Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rcyGFudE0QFRFo3_-mL7bYof3tI.roa
File: rcyGFudE0QFRFo3_-mL7bYof3tI.roa (raw, json)
Hash identifier: iNOjcm+71pOxdv/TuL+17Up8+xbudd1lbZdcumcvYV0=
Subject key identifier: AD:CC:86:16:E7:44:D1:01:51:16:8D:FF:FA:62:FB:6D:8A:1F:DE:D2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01933BCA3F99838EEC79CF44C7978A77805E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rcyGFudE0QFRFo3_-mL7bYof3tI.roa
Signing time: Sun 17 Nov 2024 20:22:10 +0000
ROA not before: Sun 17 Nov 2024 20:22:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 5.253.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 00:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3b:ca:3f:99:83:8e:ec:79:cf:44:c7:97:8a:77:80:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 17 20:22:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adcc8616e744d10151168dfffa62fb6d8a1fded2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e5:e0:27:49:0c:0c:67:da:7e:34:01:44:45:
96:f1:da:f2:ee:2d:d9:c5:16:48:ee:1a:b2:6a:48:
4f:ef:62:c6:8d:fc:41:19:81:06:2f:4d:e1:40:16:
d5:9a:e1:e8:5d:bf:af:d6:30:6e:d3:b6:ec:63:7c:
c3:29:e7:ae:d7:57:f0:5c:e4:1f:19:ff:fc:72:39:
e4:0e:9f:6d:6f:c8:84:4c:2a:63:4e:5f:94:e5:2c:
ec:39:0a:94:b3:49:cb:e0:90:72:7f:e3:74:86:8a:
f5:61:ee:c8:e8:40:ed:f3:26:f6:04:6d:c3:16:60:
c0:58:87:61:0c:61:f4:b5:2a:d4:0c:83:49:fe:29:
05:e7:86:39:83:db:f0:f8:99:3d:9d:87:a0:70:ec:
1c:d3:fe:19:74:7c:fd:08:02:93:fb:d9:e0:4c:98:
a0:13:0a:c6:1b:bb:56:26:16:12:e6:43:bd:13:f5:
53:eb:7f:cd:9e:a8:63:37:ef:d3:74:a3:ce:74:9e:
f0:73:98:84:b5:f9:66:dc:6c:e4:6d:56:93:ae:cf:
a8:68:87:ec:9d:ab:eb:da:db:cb:28:50:07:e4:2b:
e6:ef:1b:5e:e5:d3:38:8a:91:eb:d0:c0:20:1e:4b:
34:2c:2c:21:a2:d1:0c:b0:e9:8f:c6:9c:2f:06:b7:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CC:86:16:E7:44:D1:01:51:16:8D:FF:FA:62:FB:6D:8A:1F:DE:D2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rcyGFudE0QFRFo3_-mL7bYof3tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d9:39:8c:b2:6e:c1:73:7c:9d:dd:fa:5e:57:2e:5a:b3:22:
05:ea:e1:e5:b9:e5:2b:e6:4a:35:e8:f5:7f:6e:f7:d7:16:1f:
10:5b:5a:67:3d:ed:91:bd:b8:2f:3c:5c:1f:60:0b:b5:92:11:
7f:5c:c8:57:7f:2d:07:a4:73:cb:a5:92:94:ce:53:df:df:2c:
f7:4a:e9:d9:63:e6:d3:2f:3f:8f:f9:b1:5d:10:59:7f:e9:d9:
a2:3b:0b:b0:0d:b6:a3:af:1c:76:69:de:22:1c:13:f7:34:be:
4c:80:1a:53:2c:df:7a:5c:df:d6:e1:a5:e0:bf:8b:2b:da:e2:
6a:b0:a9:d6:fb:c3:10:09:f9:57:d6:ff:f2:72:5d:0a:d5:56:
b7:46:43:bb:88:31:03:93:31:a7:56:97:ec:5e:03:53:63:b9:
48:f4:4f:92:03:25:7f:de:a2:cb:78:9a:b5:52:6d:8d:7a:fc:
ba:3d:13:71:67:61:b4:e0:78:a7:c6:5c:3b:43:4c:2a:d9:05:
64:37:09:b2:b7:6c:08:91:da:99:d5:02:50:0b:22:e2:09:a4:
14:db:8b:88:73:06:04:f9:6a:93:f9:5d:5e:cf:63:b4:54:ca:
27:9e:63:44:3d:c6:1a:b4:66:ef:ca:31:ea:0d:d3:b0:fd:97:
c7:41:b1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:18 2025 by rpki-client