Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/O18rLdDmcu2SDA8jQP39MGBgnug.roa
File: O18rLdDmcu2SDA8jQP39MGBgnug.roa (raw, json)
Hash identifier: V8+9QZmDaezEEx2i0bdqF6qVpNvxTBsHq054o2oLDAg=
Subject key identifier: 3B:5F:2B:2D:D0:E6:72:ED:92:0C:0F:23:40:FD:FD:30:60:60:9E:E8
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01857054CA82E2D0C524A05E7B123A32715B
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/O18rLdDmcu2SDA8jQP39MGBgnug.roa
Signing time: Mon 02 Jan 2023 02:34:43 +0000
ROA not before: Mon 02 Jan 2023 02:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 5.252.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Mar 2023 20:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:54:ca:82:e2:d0:c5:24:a0:5e:7b:12:3a:32:71:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 2 02:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b5f2b2dd0e672ed920c0f2340fdfd3060609ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:d1:f0:86:00:f3:45:90:cd:d4:a2:9d:86:
7c:37:3f:ef:3e:ee:2d:13:57:ec:32:ef:86:fb:b7:
85:ad:3f:1b:03:59:84:09:3e:e5:43:c0:3e:65:87:
10:5b:84:ae:2f:ed:9c:f5:23:b8:80:b5:87:04:ac:
48:ac:56:73:6f:88:b9:d0:ff:9b:18:29:e5:87:4e:
88:b0:42:e3:59:2e:8e:bf:86:5f:d5:ac:66:b8:6e:
90:32:99:2d:a4:29:a7:5a:17:df:dd:67:47:7a:79:
d2:13:6b:a8:19:a5:90:9c:1a:4c:a8:90:45:c0:58:
fe:89:02:f8:77:69:fa:90:a1:55:a9:6a:ea:ad:b6:
07:ec:b0:56:3a:dc:5b:5e:1e:72:6d:61:93:59:e1:
96:d4:9a:6b:c5:15:d6:00:7a:36:b4:e6:2f:8b:06:
81:93:11:b5:23:b9:ab:3f:9a:23:ab:b3:b6:dc:6d:
22:de:6f:3c:a2:92:b1:81:94:be:69:03:7d:ab:04:
9e:b0:6c:2b:38:d6:70:f2:62:76:64:1e:42:d9:75:
39:27:3b:d1:61:5b:02:83:82:24:b4:18:7d:a3:93:
93:78:3a:16:78:03:df:78:44:b7:31:8f:87:73:1e:
d1:0b:f0:55:ee:40:89:b6:1b:11:14:06:cb:a5:f7:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:2B:2D:D0:E6:72:ED:92:0C:0F:23:40:FD:FD:30:60:60:9E:E8
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/O18rLdDmcu2SDA8jQP39MGBgnug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.21.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f8:ec:42:f4:72:36:d0:7d:83:d8:40:c0:c7:d3:78:96:2d:
4b:67:a1:02:04:e9:8c:15:24:cf:a8:d1:86:cf:7e:ab:2a:ea:
55:1e:e8:85:5f:4f:31:1f:18:6c:8e:54:7f:c8:ca:6d:14:09:
99:c2:41:63:42:c2:e6:ec:71:98:6e:91:69:bb:29:6f:92:8d:
bb:a0:64:76:78:ab:8f:fd:cb:50:9e:a4:71:1f:5a:10:68:35:
28:1f:f6:90:f5:0c:8b:20:b1:73:40:84:fd:c4:d5:82:96:70:
bc:87:bc:26:0d:5c:2b:4d:c1:58:39:98:9d:13:e4:7e:f0:0a:
fb:b6:64:b1:75:60:dd:a2:6d:1e:b1:50:70:29:72:ff:8e:c7:
d6:5e:c6:ce:bd:be:e7:8a:67:c0:f6:c7:0b:c2:d5:60:f0:75:
da:4b:f9:e2:07:3a:75:ee:45:d8:a9:d2:94:4b:fe:c2:22:b9:
41:d1:78:0a:51:00:77:b8:22:6b:d4:4d:95:85:27:b1:15:44:
10:7d:53:8f:52:64:0f:85:c1:a2:11:00:13:7b:0b:20:53:91:
35:a2:31:fe:94:aa:02:d2:ba:d2:5a:1a:09:23:d0:f2:fb:c8:
27:bb:05:2e:90:c7:21:76:5b:41:12:0c:8a:c2:7c:db:7f:d4:
a1:02:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org