Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/Er5bS_3mzwZ_Zz29rbPwxGGE7vQ.roa
File: Er5bS_3mzwZ_Zz29rbPwxGGE7vQ.roa (raw, json)
Hash identifier: v5sVBtk5XN3xoHLOSflvntFDwCs+qiJjG4nJTgf+nhw=
Subject key identifier: 12:BE:5B:4B:FD:E6:CF:06:7F:67:3D:BD:AD:B3:F0:C4:61:84:EE:F4
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 019138A8FE3EA337F6AD60C7CAA189753B61
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/Er5bS_3mzwZ_Zz29rbPwxGGE7vQ.roa
Signing time: Fri 09 Aug 2024 19:41:24 +0000
ROA not before: Fri 09 Aug 2024 19:41:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 5.180.84.0/22 maxlen: 24
46.244.96.0/24 maxlen: 24
92.240.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 05:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:38:a8:fe:3e:a3:37:f6:ad:60:c7:ca:a1:89:75:3b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Aug 9 19:41:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12be5b4bfde6cf067f673dbdadb3f0c46184eef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:00:ac:ea:ef:23:e6:6c:a5:8d:6c:71:5b:
37:c5:da:79:4a:ed:63:3b:27:23:58:0e:86:b1:1e:
f0:52:68:e0:b5:14:a6:34:8b:49:22:fc:67:08:fe:
e6:8e:fa:85:a5:1e:b4:91:42:71:09:a6:57:9d:e3:
40:f9:50:6a:d1:ac:2b:1a:c7:a3:27:47:13:bf:ba:
41:a9:72:1d:06:ab:7d:41:ff:5c:9d:a1:a9:da:be:
99:13:76:93:5d:6e:c8:8d:62:fe:ca:81:21:0b:4a:
74:e5:70:2b:e5:2e:8f:3c:27:95:ae:da:df:93:a2:
c0:e9:fc:41:e8:13:6e:5a:68:6e:2c:94:54:fb:fa:
73:64:1f:f8:c0:32:47:82:b4:03:83:ed:2e:86:d5:
31:63:c6:c7:b8:4d:4f:b7:1d:75:20:f3:05:bb:08:
99:9f:0c:5a:83:55:47:f1:cb:a7:45:65:32:0f:f8:
cd:9e:6c:ed:d7:d3:8e:41:dd:34:e9:81:09:4d:ee:
c7:b0:7d:2d:64:05:5f:24:e0:3a:56:22:69:ce:7e:
57:bd:9b:ed:dc:26:62:87:36:9e:c9:9f:fb:1b:8d:
52:89:59:6f:b4:44:43:d9:09:34:da:83:e8:de:5e:
c1:5d:3d:61:cb:e1:b6:36:82:bc:28:b1:e5:95:b8:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BE:5B:4B:FD:E6:CF:06:7F:67:3D:BD:AD:B3:F0:C4:61:84:EE:F4
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/Er5bS_3mzwZ_Zz29rbPwxGGE7vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.84.0/22
46.244.96.0/24
92.240.150.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2c:0d:9b:00:02:27:46:24:7e:49:9c:82:06:0c:72:80:c5:
65:53:92:fd:4c:7c:85:22:43:08:57:c8:e6:60:47:34:2f:90:
d8:09:a5:5d:80:fd:1a:ac:44:7d:f1:fb:b5:8d:17:11:aa:49:
2c:66:0d:b4:4b:0b:22:9d:d6:18:4f:f1:18:6d:d7:2c:09:ee:
61:4a:d9:4d:13:c6:9a:b9:2e:21:73:31:92:8c:a3:04:0c:56:
d1:47:c0:b0:91:40:4e:e9:8a:58:ec:c1:a4:e0:5e:90:7a:3e:
f2:29:b7:0f:c7:2b:5a:15:06:fb:49:01:be:12:9d:66:c0:08:
9c:26:04:26:be:a6:3c:40:f0:86:1c:71:80:8f:59:6e:69:15:
ec:d0:0a:45:32:33:62:83:fe:26:ba:a4:36:19:93:51:1a:83:
0d:76:59:1c:53:81:0b:0f:d7:20:2b:3d:3e:d9:20:48:25:9e:
5a:e4:88:17:9a:3f:e0:cb:bf:25:b7:b1:65:c0:0c:61:06:57:
bb:c3:a9:ec:dd:a1:26:40:96:e4:bd:bd:bb:20:a7:1d:38:f3:
36:c5:f4:00:4c:94:ed:a0:ba:31:90:81:25:ac:36:f6:b5:43:
2a:4b:48:d8:a2:65:a7:63:53:2c:db:38:6b:9c:16:37:c3:6c:
28:b7:7a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 06:55:10 2024 by rpki-client on console-ams.rpki-client.org