Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vFJi6oDOW2NLuPjIzjhcY8tri74.roa
File: vFJi6oDOW2NLuPjIzjhcY8tri74.roa (raw, json)
Hash identifier: ESvQKHlBfWeNdCN34YRJhFNNb+DpIJfw0aIAKGijOx4=
Subject key identifier: BC:52:62:EA:80:CE:5B:63:4B:B8:F8:C8:CE:38:5C:63:CB:6B:8B:BE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191813BC135EE6CF65DDA8EAC5BDF9C53AD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vFJi6oDOW2NLuPjIzjhcY8tri74.roa
Signing time: Fri 23 Aug 2024 21:54:22 +0000
ROA not before: Fri 23 Aug 2024 21:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.134.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 20:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:81:3b:c1:35:ee:6c:f6:5d:da:8e:ac:5b:df:9c:53:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 23 21:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc5262ea80ce5b634bb8f8c8ce385c63cb6b8bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:5a:af:9e:12:e7:87:eb:4a:9b:d4:5c:e1:
1d:fe:2f:4f:6b:95:51:99:36:e4:b3:b1:9b:54:b8:
5d:cc:b9:f6:f3:2c:ec:06:10:80:e4:95:11:c3:c1:
c0:db:cc:eb:89:78:2d:48:f9:e5:e9:6f:d1:15:ce:
c9:c4:3e:9a:a1:4d:7d:43:6c:94:18:9b:83:7d:23:
98:7c:ee:09:e9:b7:06:cb:39:af:a3:b1:c7:c5:a3:
22:3e:02:7a:55:b6:a2:e3:93:ea:33:a8:60:bb:75:
40:8f:c7:83:93:59:99:52:84:42:bb:57:45:08:fb:
24:08:fb:33:81:1d:0b:f8:e0:4e:5c:9d:c5:46:7e:
af:fa:45:3a:5f:91:b4:a2:fd:e9:03:ed:c9:d1:0c:
1e:99:15:f7:a2:3f:28:14:8d:f9:b2:cc:7d:b0:42:
67:4f:09:ee:02:05:83:07:73:a7:8e:6f:08:8d:a6:
1e:39:45:3e:3b:9c:ec:17:8f:d9:59:9c:15:b5:b0:
4d:ca:c8:26:fe:47:91:41:f2:48:fa:15:51:6d:99:
15:14:21:07:5b:39:c4:ef:88:86:fa:5e:f6:1f:e2:
d9:67:aa:24:64:be:e8:73:ba:77:c7:e7:3a:28:60:
08:04:bf:95:4c:ab:82:36:5f:71:25:60:d1:92:fb:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:52:62:EA:80:CE:5B:63:4B:B8:F8:C8:CE:38:5C:63:CB:6B:8B:BE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vFJi6oDOW2NLuPjIzjhcY8tri74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
77.90.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:89:27:cb:09:fc:08:34:aa:1d:4d:9f:4e:c0:7c:86:fc:08:
cf:33:d7:7b:1b:02:49:95:52:90:63:b3:33:17:40:a6:0c:40:
7c:a7:da:c3:7d:a3:6a:ed:3e:3e:87:7f:a5:b2:47:1c:87:3f:
1e:52:64:b5:df:60:6a:cd:e6:57:1c:9d:cc:88:b6:49:55:47:
9e:d3:e6:fe:04:28:74:0b:12:95:e6:70:4a:a0:61:87:53:bf:
bd:05:a3:ff:cb:9f:e5:5f:98:d4:a5:d4:8e:cc:7f:23:b9:58:
28:de:4c:b0:4d:05:c9:0f:db:f3:7b:73:71:aa:3d:89:9e:5c:
1f:b4:a2:5c:c0:db:d4:dd:1b:ec:eb:80:fe:a7:08:dc:a6:79:
56:69:6d:8a:1f:1f:62:d9:ac:ba:c9:73:c3:18:17:3b:ee:9b:
64:b2:c1:9c:09:2e:df:bd:b4:11:86:06:71:79:06:9a:a1:b8:
bd:d2:2d:91:bf:e5:e1:0f:c0:e8:2a:01:76:6d:5f:a0:dd:a5:
3a:04:0b:af:3d:f8:78:e8:ef:a6:6f:49:82:26:48:9d:3f:8c:
80:56:01:c2:99:fb:bb:0f:21:75:32:77:1e:39:57:94:92:55:
97:b6:63:11:f9:7f:f1:8b:fc:6d:57:90:10:69:54:54:11:4d:
ef:6d:64:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 22:09:50 2024 by rpki-client on console-ams.rpki-client.org