Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/_CsQXTY5PaQMwb_qHsWTEm4tue4.roa
File: _CsQXTY5PaQMwb_qHsWTEm4tue4.roa (raw, json)
Hash identifier: lnNVg81G/ffipnxs4F242MrdhicJBYJU+OxTwx68Fnk=
Subject key identifier: FC:2B:10:5D:36:39:3D:A4:0C:C1:BF:EA:1E:C5:93:12:6E:2D:B9:EE
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 018F54440CBA710FDC3050BD67AD343E057F
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/_CsQXTY5PaQMwb_qHsWTEm4tue4.roa
Signing time: Tue 07 May 2024 18:14:56 +0000
ROA not before: Tue 07 May 2024 18:14:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 5.144.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 17:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:54:44:0c:ba:71:0f:dc:30:50:bd:67:ad:34:3e:05:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: May 7 18:14:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc2b105d36393da40cc1bfea1ec593126e2db9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8e:19:a1:b5:7b:3a:28:6f:11:69:32:2a:7c:
20:32:73:82:dc:c0:9c:32:6e:9a:88:6b:ad:9d:74:
13:c4:37:54:36:42:d1:08:f0:10:56:5a:97:76:db:
0f:37:16:e3:d9:c8:0f:ad:d0:47:18:f2:70:f7:9b:
c7:52:3f:56:63:48:98:1e:be:86:19:fd:21:21:f5:
de:be:e4:7a:65:45:6e:82:ec:e4:1e:c7:a1:55:ad:
5f:54:77:19:1f:6c:89:98:1a:ae:6c:11:f2:99:48:
11:e6:34:5f:79:81:e2:b5:ca:d4:5f:d8:3c:5d:96:
9f:1b:25:73:ce:20:46:a6:79:ff:d8:ad:84:53:67:
52:89:a4:42:d0:20:7a:0f:dd:09:c4:92:89:6f:ba:
84:b6:9d:9e:3b:4b:6e:93:68:19:24:c0:ae:64:73:
e0:ac:2e:99:1d:b7:4b:81:9c:d2:d6:87:68:8e:cb:
17:18:e8:88:40:7b:74:f0:08:dd:77:a8:bd:5d:5a:
50:cc:29:5d:0a:a4:26:9e:db:15:28:5f:b1:e6:f7:
e2:a6:95:56:42:4d:07:5a:c3:46:7d:b8:6d:e6:0f:
9f:80:a6:24:a0:29:65:97:19:47:cf:5b:0c:9e:1c:
91:16:eb:b3:f7:b3:44:37:b5:9f:fa:99:20:1e:7c:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2B:10:5D:36:39:3D:A4:0C:C1:BF:EA:1E:C5:93:12:6E:2D:B9:EE
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/_CsQXTY5PaQMwb_qHsWTEm4tue4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.155.0/24
Signature Algorithm: sha256WithRSAEncryption
96:22:bd:6f:87:6e:27:49:36:2a:6f:02:05:83:fc:a4:5a:a0:
2c:ef:0a:15:38:fe:20:91:37:41:5e:8d:bf:a2:7b:ef:12:2a:
e8:b7:a1:ac:d8:a8:72:c9:46:79:ff:f7:38:c6:c6:eb:02:b4:
9b:f0:74:b9:33:3e:b7:52:a7:1e:2b:01:d0:69:ff:3f:20:1b:
db:4a:c8:f3:71:20:6c:d4:48:a5:49:c6:ee:8d:dc:0c:36:c1:
c5:dd:57:40:47:a3:14:aa:71:48:3a:c1:cb:87:bb:8a:e9:ba:
7b:f3:83:c8:70:e0:ff:11:39:f0:99:32:d2:ce:da:21:01:64:
62:45:e4:bc:f7:a7:e0:dc:a2:d7:61:00:a4:6f:4f:a9:ca:5f:
39:53:cc:03:8a:f2:82:d7:20:b7:0b:49:bb:27:44:7a:ce:1b:
b3:45:80:db:d7:2d:96:fa:bc:1a:9a:f4:f1:46:a0:bd:cc:06:
e2:18:e6:8b:b1:6d:48:d7:ad:aa:b0:91:45:86:26:3d:35:17:
86:e9:e6:d1:da:36:e2:9b:c5:16:f5:d7:ac:19:77:ba:2c:d9:
2d:7e:25:24:9a:3d:e4:cf:c7:42:ae:72:b8:2e:56:be:c2:1c:
99:80:c2:df:18:a2:13:ff:ee:98:33:d1:04:9b:5c:52:92:86:
f1:bd:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:41 2024 by rpki-client on console-ams.rpki-client.org