Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/d_5j1JISX6H9UAa_3Jtb1513SGg.roa
File: d_5j1JISX6H9UAa_3Jtb1513SGg.roa (raw, json)
Hash identifier: 2AJAH/6PZk7JOhe7Rj45SAv+y+Eua9byRykZ1zBD5N0=
Subject key identifier: 77:FE:63:D4:92:12:5F:A1:FD:50:06:BF:DC:9B:5B:D7:9D:77:48:68
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019289373FC01FFDEAF95A013D458C4A5C62
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/d_5j1JISX6H9UAa_3Jtb1513SGg.roa
Signing time: Mon 14 Oct 2024 04:09:12 +0000
ROA not before: Mon 14 Oct 2024 04:09:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214347
IP address blocks: 5.83.138.0/24 maxlen: 24
5.83.154.0/24 maxlen: 24
77.90.29.0/24 maxlen: 24
77.90.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 07:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:37:3f:c0:1f:fd:ea:f9:5a:01:3d:45:8c:4a:5c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 14 04:09:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77fe63d492125fa1fd5006bfdc9b5bd79d774868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:38:ae:81:2f:bf:c3:47:4e:99:ee:34:5d:
66:69:0f:76:76:d2:ca:05:6d:22:6d:28:04:29:87:
f3:a4:7b:66:99:f2:23:8a:e1:57:82:78:45:c6:a8:
00:b2:bf:5a:45:6e:9c:0d:4b:d2:f7:c7:96:b2:d5:
29:d5:82:41:ac:ce:04:53:be:9c:5f:df:c1:17:89:
48:20:1e:22:76:a8:5a:af:d3:df:ef:97:18:d0:28:
21:66:84:f8:5b:5b:1b:a4:ae:91:8c:b9:ce:ec:bc:
83:f4:2d:7b:b9:2c:d5:5c:84:77:b5:51:09:25:28:
5e:50:5a:d5:7a:23:d5:ed:cd:05:e9:46:28:41:c6:
9c:1c:1d:21:d4:70:c6:b9:19:96:7a:e2:01:ac:19:
da:18:cf:e2:23:ce:b2:8f:5a:70:cd:35:0f:fb:be:
8e:05:d6:70:9c:be:24:18:c1:b6:94:a8:98:52:47:
53:14:5f:7f:09:a6:04:24:93:57:57:48:73:8b:52:
57:18:25:2b:36:0f:be:c4:ca:af:ae:d8:2c:18:50:
18:b0:6d:14:2e:de:05:8a:3a:f0:15:c6:3e:fe:a9:
4e:06:58:47:a6:13:64:eb:80:7f:78:6e:7d:24:3c:
7a:fb:b4:83:12:4c:ef:e5:4b:17:f2:68:3b:f5:a0:
e5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FE:63:D4:92:12:5F:A1:FD:50:06:BF:DC:9B:5B:D7:9D:77:48:68
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/d_5j1JISX6H9UAa_3Jtb1513SGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.83.154.0/24
77.90.29.0/24
77.90.44.0/24
Signature Algorithm: sha256WithRSAEncryption
24:81:bf:03:d9:6f:25:d9:89:7c:4a:44:3a:fa:48:e7:a1:ec:
d8:18:9f:a8:08:d7:90:63:d5:75:5b:b9:68:5a:33:9e:0b:c7:
a1:c7:28:47:65:7d:33:8f:c6:35:ee:40:59:68:b3:a3:80:55:
d8:80:0c:11:89:7f:eb:b5:68:6b:24:c7:29:0c:11:c6:bc:53:
86:66:40:c0:0d:91:dc:9b:b1:45:8a:df:9f:86:c8:ee:ce:63:
89:7c:ac:5e:a5:87:ac:da:20:d2:a1:3a:74:2a:1d:84:1a:8b:
89:a5:e1:a8:47:0f:ba:2e:c0:ea:12:99:d3:19:56:ac:28:9b:
3a:8b:35:0e:2f:db:4c:47:32:63:a8:24:5f:ba:75:d9:26:46:
87:98:9b:ca:3b:d0:68:fa:cc:98:76:9d:76:ae:6f:bc:ca:94:
d1:4d:8e:15:e7:fa:1e:4b:bd:2d:22:a7:a8:76:72:a2:8b:a4:
5d:b1:8d:11:ae:24:a5:51:51:3b:f3:35:63:1e:3a:c5:da:e5:
5c:10:8d:a4:c4:4b:f1:22:d1:67:4b:3e:42:39:a7:06:5e:57:
de:cd:b9:67:9e:00:6d:d9:43:1d:bd:c7:bb:0a:71:d6:59:cf:
0c:6f:e9:c2:9c:0f:35:e4:ff:aa:80:66:c6:ce:b5:bd:af:10:
c7:cf:f0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 09:16:07 2024 by rpki-client on console-ams.rpki-client.org