Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/SiGqLY1_yiALvOsLnsepRLilqSM.roa
File: SiGqLY1_yiALvOsLnsepRLilqSM.roa (raw, json)
Hash identifier: L0pXf/JAo8UyQiv0iO+0sF6r1YK0wQIspRdrp3fSRkM=
Subject key identifier: 4A:21:AA:2D:8D:7F:CA:20:0B:BC:EB:0B:9E:C7:A9:44:B8:A5:A9:23
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 018A4D112868E07C16251938EE89675F52C4
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/SiGqLY1_yiALvOsLnsepRLilqSM.roa
Signing time: Thu 31 Aug 2023 19:28:04 +0000
ROA not before: Thu 31 Aug 2023 19:28:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 5.102.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4d:11:28:68:e0:7c:16:25:19:38:ee:89:67:5f:52:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Aug 31 19:28:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a21aa2d8d7fca200bbceb0b9ec7a944b8a5a923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:95:35:e7:1e:90:85:64:0c:f7:1e:dd:e1:
11:08:1b:d2:d9:f2:9c:4d:a0:fd:ae:11:67:5f:5d:
49:87:3b:f7:56:42:45:b4:8c:3d:13:d8:80:60:48:
a5:b1:24:68:1e:2c:38:a1:32:05:31:5a:53:30:0f:
45:6b:64:94:42:81:07:6d:33:ac:51:f0:1a:c8:00:
85:e5:f4:db:d1:20:64:8e:d8:62:f2:89:e2:51:03:
92:26:a3:7b:b3:d8:00:72:0b:bf:5d:3b:9a:be:a3:
f9:ba:5f:d2:1b:b0:ae:7b:fc:8c:32:b5:e5:ae:a3:
fa:8b:c9:fd:dc:60:cd:ba:f5:cb:7f:5b:bc:ec:6b:
c8:2a:59:0e:5a:7b:7a:70:37:99:33:ff:b7:d9:ab:
35:64:f2:46:fc:2e:6b:5d:53:5a:47:86:b7:54:d0:
4e:2b:6e:b3:cc:e0:83:08:25:30:01:40:96:8a:e4:
82:20:36:6a:87:2f:96:cf:6a:07:f2:fc:e7:34:12:
06:eb:3d:84:85:3e:c7:f7:1b:ff:32:57:d5:bf:d5:
e2:75:a2:2b:a4:c5:18:7a:ec:2f:3d:bb:27:34:a1:
0c:d4:a0:be:bc:9d:4f:fe:0d:17:b5:ec:2f:01:1c:
ee:d0:6d:50:e8:27:c8:78:a9:94:20:3f:16:f0:7c:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:21:AA:2D:8D:7F:CA:20:0B:BC:EB:0B:9E:C7:A9:44:B8:A5:A9:23
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/SiGqLY1_yiALvOsLnsepRLilqSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.39.0/24
Signature Algorithm: sha256WithRSAEncryption
94:20:fc:d0:b3:65:11:9d:d6:8c:ea:62:a9:f7:d7:8f:b4:34:
39:40:33:57:d3:49:4d:68:32:32:63:5b:b1:a1:63:0a:c9:d7:
bd:f3:16:7c:26:e3:a4:c6:3a:2f:d7:b1:ac:fd:b6:fd:69:a2:
ee:ef:50:8c:1d:7c:38:03:3e:fc:a1:35:7f:20:b1:78:1d:b1:
7e:39:f4:eb:74:19:93:c5:61:0c:1b:13:69:63:31:32:e7:99:
62:88:0f:97:f1:22:0d:0f:c3:6e:70:6f:c1:28:3d:ef:35:97:
37:2a:ca:c6:6f:58:d5:94:37:83:b9:af:36:ef:b8:ac:61:45:
f2:da:bb:5d:a5:7d:39:6a:85:0d:da:c8:17:b0:0f:77:04:e9:
ec:70:24:b0:42:cb:ee:45:98:b5:1a:4f:f4:86:fd:e6:24:91:
6d:1c:75:66:b7:32:6a:48:4e:6f:fa:04:5a:11:bf:ee:7d:fb:
73:76:d4:d5:39:35:9e:8c:c5:b1:d0:23:55:f4:f5:49:a9:d3:
e5:c0:97:3e:cc:bd:ac:49:64:64:4a:14:91:95:b4:30:ce:f8:
f4:30:58:82:bd:3a:33:15:65:a0:5e:7c:3a:d3:e1:0d:e2:a1:
be:eb:f1:06:3c:5d:38:6b:8a:23:e3:b7:4f:73:77:8b:9c:e5:
56:4d:e0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:50 2024 by rpki-client on console-fra.rpki-client.org