Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/auOd3MIhLSeSS97rS4nRVQteJxQ.roa
File: auOd3MIhLSeSS97rS4nRVQteJxQ.roa (raw, json)
Hash identifier: L6WO6BZpNvE0viOA31s3bvCXhYDnyI+dop9tv9Wawco=
Subject key identifier: 6A:E3:9D:DC:C2:21:2D:27:92:4B:DE:EB:4B:89:D1:55:0B:5E:27:14
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 01895534834098A54B27C934025BFF447CDE
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/auOd3MIhLSeSS97rS4nRVQteJxQ.roa
Signing time: Fri 14 Jul 2023 16:20:52 +0000
ROA not before: Fri 14 Jul 2023 16:20:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 5.102.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jul 2023 20:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:34:83:40:98:a5:4b:27:c9:34:02:5b:ff:44:7c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Jul 14 16:20:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ae39ddcc2212d27924bdeeb4b89d1550b5e2714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:00:1b:bf:86:9c:3c:5c:76:f0:5a:07:ce:81:
5d:d0:43:36:02:4a:bd:d2:76:87:b9:0b:1f:dd:61:
25:5a:c1:63:ec:30:7e:ba:9f:76:69:c4:a1:2a:2f:
9c:f2:26:5e:01:44:20:d3:b8:a1:cd:88:54:01:0b:
a9:69:9d:7f:aa:7f:09:61:ed:6b:a7:e0:85:e7:37:
66:6e:c6:e7:43:3d:33:1d:dd:28:05:f7:0d:39:16:
65:a6:8e:1e:43:08:33:36:b8:4f:f4:a5:de:0e:a8:
bc:08:a9:e1:f1:79:4c:72:30:37:8b:01:d7:04:7d:
bd:36:44:d8:72:e0:73:6b:e7:fb:5d:c7:65:45:76:
6b:f7:b7:de:53:3d:8a:44:34:79:38:6a:a1:53:0b:
bc:32:97:c4:94:37:f5:20:d4:20:e2:70:ff:f4:2a:
7a:e5:93:6f:9a:47:5c:f3:91:db:7a:cb:18:ad:6e:
67:12:9e:47:4a:91:10:1c:04:67:47:bc:05:3e:ab:
3c:63:39:a1:9d:c8:03:96:07:ec:01:10:03:bc:7f:
8b:ee:b2:59:2e:73:ed:6c:ac:76:1e:36:ac:5d:95:
74:93:d1:15:e4:66:f5:ff:91:0b:6c:63:cd:16:bb:
4b:89:37:57:25:e1:88:64:b9:b9:b7:fe:e8:eb:3d:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E3:9D:DC:C2:21:2D:27:92:4B:DE:EB:4B:89:D1:55:0B:5E:27:14
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/auOd3MIhLSeSS97rS4nRVQteJxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.39.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:30:6f:36:9a:20:52:23:e0:90:a4:cb:35:ba:26:4f:27:4d:
7e:71:59:ed:ab:07:89:a2:e9:fe:b5:b3:89:ca:24:c0:74:32:
6a:49:63:d2:a1:f6:b3:58:af:e8:f6:86:9c:d9:de:f7:f7:08:
89:4e:52:32:5f:6b:8c:6d:8c:68:71:8b:52:ff:ab:0f:6b:02:
ce:3b:c5:72:35:e2:b1:6c:b6:06:b0:eb:ca:ed:65:8d:a0:e1:
81:eb:70:61:08:d6:95:23:be:65:7f:60:af:f8:52:9e:69:cb:
17:fa:ce:10:b1:78:0f:23:58:ca:e4:c0:b9:57:78:16:3f:06:
a4:23:46:eb:ce:8e:c8:07:16:e3:96:37:ad:5b:2d:82:3a:21:
12:70:3b:00:34:51:ec:74:b5:9a:ed:06:70:3a:1f:e0:64:b5:
76:00:98:1c:c0:54:10:7d:ae:96:54:db:9a:d2:cf:21:1c:ee:
00:4e:f7:37:c8:8f:b3:15:e4:bb:a2:73:e2:da:e4:72:08:df:
62:e2:13:38:2e:a8:64:58:57:17:c3:f4:39:0f:2b:ec:68:4e:
77:f7:41:13:1d:c0:d5:de:f7:7d:86:31:af:15:3b:31:4a:d1:
25:90:b1:b3:ab:90:13:2c:1c:8e:28:96:98:a2:81:88:1e:50:
7f:9f:a6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:06 2024 by rpki-client on console-ams.rpki-client.org