Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8_yFehcZJYKu25CLk7jPcz97gnE.roa
File: 8_yFehcZJYKu25CLk7jPcz97gnE.roa (raw, json)
Hash identifier: alcRz1MuATakRlLsJyEyAOadkVpiX8GjZaB2L0mJCUY=
Subject key identifier: F3:FC:85:7A:17:19:25:82:AE:DB:90:8B:93:B8:CF:73:3F:7B:82:71
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D45DCC88A9DC57F6698D442D46DE22D4E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8_yFehcZJYKu25CLk7jPcz97gnE.roa
Signing time: Fri 26 Jan 2024 13:01:53 +0000
ROA not before: Fri 26 Jan 2024 13:01:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26042
IP address blocks: 5.253.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 13:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:dc:c8:8a:9d:c5:7f:66:98:d4:42:d4:6d:e2:2d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 26 13:01:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3fc857a17192582aedb908b93b8cf733f7b8271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:39:80:4a:3f:52:b5:e9:23:d2:d9:3e:50:50:
a0:2f:cb:d4:9d:8e:29:82:f1:0f:89:66:e3:be:4a:
96:de:ad:5c:ee:fc:dd:de:65:45:b3:e6:28:01:e1:
88:d2:b2:f8:0b:97:3c:91:54:e3:ca:5b:1b:ff:89:
71:d3:3b:26:0c:f5:3f:11:13:61:cf:cc:f2:12:e9:
ee:cf:92:1f:49:d5:d6:b0:86:3c:02:9d:5d:c8:c2:
86:91:f7:bb:f7:ee:48:19:1d:59:0c:d9:e4:d5:b1:
42:16:cb:da:64:47:5a:4f:f3:e8:60:19:ad:88:0f:
6c:46:be:67:1d:c7:a8:e9:86:5f:b3:d9:54:4d:b8:
b1:8f:7c:e5:b7:c1:6f:8c:8b:ab:f5:cc:62:2e:b9:
c0:95:24:2b:28:c8:60:67:d7:27:9a:f8:20:5a:35:
b5:17:8c:8f:84:93:25:0e:47:fb:5b:f7:57:36:09:
7c:f8:ca:c2:cf:5b:74:23:25:db:ab:27:f3:8a:5b:
35:ce:2d:d3:55:4d:f5:b6:fb:50:ac:ad:12:cf:7a:
17:9a:98:54:fb:a3:b1:73:a4:3c:3b:14:e1:8d:f2:
ff:b3:02:97:48:d2:85:d5:21:90:2f:98:a9:59:b6:
15:ef:be:0c:7c:a4:7e:d3:5d:4d:46:81:45:9b:1c:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FC:85:7A:17:19:25:82:AE:DB:90:8B:93:B8:CF:73:3F:7B:82:71
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8_yFehcZJYKu25CLk7jPcz97gnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.65.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e7:b1:79:0a:62:27:3b:1e:87:6a:e5:93:8f:f8:07:84:75:
8a:57:6b:26:7c:46:a2:f2:0a:3d:39:aa:29:23:94:9c:6c:28:
44:d7:e6:cc:5c:9d:50:2a:4d:da:af:61:ac:f5:5b:99:65:6c:
0c:06:6b:70:74:19:47:ad:e9:96:8d:84:81:79:a5:7b:67:86:
c4:f9:03:bf:89:d2:b7:f0:41:e4:83:c5:0b:cf:78:83:18:6b:
6e:31:c1:d6:34:86:d8:c0:92:3e:52:88:4f:af:b0:8d:9d:1e:
0c:71:99:0d:1e:55:ec:c0:64:f4:e7:3d:ff:d0:10:bb:ee:14:
9a:d0:46:96:f2:f3:8d:b2:b4:2f:81:71:0c:b4:c6:f9:a9:50:
a7:9a:df:3d:b7:cc:b1:44:19:4c:1c:1e:d2:6e:86:28:00:92:
7b:b5:67:be:ed:86:54:a9:78:28:eb:ff:94:91:b4:d7:d8:18:
02:9c:44:94:b6:24:8d:b6:91:de:9d:b3:5c:92:a0:ec:38:a2:
93:e0:b0:ee:c1:64:9c:1a:27:1b:31:2b:64:b1:40:47:e0:8e:
0a:bc:a2:08:a6:54:62:a1:ba:5e:9a:fe:55:e7:9c:55:63:ff:
b6:41:11:d8:9e:98:fe:0f:28:6e:f2:44:e1:7d:7e:18:ca:b7:
1a:64:9d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 17:55:29 2024 by rpki-client on console-ams.rpki-client.org