Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/Fot-95cwu24jfF8orr_NP9sabNs.roa
File: Fot-95cwu24jfF8orr_NP9sabNs.roa (raw, json)
Hash identifier: DWO6O+UqVurpii59BulcrANHLFVJjBrt+ZPC6iEv2Tk=
Subject key identifier: 16:8B:7E:F7:97:30:BB:6E:23:7C:5F:28:AE:BF:CD:3F:DB:1A:6C:DB
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 018DDF7D02C9CC61611E131238E4FFBDFEB3
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/Fot-95cwu24jfF8orr_NP9sabNs.roa
Signing time: Sun 25 Feb 2024 08:58:48 +0000
ROA not before: Sun 25 Feb 2024 08:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.144.154.0/24 maxlen: 24
5.144.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 09:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:df:7d:02:c9:cc:61:61:1e:13:12:38:e4:ff:bd:fe:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Feb 25 08:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=168b7ef79730bb6e237c5f28aebfcd3fdb1a6cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ce:62:5a:6d:7e:64:98:98:1f:46:bf:88:b9:
ab:ba:be:ac:29:ce:6e:86:86:5c:22:51:e4:a2:0c:
a6:77:58:bc:45:22:cb:f4:a8:54:85:6b:06:d2:f3:
9c:90:0e:e2:4c:ae:07:59:dd:48:ee:5f:ad:86:c3:
e2:5b:68:32:34:de:77:58:0c:61:30:07:85:0c:1a:
1e:00:7b:e5:99:62:72:28:6e:9a:0e:44:2f:7b:bc:
cc:bd:33:80:ac:1c:6d:b3:b1:f5:10:ac:6d:03:b0:
3e:b3:f0:b5:ef:f5:4e:58:95:2f:30:4b:cc:7a:4f:
3a:59:20:8e:be:24:0d:b4:95:ef:a4:57:12:e0:ac:
c9:f0:d1:df:4f:a1:2f:fe:96:b1:0a:4c:f7:25:ec:
34:f5:01:88:c3:df:57:f8:6f:d9:a5:6b:1a:47:1d:
83:1b:1f:fc:fe:b8:e5:6a:5d:ff:ad:99:b7:dc:9e:
89:83:1c:19:07:bc:8c:f2:66:20:3a:a1:a1:c7:3b:
f0:5a:1c:93:a7:72:8a:ba:c0:37:04:92:31:b4:f8:
d0:38:68:51:c4:39:47:16:88:6e:07:5e:cd:85:54:
6b:f1:2a:70:2c:f4:b2:a1:9b:90:2a:b6:1b:b1:b3:
2c:db:7d:e8:6d:fd:68:4b:72:bf:56:03:9a:a4:9f:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8B:7E:F7:97:30:BB:6E:23:7C:5F:28:AE:BF:CD:3F:DB:1A:6C:DB
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/Fot-95cwu24jfF8orr_NP9sabNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.154.0/23
Signature Algorithm: sha256WithRSAEncryption
70:8c:d6:b0:4c:35:bf:5e:1d:ce:2c:3f:ab:63:dd:17:01:bc:
96:7f:11:7f:9f:e7:f2:1f:88:18:6b:12:f2:e4:a7:d1:5e:43:
e8:58:e7:5c:c8:e4:8c:69:4d:47:1e:6c:da:a5:bd:81:bd:ed:
a1:05:7b:55:68:e8:1b:c1:bd:ec:6c:57:a0:04:e6:58:97:b4:
fc:a5:7c:9f:3b:9c:02:ed:99:b0:b6:cb:55:8d:72:f7:5a:2d:
f9:a8:de:ea:eb:72:ff:52:07:42:63:eb:66:d8:b8:7b:67:95:
9c:ee:4c:f8:c6:eb:97:a6:f5:dc:87:3b:84:4c:61:7a:01:80:
1d:85:1d:85:02:58:1e:1e:52:63:f8:1f:71:a6:26:79:8e:56:
e3:87:93:22:82:9c:26:05:15:ba:0e:12:e3:59:1c:ca:46:1e:
0b:48:3e:72:18:99:b2:9f:0c:ec:ee:1e:90:e7:f3:bc:f2:4b:
91:19:ca:61:c4:ff:4b:45:d5:a6:18:2e:fd:a7:83:1d:54:60:
aa:57:55:f4:d1:b2:2c:43:d9:28:c9:55:77:7b:8a:77:e1:59:
03:b8:50:24:2f:c8:3e:90:ff:eb:92:cb:80:09:c5:e7:84:16:
bc:b5:c3:c1:1e:b7:92:67:b8:03:a1:db:62:b8:16:39:86:bd:
a0:41:c8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:41 2024 by rpki-client on console-ams.rpki-client.org