Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ZMb2aXUwM0mgu6ZejpipfuEfZZI.roa
File: ZMb2aXUwM0mgu6ZejpipfuEfZZI.roa (raw, json)
Hash identifier: GfZRHxJdeSQkTyxAcwn6njb3UL5KKhFyGK1dBfbNKqY=
Subject key identifier: 64:C6:F6:69:75:30:33:49:A0:BB:A6:5E:8E:98:A9:7E:E1:1F:65:92
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01871E81F9106879EEE54AC88C72B148FA18
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ZMb2aXUwM0mgu6ZejpipfuEfZZI.roa
Signing time: Sun 26 Mar 2023 15:20:47 +0000
ROA not before: Sun 26 Mar 2023 15:20:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398083
IP address blocks: 5.133.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 13:41:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1e:81:f9:10:68:79:ee:e5:4a:c8:8c:72:b1:48:fa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Mar 26 15:20:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64c6f66975303349a0bba65e8e98a97ee11f6592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ff:f3:79:0a:4c:7a:44:4c:a4:33:4a:86:e5:
ce:f9:d5:fb:26:bf:4b:e2:38:5a:e7:14:18:5c:64:
a6:75:b5:c5:ed:99:5b:9d:f1:e2:b5:a4:1e:a5:8f:
54:69:99:6d:18:aa:a3:43:eb:03:0c:d9:ee:4a:8c:
1e:21:71:4e:d5:f6:78:c9:2f:9a:36:72:4c:03:e5:
91:2e:1c:33:7d:1d:eb:a5:1b:7a:89:8e:dd:c1:f7:
c6:62:e9:28:9f:8a:aa:12:7c:28:2f:1c:b2:c4:cd:
0a:ec:41:ca:bd:7f:4b:35:0c:9c:b7:96:1b:36:8d:
f1:9c:83:4d:9c:c2:bd:b2:d2:63:fe:dc:13:4b:fb:
41:eb:73:f3:f8:21:78:8a:99:06:77:8a:36:6f:e7:
56:89:36:53:f7:ec:27:5c:c3:bb:5f:87:bb:1e:da:
6e:40:76:81:73:a3:64:ef:64:87:72:d9:9b:3c:7e:
4d:79:8a:9a:32:31:2a:10:01:20:8c:d9:c3:31:40:
ff:09:21:d2:12:df:1a:e2:07:d5:dc:f8:cc:d1:b5:
d9:d8:ad:73:5d:91:df:3f:3c:00:66:27:2b:55:8b:
ff:5f:ae:09:85:ff:61:69:14:3f:ad:12:33:37:13:
5e:ac:f4:70:80:3f:af:8e:3d:2e:dd:06:ba:e9:32:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C6:F6:69:75:30:33:49:A0:BB:A6:5E:8E:98:A9:7E:E1:1F:65:92
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ZMb2aXUwM0mgu6ZejpipfuEfZZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.124.0/24
Signature Algorithm: sha256WithRSAEncryption
24:66:66:0d:9a:44:28:97:e2:0f:3d:c2:50:f1:db:1a:30:c7:
70:85:07:50:80:74:a8:9c:73:5f:69:b7:cb:fa:7e:3d:d2:bc:
55:54:10:f6:c9:50:8b:9f:59:6a:29:f0:16:6b:54:b6:d4:b7:
7c:37:dd:b8:90:eb:a1:7c:c8:28:91:15:99:4e:2b:85:84:4e:
d3:65:2a:14:49:a1:06:46:ef:c3:95:33:c0:77:49:7f:9b:61:
e5:8b:d1:0d:ca:4a:80:20:8a:25:c9:e7:ec:12:ac:ca:20:84:
4b:9d:e7:4c:37:0e:10:23:8f:63:c3:a9:cd:f1:4d:e7:de:cb:
6f:f3:b7:56:c0:27:d2:27:1d:c4:a5:aa:13:ec:b3:6f:08:21:
03:37:2a:71:58:69:d6:6f:fa:97:79:1d:e9:63:6a:2a:75:1b:
c9:f5:40:3f:81:92:c5:19:0b:2e:2b:58:54:13:25:83:3d:31:
d0:09:61:5b:43:41:22:66:e6:36:05:94:3a:7b:00:3b:bc:80:
ba:26:3f:a2:70:a3:13:eb:d6:aa:e3:9e:ff:9c:fc:95:68:74:
7e:e2:3b:f2:25:71:8b:8d:89:63:25:58:ed:60:ee:6f:07:f9:
25:16:7a:0a:40:d3:a5:16:42:a7:44:ca:ac:aa:63:6a:4c:74:
30:a9:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org