Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/1lJ6thZYPnFZ6AG_3hQw6IlQWPE.roa
File: 1lJ6thZYPnFZ6AG_3hQw6IlQWPE.roa (raw, json)
Hash identifier: kqDruew28dLe7MZHcUiJaLnccF1zG0AEXAFwupPex7A=
Subject key identifier: D6:52:7A:B6:16:58:3E:71:59:E8:01:BF:DE:14:30:E8:89:50:58:F1
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 018CC64B67E0E0029EE4EA4A04FC22F81DD2
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/1lJ6thZYPnFZ6AG_3hQw6IlQWPE.roa
Signing time: Mon 01 Jan 2024 18:31:19 +0000
ROA not before: Mon 01 Jan 2024 18:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 5.102.38.0/24 maxlen: 24
5.102.36.0/24 maxlen: 24
5.102.36.0/23 maxlen: 23
5.102.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:67:e0:e0:02:9e:e4:ea:4a:04:fc:22:f8:1d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Jan 1 18:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6527ab616583e7159e801bfde1430e8895058f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b4:75:7e:7e:1c:ec:1c:3c:55:c9:46:18:28:
aa:06:64:27:e7:aa:c6:92:47:1d:05:2c:0f:85:c4:
e4:da:53:ab:c5:0a:32:90:5f:c4:5d:5e:20:b5:74:
67:df:f2:89:14:1e:1d:79:0e:0f:7d:f4:3f:ce:b9:
25:3f:0f:55:1e:dd:0e:8c:da:1b:e3:4a:69:e0:8a:
97:69:27:42:2c:3f:5f:7e:1f:39:a7:55:bc:e3:4e:
a2:2c:8d:de:0a:01:e7:af:96:8f:4e:67:2c:c7:66:
ac:ba:4b:24:f7:a3:dc:2d:a2:f0:16:91:a9:06:37:
4d:a4:38:b3:81:f8:0d:3f:69:f8:ee:51:29:72:f6:
2d:59:b3:86:dd:da:7d:d4:27:89:6d:a4:d4:ec:1f:
cc:cc:29:75:12:46:9f:03:15:9d:ed:d4:6d:94:55:
a0:12:fe:26:a5:8d:d0:ea:5a:ff:5b:52:ce:69:0f:
43:16:2e:73:63:1c:dd:a9:b8:9f:6a:7e:c0:3f:55:
bb:53:5c:0a:90:41:09:43:4c:60:bb:88:59:d8:2c:
98:3b:cc:5e:90:02:93:07:20:24:e8:29:04:fb:7e:
a6:df:3f:9b:14:ea:3e:4d:3c:cf:a8:64:58:f7:fe:
ef:09:fd:10:54:36:8c:31:8c:ed:4a:67:95:47:ba:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:52:7A:B6:16:58:3E:71:59:E8:01:BF:DE:14:30:E8:89:50:58:F1
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/1lJ6thZYPnFZ6AG_3hQw6IlQWPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.36.0-5.102.38.255
Signature Algorithm: sha256WithRSAEncryption
1a:46:27:82:b3:ac:67:ab:8a:07:99:33:ab:db:1f:5a:20:02:
b8:41:05:2c:3c:48:bd:a8:d0:f3:2c:3f:21:d5:58:c5:cb:1c:
6f:06:25:e6:0f:78:3b:d3:4d:38:ce:ed:68:66:38:f1:d4:63:
9f:2e:6e:d1:95:05:3a:96:e4:a1:d5:3b:38:c2:68:f2:f3:a4:
4e:b5:72:fe:40:ce:1b:1d:67:55:d8:d2:34:7e:bf:58:96:ec:
37:cd:5f:c1:f0:cd:78:3f:47:d3:5a:55:be:d5:56:9b:e5:2f:
8a:c0:14:bf:23:73:15:af:53:57:6e:e5:fa:5a:90:ce:2f:a8:
7e:83:94:be:ef:47:53:18:a0:7e:af:97:1d:2e:ed:04:01:73:
36:5c:13:8c:9b:56:0e:f7:35:aa:f1:1a:80:9b:62:da:2b:d8:
d5:91:27:62:01:2c:6f:b1:6f:96:fe:47:52:f2:e8:3c:3b:3a:
60:9c:0b:98:ed:e8:0d:a4:74:43:54:0d:f6:06:5b:37:f6:7c:
cb:7d:db:61:bf:c3:6e:e0:3e:e3:8a:66:be:74:7f:6c:eb:f5:
b1:ac:9f:ea:e3:32:ba:9e:be:fb:d6:d5:a8:51:9e:e6:74:3a:
10:84:b1:ea:86:bf:07:93:30:68:86:19:94:44:13:90:7a:c2:
00:ed:4a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 19:47:20 2024 by rpki-client on console-fra.rpki-client.org