Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/9rb0YMel5takBsmF3lzK6nKRUHw.roa
File: 9rb0YMel5takBsmF3lzK6nKRUHw.roa (raw, json)
Hash identifier: 20xcRKMWo6degYCCgARDpTXv+1/DLHpNGqZoTwMMWKQ=
Subject key identifier: F6:B6:F4:60:C7:A5:E6:D6:A4:06:C9:85:DE:5C:CA:EA:72:91:50:7C
Certificate issuer: /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial: 0185A0438A1954CA18BF2414CA3272FBD11D
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/9rb0YMel5takBsmF3lzK6nKRUHw.roa
Signing time: Wed 11 Jan 2023 09:57:38 +0000
ROA not before: Wed 11 Jan 2023 09:57:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59445
IP address blocks: 5.144.84.0/22 maxlen: 22
5.144.80.0/24 maxlen: 24
5.144.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:43:8a:19:54:ca:18:bf:24:14:ca:32:72:fb:d1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
Validity
Not Before: Jan 11 09:57:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6b6f460c7a5e6d6a406c985de5ccaea7291507c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:54:0b:67:16:cb:dc:66:7e:23:75:e7:61:06:
47:73:52:13:36:70:8d:ec:84:67:4e:82:c9:cd:e9:
ef:06:bf:a9:4d:84:4a:cb:45:ab:43:ff:74:87:eb:
02:69:77:84:0d:14:fa:68:86:61:8f:b1:e4:85:5b:
ce:46:a6:47:f1:0e:31:f8:10:e4:a7:5d:c6:89:a3:
9a:9a:be:33:2f:4f:27:4c:cf:24:87:26:21:ff:6f:
0b:7e:a2:b8:f3:0b:a7:4c:d5:21:1d:1c:1c:62:82:
74:ad:91:3e:d0:a6:c9:79:92:0c:00:17:cd:95:98:
c1:2f:18:48:37:f9:56:c8:3d:72:d7:22:64:22:72:
bc:7f:d2:97:f6:6c:b1:75:90:49:59:c9:6e:da:d8:
b6:34:bf:ec:aa:13:38:42:3f:a2:b3:73:e7:c4:76:
9a:8d:b2:0d:11:d6:dd:9f:25:01:3e:82:e3:ad:5b:
d1:21:5c:0f:ce:0b:f5:3d:ec:33:77:03:d8:9c:c3:
b7:55:e5:c7:d9:72:89:68:11:7b:5d:d4:5e:67:6c:
ec:c2:33:3f:b3:3f:77:d9:22:2b:57:b9:0d:79:ab:
fb:fb:d5:33:7d:2a:cc:e6:dc:c9:9d:45:44:4a:15:
27:0d:87:84:86:87:3d:86:53:d6:ec:ba:b4:5a:19:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B6:F4:60:C7:A5:E6:D6:A4:06:C9:85:DE:5C:CA:EA:72:91:50:7C
X509v3 Authority Key Identifier:
keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/9rb0YMel5takBsmF3lzK6nKRUHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.80.0/24
5.144.84.0/22
5.144.90.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e4:2a:96:b4:1a:27:31:5d:1e:40:5d:4b:ad:4d:43:8d:f7:
79:1f:4c:02:b8:89:58:2d:41:27:66:b0:74:65:2f:b3:c5:6a:
b0:a7:8d:2b:5d:ee:bc:e5:eb:21:9e:7a:bb:cf:c9:5f:36:d7:
b2:7c:70:b5:ec:97:2b:c8:c5:55:a2:81:b1:b6:b6:bb:a1:04:
7d:c2:b3:7f:cf:9c:0e:7a:9f:a8:94:62:cb:10:5d:9f:d6:91:
9b:ab:9f:b7:d3:96:51:c6:40:84:01:b7:de:d7:de:59:c1:77:
5b:79:ae:0f:87:ce:99:10:95:da:b0:8d:38:bc:7b:58:94:8e:
6d:86:1d:c8:74:5d:f8:bf:29:cb:97:b4:e4:08:1e:81:06:8b:
a8:c4:12:9c:4e:ab:48:1f:e1:a6:cb:7f:51:19:b2:a2:ca:c0:
11:97:7c:ab:d7:87:3b:8a:1d:b5:2e:8a:3b:c5:ae:22:10:d7:
46:85:0f:55:e4:14:df:08:0e:8f:16:21:c9:ab:02:19:bc:5b:
82:a6:96:8a:59:06:fa:85:9f:5c:2d:7c:a3:7a:a3:cc:59:56:
70:8a:fd:e2:a0:97:55:63:b8:0c:67:fb:e8:6c:d4:86:d5:93:
fe:00:62:75:cd:ae:6d:34:d5:1d:81:9d:d6:c7:1e:5c:a8:2e:
aa:a8:ad:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:23 2024 by rpki-client on console-ams.rpki-client.org