Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/g4CzZR7OPmCJIK3_Fw1BC610VdQ.roa
File: g4CzZR7OPmCJIK3_Fw1BC610VdQ.roa (raw, json)
Hash identifier: 3Xoda9I8Glatucu2tU9Zus90Y9E2H94W2cQ6aVoxwmQ=
Subject key identifier: 83:80:B3:65:1E:CE:3E:60:89:20:AD:FF:17:0D:41:0B:AD:74:55:D4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D1711BA67B2B8DCB15E4E8D7F08E99DE5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/g4CzZR7OPmCJIK3_Fw1BC610VdQ.roa
Signing time: Wed 17 Jan 2024 10:57:34 +0000
ROA not before: Wed 17 Jan 2024 10:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26042
IP address blocks: 5.253.65.0/24 maxlen: 24
31.13.211.0/24 maxlen: 24
87.121.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 11:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:11:ba:67:b2:b8:dc:b1:5e:4e:8d:7f:08:e9:9d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 17 10:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8380b3651ece3e608920adff170d410bad7455d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:00:14:a5:78:78:df:dd:20:b5:64:cf:c3:
45:b4:b8:3e:bf:d4:4d:eb:c7:34:c0:62:aa:aa:b0:
e7:f6:c7:41:37:77:94:1b:72:80:c1:3d:34:de:9c:
8b:0f:36:dc:cd:93:f1:3e:48:b8:fb:9d:9e:be:10:
31:66:05:3f:f0:7f:8a:34:f5:c3:03:8d:37:9e:a4:
58:15:3d:2d:09:3e:28:6d:f3:ba:83:75:d5:b7:2e:
d9:e1:f7:82:55:dd:22:be:98:27:e9:0b:44:7c:a1:
9d:fe:7e:ce:75:ef:3f:0c:34:55:ee:de:d7:14:b6:
00:b4:2e:a5:58:62:91:19:75:62:3e:ae:e5:71:56:
7c:02:fb:73:12:1d:6d:3e:9b:a9:38:48:b5:36:c5:
d1:89:65:1c:5f:18:47:02:8f:69:9b:c7:f3:e2:55:
67:cc:d6:fd:0c:05:96:fa:ff:f1:30:f0:38:d8:87:
b5:d4:fc:a1:4e:29:f0:36:6c:da:f8:b4:2e:03:57:
f0:ef:f0:81:23:50:e4:cb:50:e6:43:63:01:6d:f5:
bc:c4:bd:70:38:18:3a:cc:63:53:99:26:0c:f7:0b:
e4:c8:b4:1a:e6:eb:2d:1c:87:42:7a:e3:6e:e1:74:
50:98:9e:72:e9:29:27:e7:05:48:65:dc:49:7c:ed:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:80:B3:65:1E:CE:3E:60:89:20:AD:FF:17:0D:41:0B:AD:74:55:D4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/g4CzZR7OPmCJIK3_Fw1BC610VdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.65.0/24
31.13.211.0/24
87.121.146.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:da:ef:29:d5:bc:e1:57:a2:c5:33:89:03:6d:93:f9:0e:ac:
ee:21:45:d4:6d:64:4a:89:9a:0d:f4:4d:a0:d1:85:ef:96:dd:
17:1b:ec:9f:0c:85:6f:e1:3f:b7:6b:0c:ac:d6:f2:61:6f:5e:
21:7c:31:0f:61:03:9b:5b:d7:7e:61:58:2d:72:43:28:76:1f:
84:f8:af:ea:3b:05:12:63:46:56:77:d0:8a:f5:bf:21:44:8f:
fb:97:57:67:b8:c2:f9:e2:ca:09:6c:e0:e0:f4:07:7e:37:db:
0d:de:9e:f2:f5:c7:2e:91:49:27:8b:5e:41:23:a4:44:47:12:
a1:d4:db:17:d8:93:b8:5c:63:df:0b:9e:d6:ce:a3:fb:da:22:
77:3a:b6:fb:c0:0b:0a:c3:09:cf:02:2b:aa:3c:db:ce:60:02:
8a:0a:ad:7c:e7:1f:ec:27:44:06:66:8a:9b:fc:53:fb:02:b0:
92:2b:6c:b0:35:2a:94:6c:7c:2b:32:79:fe:f4:14:d3:26:68:
66:e0:95:c4:4f:57:3a:76:f2:6f:ae:a7:49:95:3a:32:98:92:
40:db:6f:11:45:9d:d7:db:0c:be:df:79:ff:ce:ad:6e:5a:2a:
f5:c2:67:23:01:09:03:88:f0:bc:de:e8:f6:11:58:3b:b1:e6:
e5:9e:ed:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 15:30:18 2024 by rpki-client on console-ams.rpki-client.org