Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IZcao16BMi7NJ-9p6bLK0gTD6jA.roa
File: IZcao16BMi7NJ-9p6bLK0gTD6jA.roa (raw, json)
Hash identifier: pdtlOes3wNfnRWH/gNXA9Cze9IIPbt0stCZ9pv8her0=
Subject key identifier: 21:97:1A:A3:5E:81:32:2E:CD:27:EF:69:E9:B2:CA:D2:04:C3:EA:30
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018C2504D011206CCCF2191B71FD1A29E0BF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IZcao16BMi7NJ-9p6bLK0gTD6jA.roa
Signing time: Fri 01 Dec 2023 10:55:21 +0000
ROA not before: Fri 01 Dec 2023 10:55:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59592
IP address blocks: 5.231.200.0/24 maxlen: 32
5.230.206.0/24 maxlen: 32
5.230.220.0/24 maxlen: 32
185.13.158.0/24 maxlen: 32
5.231.87.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:04:d0:11:20:6c:cc:f2:19:1b:71:fd:1a:29:e0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 1 10:55:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21971aa35e81322ecd27ef69e9b2cad204c3ea30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:cc:c0:ea:21:a7:ac:6f:24:ed:a7:1e:4f:
73:80:7a:f3:f9:4a:0f:69:a8:65:f3:30:4f:a8:b5:
55:b4:95:75:2a:28:09:b6:3d:14:d8:bd:78:e3:17:
18:e5:be:6e:18:1a:36:56:06:62:4a:67:22:d0:ea:
e6:55:c9:5e:23:9b:7b:9f:f9:da:26:39:02:d6:87:
ad:d4:da:eb:88:49:92:dd:33:21:b4:81:28:f7:e4:
89:96:33:2a:36:db:34:5d:ea:80:57:a3:56:d8:67:
8e:24:b3:d4:00:62:d5:d6:af:2f:77:fe:9e:a4:e7:
00:fd:84:37:06:4f:c6:ba:f3:f5:f9:f3:29:29:ce:
af:0a:7d:db:80:29:e9:70:16:1d:f7:19:08:8c:f9:
b4:27:7d:cb:ad:3b:4d:ba:ab:27:2b:3f:79:66:be:
7d:48:fd:6f:30:2f:c6:ea:9c:2d:71:3b:f1:b9:e8:
5b:a3:62:93:1b:6d:ba:e6:52:ab:30:a1:12:0f:7b:
ea:82:fd:05:01:2f:d4:7a:92:ec:0f:a4:2a:f4:57:
17:39:da:0f:3d:ab:44:92:b6:88:f3:ec:4f:f2:0b:
87:5b:8f:41:45:b4:b1:92:f3:f5:2f:19:5f:42:7f:
d5:3d:87:46:b2:fc:44:4c:6e:7d:56:b9:4b:22:b2:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:97:1A:A3:5E:81:32:2E:CD:27:EF:69:E9:B2:CA:D2:04:C3:EA:30
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IZcao16BMi7NJ-9p6bLK0gTD6jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
5.230.220.0/24
5.231.87.0/24
5.231.200.0/24
185.13.158.0/24
Signature Algorithm: sha256WithRSAEncryption
12:8f:b8:c6:b2:6f:d8:a4:36:ca:da:9e:00:78:0c:a3:88:09:
e3:63:3d:ce:85:52:0b:eb:e7:50:09:21:5b:d3:96:2a:5e:c6:
ad:df:9a:d8:be:f5:67:3f:34:53:d9:dd:e8:33:68:77:ca:ee:
bb:e6:a5:33:43:ed:5d:37:f7:f0:96:de:da:3e:f0:03:a1:1f:
1d:bb:eb:b4:1e:d2:6a:7a:99:6b:9e:60:c5:58:22:07:6d:e4:
fa:71:2c:b4:3b:f1:56:70:99:0a:4f:3e:48:6b:bc:fc:4b:99:
42:a5:fe:57:f8:0d:aa:7b:29:7d:6e:ec:0c:9c:8c:d4:2d:90:
20:05:3f:1a:56:d5:fb:d5:8e:9a:32:30:3b:2e:fe:f8:e7:15:
fa:47:07:ab:fd:7c:11:2d:d1:be:4e:e8:46:51:d4:02:71:a0:
52:da:d4:bc:6d:47:1e:2e:c7:4d:07:de:63:66:98:fb:f6:16:
01:7a:5a:51:56:44:dd:d0:e4:9f:bb:51:72:a5:cb:9b:56:ce:
34:b4:9a:5e:11:15:80:65:37:e2:1e:71:c9:b4:f5:ef:99:2e:
6d:06:b5:c4:96:f3:55:32:9f:35:ad:d7:00:c7:3d:d4:6e:8e:
5b:8a:42:06:16:c3:a7:5f:7f:23:05:59:da:3d:e6:9f:37:1f:
91:b4:6e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org