Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/xvgqmDMTnB7C4zFP9cRBXmxyjoY.roa
File: xvgqmDMTnB7C4zFP9cRBXmxyjoY.roa (raw, json)
Hash identifier: AmEHGz3gGTnBP2ybmcNC77rL05P1mnHSFFJmI9YykXQ=
Subject key identifier: C6:F8:2A:98:33:13:9C:1E:C2:E3:31:4F:F5:C4:41:5E:6C:72:8E:86
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 018BB0E0B28D831A630E252A60EAD3463D23
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/xvgqmDMTnB7C4zFP9cRBXmxyjoY.roa
Signing time: Wed 08 Nov 2023 21:39:57 +0000
ROA not before: Wed 08 Nov 2023 21:39:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 5.102.38.0/24 maxlen: 24
5.102.36.0/24 maxlen: 24
5.102.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 23:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b0:e0:b2:8d:83:1a:63:0e:25:2a:60:ea:d3:46:3d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Nov 8 21:39:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6f82a9833139c1ec2e3314ff5c4415e6c728e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:0c:9e:86:51:f5:3d:0c:d3:cb:7d:d9:e3:
00:4d:90:9b:04:f7:18:8d:33:2a:5f:64:0e:99:8c:
fc:6d:09:78:06:1b:ab:fc:b8:f7:2e:87:81:10:62:
ef:90:1c:b3:7b:f9:20:33:02:b0:90:56:23:02:ad:
6f:ba:36:ed:2d:b9:d2:2f:97:63:97:50:1c:4e:03:
08:37:bf:0c:cc:7f:f1:6a:44:6c:56:ee:b2:1f:19:
f0:80:8b:f4:46:23:eb:ee:33:b0:6f:e9:e0:c5:18:
4b:4b:59:7b:a1:9b:ff:54:a0:40:6e:c0:87:86:2b:
4b:35:19:e5:71:3e:af:e7:03:65:a1:65:23:2d:05:
72:21:14:c2:b0:7e:a4:a4:70:7b:d6:06:e8:21:5f:
ec:3c:fd:89:9d:67:0f:15:5f:9b:f9:19:e4:a1:18:
ec:46:49:48:0c:1c:72:4b:58:1a:09:52:bd:1f:8f:
bc:c9:62:bf:60:b1:5d:96:60:fa:d1:28:30:bf:ab:
40:a9:29:cb:21:0c:5e:41:cc:57:cd:6a:4f:39:7f:
da:c2:57:5d:bd:30:ee:fa:b0:5e:d8:51:24:ef:7a:
fa:ea:97:54:9b:fb:09:61:77:06:b6:f7:53:10:88:
85:1b:62:a5:ad:85:d5:6e:dd:c9:c4:ef:7d:93:c3:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F8:2A:98:33:13:9C:1E:C2:E3:31:4F:F5:C4:41:5E:6C:72:8E:86
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/xvgqmDMTnB7C4zFP9cRBXmxyjoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.36.0-5.102.38.255
Signature Algorithm: sha256WithRSAEncryption
60:f7:c7:aa:a9:21:60:f7:23:c9:1d:42:ed:65:f9:d1:8f:7c:
3a:21:e2:d1:e9:3c:10:dc:f2:f2:55:bb:b5:89:67:a9:fa:69:
04:95:fd:b9:34:cf:a4:36:02:74:ed:6e:fd:c7:e9:c3:4d:fa:
b6:c0:d0:71:0a:58:fd:f5:33:71:05:75:2d:ea:75:db:84:ee:
b4:c2:05:a6:52:d9:55:b4:c5:b8:43:01:d6:85:ac:47:f1:54:
43:d5:b4:97:e1:e1:2e:b0:85:8f:c3:8e:88:08:31:1a:c9:e0:
05:a9:8f:f2:76:26:28:b0:1c:e2:33:ed:7a:88:5e:3e:ba:89:
85:4b:94:9b:5e:1a:3c:71:02:15:23:2c:31:ad:8b:59:17:0a:
1b:3b:6f:a0:c7:ea:1b:a6:6e:7c:f9:0c:fd:61:ee:d6:5e:e3:
86:8a:7c:b8:0b:98:d7:d8:a4:fe:54:1c:6f:ff:87:86:10:d9:
a2:8b:0a:07:50:4c:19:b8:02:e8:a8:0a:6a:48:40:03:eb:e4:
c2:e7:b7:17:16:05:b5:28:19:3c:9f:55:b5:d5:b0:64:3a:a1:
2b:82:36:44:2f:e1:fc:ad:d5:a1:fd:44:c5:b6:03:4a:33:5b:
a4:4c:6f:85:dc:4a:61:66:e8:3b:4c:3d:e5:b4:4c:d4:e3:52:
94:e2:eb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:06 2024 by rpki-client on console-ams.rpki-client.org