Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/cTtA6ZNLslGFwbrd7W1NQ-e5MbA.roa
File: cTtA6ZNLslGFwbrd7W1NQ-e5MbA.roa (raw, json)
Hash identifier: ESxZWeRdIWHhFUuY5Z+uK15xpANl3eqdkbCb+63/+Ec=
Subject key identifier: 71:3B:40:E9:93:4B:B2:51:85:C1:BA:DD:ED:6D:4D:43:E7:B9:31:B0
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 018C228FD87A3062C6D9010C8264AB7E5FEA
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/cTtA6ZNLslGFwbrd7W1NQ-e5MbA.roa
Signing time: Thu 30 Nov 2023 23:28:21 +0000
ROA not before: Thu 30 Nov 2023 23:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 5.102.38.0/24 maxlen: 24
5.102.36.0/24 maxlen: 24
5.102.36.0/23 maxlen: 23
5.102.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:22:8f:d8:7a:30:62:c6:d9:01:0c:82:64:ab:7e:5f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Nov 30 23:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=713b40e9934bb25185c1badded6d4d43e7b931b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:41:6b:59:35:7b:d7:56:5b:f6:b6:ed:05:
d1:c8:60:3d:11:58:ec:c7:45:9f:6f:c2:c8:e2:b1:
a7:3b:8a:92:fa:d6:a5:ec:14:3f:fa:28:0e:23:c6:
ae:35:4c:a6:93:89:ca:f9:46:96:bf:aa:e9:d1:e8:
94:b4:5a:4f:96:1d:7a:11:01:32:2b:e1:ec:9a:63:
91:b4:69:2e:a9:b9:c7:3e:73:c3:8f:77:25:52:25:
00:7d:68:34:2e:d0:25:4e:7b:f9:f4:4d:22:ee:8c:
3e:43:42:1f:46:a9:96:c0:31:6b:bb:d5:1c:9a:88:
db:6c:4d:84:66:31:2d:71:1e:42:7b:03:58:e4:ea:
dd:ee:8d:b0:f2:c3:e3:87:fa:f6:4f:06:0b:4e:64:
53:ec:ec:00:34:7a:66:0f:a1:82:37:6f:c2:68:e4:
45:c3:99:50:5b:8f:a6:53:19:e9:9c:c6:1a:c5:fa:
27:36:44:a4:8f:d3:cd:33:d3:5a:17:b2:19:f3:65:
40:b9:13:1f:75:d2:0a:fc:f3:f7:eb:e1:80:c6:5d:
8c:8c:64:b2:8a:e9:de:ba:79:6b:95:5a:f4:f2:aa:
c2:5c:4f:e8:f4:b2:68:f1:8b:4d:76:14:9b:44:a6:
fb:f6:06:b5:58:97:25:0f:2e:48:4e:7d:1f:56:bf:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3B:40:E9:93:4B:B2:51:85:C1:BA:DD:ED:6D:4D:43:E7:B9:31:B0
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/cTtA6ZNLslGFwbrd7W1NQ-e5MbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.36.0-5.102.38.255
Signature Algorithm: sha256WithRSAEncryption
1a:94:54:84:85:15:41:1d:60:a6:91:6a:43:4a:ae:64:33:77:
ff:d8:d5:eb:4b:01:f6:85:3c:49:6f:6f:d5:34:42:70:db:ec:
2f:bc:c7:1f:fd:d1:5e:36:bf:46:a8:4e:db:07:b5:3f:bb:f8:
d6:e0:e0:4e:e2:07:a9:80:51:ef:ae:c6:6c:a5:2a:3f:92:2e:
45:cd:c4:71:27:dd:84:d9:8e:b9:e5:0b:31:2d:92:fa:ba:25:
99:46:21:02:0d:7b:81:74:37:a2:b4:7c:26:67:c6:64:1a:d4:
34:11:1f:2a:cd:39:f8:6a:f6:df:60:56:f7:74:a1:d7:2b:b9:
49:11:b7:ef:81:30:bd:55:1d:49:d4:43:57:29:d3:64:7f:78:
e7:9b:2f:06:35:94:a9:79:ab:3e:38:82:7b:06:2e:c9:39:1d:
eb:41:2b:0c:2b:92:f8:4b:7a:e5:60:da:63:21:73:1a:e3:2c:
0f:b5:61:4b:b7:98:1c:f6:5b:48:9c:28:48:4c:87:46:5e:41:
94:fd:9b:18:5a:3d:3a:2a:a2:3d:e1:ef:cb:5f:cf:c4:d5:74:
54:da:6a:38:92:3e:5f:2a:3a:f3:17:e7:98:ce:fb:8f:2c:87:
af:ff:9d:ed:53:17:1d:24:31:6e:3d:6c:71:cc:8e:56:0e:4e:
51:b1:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:50 2024 by rpki-client on console-fra.rpki-client.org