Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/5CDiN4WlzKF6iBvxHk-BaEi5YnE.roa
File: 5CDiN4WlzKF6iBvxHk-BaEi5YnE.roa (raw, json)
Hash identifier: c7pqBFvUJGhL984yvPgOKQGIJmJYlQe3eNTeNRNUHvo=
Subject key identifier: E4:20:E2:37:85:A5:CC:A1:7A:88:1B:F1:1E:4F:81:68:48:B9:62:71
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 0192D839265C636A7E2525BE41D0A2361E0D
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/5CDiN4WlzKF6iBvxHk-BaEi5YnE.roa
Signing time: Tue 29 Oct 2024 12:21:16 +0000
ROA not before: Tue 29 Oct 2024 12:21:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214865
IP address blocks: 62.169.139.0/24 maxlen: 24
2a14:5140::/32 maxlen: 32
2a14:5140::/40 maxlen: 40
2a14:5140:100::/40 maxlen: 40
2a14:5140:200::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 08 Nov 2024 14:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:39:26:5c:63:6a:7e:25:25:be:41:d0:a2:36:1e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Oct 29 12:21:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e420e23785a5cca17a881bf11e4f816848b96271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:94:3b:08:48:69:f1:a0:ab:86:91:bf:36:
cb:a4:67:27:4f:16:d9:d6:c0:99:b1:58:aa:c9:f7:
f3:0b:0d:e0:59:61:2a:a8:3b:9e:8b:0b:2e:f7:5b:
16:8c:62:e8:71:ad:ca:27:f0:21:99:0b:16:42:92:
60:39:7c:58:ff:c5:b0:8f:07:bc:73:a5:31:d6:e6:
46:fc:8c:42:60:7c:16:91:e0:d4:09:ef:b9:1b:57:
95:a1:24:16:4a:bf:e5:78:99:e7:85:c7:fb:bb:26:
2c:3b:4f:44:e9:08:eb:16:c3:10:94:d0:d7:fa:fb:
eb:c1:9f:8e:5a:9f:e1:bf:b8:78:a9:93:5b:35:5d:
61:94:3e:bc:9e:85:c0:0b:b7:69:f2:bd:0a:24:9c:
ce:7f:7c:0b:38:85:77:8d:80:79:b2:c0:5a:04:c5:
b5:82:1c:7c:bb:0e:1b:01:ad:94:11:3c:f0:b8:4c:
2b:77:c1:40:f2:30:0e:39:e1:61:6a:43:41:34:48:
27:0e:1c:7f:b9:27:14:5d:86:dd:ab:79:14:a5:fd:
86:f6:12:c3:d7:1f:d6:fb:56:1d:70:52:98:16:be:
b9:83:fc:54:c0:b9:32:69:0e:92:fa:ed:7d:8c:a9:
38:80:fe:8e:3f:42:7c:ea:45:af:3c:86:99:61:64:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:20:E2:37:85:A5:CC:A1:7A:88:1B:F1:1E:4F:81:68:48:B9:62:71
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/5CDiN4WlzKF6iBvxHk-BaEi5YnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.139.0/24
IPv6:
2a14:5140::/32
Signature Algorithm: sha256WithRSAEncryption
4c:58:51:54:45:1e:5f:90:e5:8b:04:fe:75:89:04:13:39:59:
11:d5:45:14:9c:3e:87:2e:4b:81:10:e8:e3:f1:46:a2:24:0a:
10:25:52:f0:30:6e:a9:aa:da:1b:4f:1d:b2:7e:fe:b9:ef:33:
ab:61:fb:b9:b9:1b:64:fd:71:a7:2f:cc:e3:69:45:c2:6a:d0:
df:7a:9e:dc:c1:10:85:46:88:3d:fb:87:25:89:bf:5d:78:98:
01:d8:80:3d:cb:8e:e5:93:33:76:7f:f1:49:12:cc:1e:4f:0f:
96:a7:a5:3d:9c:3f:eb:c8:0e:67:7b:e9:1b:01:95:1c:5c:7f:
de:66:c2:37:e1:78:31:45:72:da:65:f3:ae:7f:1f:5f:24:c2:
74:06:6b:a3:1b:e0:2c:54:eb:bd:b0:4c:2c:1d:21:62:60:c6:
90:3b:a4:2a:80:36:d2:a1:51:c2:22:da:0d:2b:b7:50:ab:88:
72:7c:d1:59:a8:92:f7:60:0c:b0:d1:78:70:2b:3f:0c:1d:2d:
ec:4c:a7:95:1a:9e:58:98:e5:ae:85:6d:e8:01:93:48:3d:85:
79:a3:0a:a7:58:2e:04:fb:3b:b2:0a:78:47:cc:58:b3:06:3a:
a8:8d:e3:f1:a2:1f:46:ba:4c:a7:4d:d7:4f:34:61:49:f9:a2:
0d:fd:48:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:58 2024 by rpki-client on console-ams.rpki-client.org