Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/B4GAmVyhpIJnz1_iwP_XwB5qcFQ.roa
File: B4GAmVyhpIJnz1_iwP_XwB5qcFQ.roa (raw, json)
Hash identifier: E5NFZNnNXT9C4rphn1u5lVu3f9+tzMtJxNyaCXWrW3I=
Subject key identifier: 07:81:80:99:5C:A1:A4:82:67:CF:5F:E2:C0:FF:D7:C0:1E:6A:70:54
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 01914A2A1DE6F44ACF5C65264D08D0A41946
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/B4GAmVyhpIJnz1_iwP_XwB5qcFQ.roa
Signing time: Tue 13 Aug 2024 05:15:59 +0000
ROA not before: Tue 13 Aug 2024 05:15:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 5.180.84.0/22 maxlen: 24
46.244.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 10:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:2a:1d:e6:f4:4a:cf:5c:65:26:4d:08:d0:a4:19:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Aug 13 05:15:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=078180995ca1a48267cf5fe2c0ffd7c01e6a7054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:b9:ae:7c:22:8d:20:05:7d:fd:43:2a:63:
27:c0:8e:38:aa:84:ff:ee:08:fc:3a:bb:6e:f6:f5:
cd:b3:fa:cd:63:ab:d5:48:2f:47:bd:a1:5f:72:4b:
34:60:18:c1:17:da:be:db:08:fc:36:1d:51:c3:b5:
0e:1b:61:90:76:5c:70:1f:e4:b8:b2:12:65:d8:4d:
78:c6:65:24:1d:f2:c1:bb:0a:c6:f9:e1:30:f2:b7:
58:ff:8b:24:5e:0e:b2:5b:15:2a:f3:09:dc:4b:6d:
47:27:1b:92:84:bc:51:c2:5f:04:e4:2d:a7:18:c4:
df:c3:c9:1a:ef:ef:b7:56:83:0a:a2:1a:b5:5f:04:
28:a7:98:6d:9c:11:0d:4d:22:ab:81:f0:5b:ad:e8:
c3:b7:65:09:65:6f:70:6e:ad:9d:3a:70:cb:11:0d:
4e:a3:da:3f:8a:e0:f3:19:9f:da:e8:32:a5:df:75:
98:e4:43:2e:aa:1a:23:ba:30:0e:39:dd:e7:6e:3b:
9f:02:38:c2:9d:c5:96:80:f5:0e:7d:04:62:af:a4:
82:4b:95:0c:39:85:ef:13:2d:55:e3:df:39:57:b7:
4b:a4:e5:17:46:25:72:dd:c2:96:aa:a9:1f:5d:07:
f9:d4:09:b3:0c:01:71:f3:59:cc:4b:96:d3:db:b4:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:81:80:99:5C:A1:A4:82:67:CF:5F:E2:C0:FF:D7:C0:1E:6A:70:54
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/B4GAmVyhpIJnz1_iwP_XwB5qcFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.84.0/22
46.244.96.0/24
Signature Algorithm: sha256WithRSAEncryption
80:51:09:7f:75:ed:d9:4f:ed:54:04:c8:7c:6f:a0:01:d7:5e:
d2:40:54:47:d7:f2:41:51:fa:23:85:25:bc:ff:70:b4:48:73:
b4:25:65:a6:d1:44:de:f3:71:79:8f:38:cb:67:34:68:a4:6f:
a1:dd:e5:b6:1b:f1:40:5d:ff:6c:ef:a8:a8:0f:51:0e:67:12:
11:46:9d:37:ba:79:93:af:44:78:c0:86:cc:36:88:0a:1d:9e:
3c:f3:4c:9c:22:70:63:74:df:aa:0a:15:20:04:09:a1:7e:b2:
bc:75:ce:6c:30:ab:24:b5:07:a3:c8:b3:db:21:57:a1:fb:18:
b4:ef:41:2f:bf:1c:99:33:04:0e:c5:e0:7b:21:f8:85:e5:db:
9a:35:66:dd:1f:37:3d:0e:e4:22:47:5f:b4:de:0e:9d:82:76:
4c:ca:13:a8:cf:25:fa:5f:23:9b:1c:c5:69:28:02:13:25:26:
32:12:d4:98:30:36:a3:fb:56:89:da:c4:2d:e8:76:17:cf:85:
25:3c:fe:40:8c:2c:39:a3:8f:42:3b:1b:96:8b:53:4d:f5:4b:
1c:17:96:5b:f1:21:33:a5:a2:1a:ba:15:1a:64:1a:ac:19:3b:
eb:d3:dd:08:12:ef:aa:83:35:8d:99:91:24:6c:a9:4b:85:90:
3b:f0:7e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 13:23:13 2024 by rpki-client on console-fra.rpki-client.org