cc:12:55:14:38:c6:1c:7f:7c:28:c3:4c:8f:5c:21:4d:89:
0c:b6:1c:d6:56:b9:0c:ac:d3:f9:13:f5:43:9d:4b:79:94:a8:
c6:e2:f6:33:f3:c8:74:61:4a:63:69:c5:c0:ce:7c:7e:cc:b5:
c2:54:5a:b5:93:ce:71:78:78:cb:ac:00:5a:4a:10:8d:ce:51:
23:6f:98:59:9d:07:04:62:ff:6c:93:f2:a0:99:f9:2a:1b:b1:
82:a6:20:cd:c1:14:d5:48:a6:c8:c5:7f:11:e0:0e:26:f5:dd:
12:40:a3:ad:b7:96:b0:ae:31:e5:de:9f:83:b0:d6:0e:86:5c:
b5:06:13:e2:74:0e:a0:12:2c:d4:bb:59:ba:59:8d:af:01:cb:
0e:d9:56:d5:38:83:17:74:18:15:39:30:14:a8:57:ce:42:8a:
62:af:d2:0f:b7:4a:dc:67:e1:0f:e4:e0:66:bf:65:a3:fc:28:
12:23:8b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:28 2024 by rpki-client on console-fra.rpki-client.org