Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RWxJMbDoKHdc3C7GC-o8q1SOyFE.roa
File: RWxJMbDoKHdc3C7GC-o8q1SOyFE.roa (raw, json)
Hash identifier: uUjLDlElwOPiodmazKVXM+A9LgaAUPY6BdoHb0yjX7I=
Subject key identifier: 45:6C:49:31:B0:E8:28:77:5C:DC:2E:C6:0B:EA:3C:AB:54:8E:C8:51
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192549C669462E3D3D46074C00972970ADA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RWxJMbDoKHdc3C7GC-o8q1SOyFE.roa
Signing time: Thu 03 Oct 2024 22:59:48 +0000
ROA not before: Thu 03 Oct 2024 22:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62880
IP address blocks: 5.175.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 15:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:9c:66:94:62:e3:d3:d4:60:74:c0:09:72:97:0a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 3 22:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=456c4931b0e828775cdc2ec60bea3cab548ec851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:46:67:de:0c:2d:2f:25:4f:9b:01:0a:fd:
4b:b3:87:0d:ec:f8:e2:fa:bc:5c:a6:ef:84:06:6a:
7f:06:00:07:3f:40:94:ca:f2:05:c8:83:77:aa:87:
ed:b1:7c:91:a1:07:9e:a5:49:e0:35:7f:b4:cb:fd:
a8:07:df:82:a3:ec:4c:79:3b:89:7d:ab:2c:8e:07:
c7:0a:43:1c:f8:d6:ad:a5:24:66:75:9d:82:18:93:
4f:77:48:fc:95:71:c0:ec:53:f2:0d:c0:13:a5:ae:
1d:37:e1:e3:13:7d:14:22:be:ea:1f:26:bd:a3:29:
c6:0f:69:fa:5d:b8:2b:79:a1:24:a6:e7:cd:24:e0:
65:c3:cb:8c:9e:67:95:ba:ac:d0:7f:5c:d4:ab:d2:
1d:82:78:e1:39:65:71:fc:5b:58:2c:6f:45:71:23:
ec:75:a2:76:84:39:57:a0:39:7b:46:ac:0e:6c:b8:
5d:0d:89:cd:ab:52:a8:2a:44:aa:0c:c3:01:36:ab:
04:5a:0d:48:42:16:d5:62:e3:9b:28:47:8d:62:5a:
95:68:59:20:8e:3d:94:26:13:ca:4b:c7:c7:a7:e6:
80:b6:a8:32:ca:37:3a:4e:77:37:5e:02:10:a1:4f:
b8:66:ad:17:a1:35:76:76:c6:df:a1:4d:dc:36:38:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6C:49:31:B0:E8:28:77:5C:DC:2E:C6:0B:EA:3C:AB:54:8E:C8:51
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RWxJMbDoKHdc3C7GC-o8q1SOyFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0/24
Signature Algorithm: sha256WithRSAEncryption
da:9d:d3:d3:5e:26:df:65:45:aa:bf:7a:49:b0:24:ef:a0:ac:
3d:8c:8b:1d:38:52:a7:f7:4a:45:c3:d4:19:93:87:fd:05:ad:
90:6b:68:4a:36:fc:05:64:5d:46:df:73:37:36:f7:18:06:8f:
8a:7e:0c:7a:a9:b2:f8:36:91:c7:48:ba:1b:96:64:88:df:a8:
e0:49:14:09:76:d8:19:e7:c2:4e:0c:10:82:35:56:ff:6b:d3:
eb:0f:fe:76:bc:6c:14:c3:3b:3b:4d:81:31:5a:79:94:74:e7:
dc:52:c6:34:42:6f:10:c7:41:90:80:9a:25:57:8e:a9:ec:b5:
b0:bf:2b:13:a6:35:6f:99:4d:42:f6:86:89:be:8f:b6:10:20:
49:e2:8d:57:40:b8:38:7e:6a:b7:aa:3d:de:e4:25:99:35:dc:
12:fa:e5:d6:12:d4:f8:a4:ae:ec:c1:3a:04:5b:a5:fb:84:c0:
ec:b7:29:98:a6:48:ec:6f:90:a4:77:f1:6e:3f:7b:22:6f:19:
7b:58:fd:05:8f:44:e7:c9:eb:bb:c2:ed:e3:f3:b8:26:d7:95:
8f:9b:6b:a1:03:a8:23:61:48:63:3e:31:a9:10:34:14:63:59:
01:b9:d6:df:60:8a:45:10:b2:b2:c1:1b:a6:19:d2:68:0e:59:
97:d7:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:50:11 2024 by rpki-client on console-ams.rpki-client.org