Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/9S_BhWNe8HAuU-KrStsvBINoli4.roa
File: 9S_BhWNe8HAuU-KrStsvBINoli4.roa (raw, json)
Hash identifier: f3JzCroeCsS+r6dlq0JDvjnMAS2w9278L0DZnaPqWcY=
Subject key identifier: F5:2F:C1:85:63:5E:F0:70:2E:53:E2:AB:4A:DB:2F:04:83:68:96:2E
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 01906D4A848F5E87B8F28E28F72C33C38AF9
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/9S_BhWNe8HAuU-KrStsvBINoli4.roa
Signing time: Mon 01 Jul 2024 07:55:18 +0000
ROA not before: Mon 01 Jul 2024 07:55:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215859
IP address blocks: 5.223.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 12:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:4a:84:8f:5e:87:b8:f2:8e:28:f7:2c:33:c3:8a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Jul 1 07:55:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f52fc185635ef0702e53e2ab4adb2f048368962e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:fe:4d:ff:56:8d:7b:e9:8f:71:85:39:5d:
62:4b:2a:49:09:31:6c:a0:2d:e3:67:c4:13:d8:c4:
3e:b5:4a:ee:1e:23:67:4b:a2:a7:3a:06:c4:0d:57:
e5:c6:35:03:eb:c5:91:af:40:5a:5d:6d:84:53:8b:
9a:bf:f9:18:64:70:b9:ae:e7:56:13:db:07:0c:af:
12:71:b8:9b:06:12:e1:b1:48:07:db:e6:71:ff:1f:
16:cb:ce:fe:56:8b:8c:aa:7f:f4:76:a5:b5:d5:0b:
9d:1a:1f:2d:87:41:e0:34:57:13:6e:8c:e1:9f:8c:
c2:54:4b:1d:eb:dc:59:4a:9f:9e:95:fe:58:2a:b5:
1f:dd:cc:1c:db:ea:6b:1a:2b:8a:53:96:48:96:78:
d9:a4:43:b7:4d:a0:7b:21:6a:4c:36:3c:79:72:09:
05:b4:26:2a:7b:4c:6b:11:ef:c1:c3:c1:df:11:cc:
4b:a3:77:1f:96:4b:ca:8d:29:2f:92:cc:ad:ca:72:
d5:8b:ea:8b:34:c1:af:72:19:eb:70:7d:05:76:69:
7e:f6:37:58:da:d8:3a:88:e1:d9:4e:90:fe:d7:8b:
71:5d:3f:12:fe:ee:59:61:ab:91:0f:9e:b8:9c:81:
5e:6e:6a:0e:52:76:1e:09:a9:88:6d:f9:fc:33:0c:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2F:C1:85:63:5E:F0:70:2E:53:E2:AB:4A:DB:2F:04:83:68:96:2E
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/9S_BhWNe8HAuU-KrStsvBINoli4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:97:5f:3c:12:c1:44:b5:bf:6d:ed:b1:42:3a:4e:45:0c:5a:
e9:27:41:bf:2e:9d:1e:89:86:01:5b:21:fa:bd:fa:c0:86:a1:
2c:8b:1f:44:6b:17:ea:23:85:1e:3d:f3:12:27:c6:32:10:82:
b0:42:bc:c5:09:d3:ac:9a:19:19:10:89:cc:48:43:23:69:d2:
eb:d5:a4:8f:e6:36:49:0e:03:07:e2:a0:95:b5:fe:f1:b8:97:
e1:f6:45:71:16:1a:f4:df:0a:76:bf:4d:91:a7:46:18:44:f9:
32:13:ea:22:34:d0:23:b0:b1:52:0d:1e:0e:e7:57:8a:15:9a:
b8:73:25:b5:d9:f3:d9:f6:f1:1b:1f:a5:2b:8a:59:46:89:1c:
b2:bf:a9:c4:9b:00:ac:15:83:34:a2:65:9d:12:78:ca:5d:f6:
10:5e:3a:17:5d:36:7a:f0:99:dd:d4:51:93:ce:08:85:c0:cd:
18:52:e3:a3:c3:42:c2:c0:05:a4:5f:c9:a5:54:c3:f2:45:8d:
43:63:c4:ff:1f:8a:32:2f:93:e4:8f:11:56:64:51:dc:fd:9e:
f8:d7:27:73:5b:5a:0c:22:4d:47:53:49:c3:cb:23:f4:e9:ff:
7e:1b:89:66:4a:31:30:b7:ac:50:69:c4:41:9b:11:af:ae:a3:
19:51:28:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 13:42:03 2024 by rpki-client on console-fra.rpki-client.org