Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/tNmYGJ9k0aSHB2prihmSgYtrTnI.roa
File: tNmYGJ9k0aSHB2prihmSgYtrTnI.roa (raw, json)
Hash identifier: enEFFuLsfOPb/L6e30fe0j19skJZUO+3r7O2S1agKl0=
Subject key identifier: B4:D9:98:18:9F:64:D1:A4:87:07:6A:6B:8A:19:92:81:8B:6B:4E:72
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018786EC8BCF032CB400EE2E0F8255F8DC16
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/tNmYGJ9k0aSHB2prihmSgYtrTnI.roa
Signing time: Sat 15 Apr 2023 21:57:41 +0000
ROA not before: Sat 15 Apr 2023 21:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 5.133.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 17 Apr 2023 22:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:86:ec:8b:cf:03:2c:b4:00:ee:2e:0f:82:55:f8:dc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Apr 15 21:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4d998189f64d1a487076a6b8a1992818b6b4e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:9e:32:48:90:c6:d5:db:51:a8:c6:a2:5a:
d3:0e:49:bd:70:5d:eb:02:a8:4d:46:4e:63:97:6d:
a6:6d:ce:8b:33:3c:54:e5:c5:ac:b0:a1:2a:16:ed:
e5:5e:3b:91:b0:75:73:0a:b5:fe:15:fc:b8:2e:67:
7f:cd:6f:b8:b2:e6:a8:c1:5b:57:91:da:48:8d:f3:
e0:22:07:34:46:43:bd:c9:b2:fd:b7:f4:5e:03:6b:
b8:5c:87:6e:da:c8:38:b5:25:4f:1a:fb:64:2b:73:
6f:51:57:85:1a:13:f4:82:2a:70:e6:ae:4d:59:2f:
87:28:bf:e5:a4:39:06:7b:35:9b:4d:01:84:86:2a:
fc:7a:8a:88:5d:fc:24:27:ed:83:35:b7:1b:9f:e0:
1f:b4:ab:12:ba:52:dc:08:77:37:dd:24:af:19:6a:
25:10:4a:b0:04:b7:06:36:3d:33:0a:e1:00:62:a5:
45:63:39:49:40:aa:7d:56:04:79:91:61:8a:21:b9:
f9:94:54:ed:6e:43:b1:a2:55:be:d4:86:93:30:da:
17:3c:24:63:d4:4b:41:26:59:fd:eb:b6:2d:27:83:
ed:41:4d:8a:42:85:f8:54:60:c7:53:2e:20:42:45:
bf:5e:3d:5e:46:f5:07:16:f6:a1:68:9c:c4:a7:f0:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D9:98:18:9F:64:D1:A4:87:07:6A:6B:8A:19:92:81:8B:6B:4E:72
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/tNmYGJ9k0aSHB2prihmSgYtrTnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.124.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:0f:2a:a2:ff:ec:bc:67:23:76:61:5c:61:83:70:c2:54:0f:
18:6e:fb:ac:ef:ce:51:45:0e:8b:ea:10:fb:a2:87:fe:11:3d:
63:68:d8:11:da:5b:a8:af:ce:5c:26:1c:e8:be:27:14:87:f1:
4a:95:c0:3a:b6:8d:db:19:dc:da:e2:8c:25:1f:4b:cc:88:ce:
ad:06:20:a6:53:65:4c:2a:96:69:ba:07:61:72:a3:cd:7d:97:
8c:12:a7:84:87:e7:d2:e9:e8:75:50:22:d4:80:ae:ef:9b:c0:
f9:0d:1f:97:88:ae:75:da:c4:4c:ce:e4:f4:94:d2:2b:a5:f9:
33:85:3c:08:ba:ae:bd:ee:8f:8a:62:dd:35:e5:51:79:a3:ff:
d6:58:a8:bb:16:42:ab:db:a2:15:61:37:45:ba:1a:43:cb:34:
94:b6:f5:67:50:85:b6:a1:18:48:78:f5:b8:f5:22:e3:ff:4d:
39:4d:32:be:f6:08:1f:20:31:09:d7:e2:95:a0:8a:00:f3:7c:
35:b9:47:67:1b:88:4e:a3:5c:9d:04:d3:6f:59:a3:ee:0b:7f:
d2:60:7a:4e:53:a4:af:a3:8c:8b:09:08:f3:43:3c:84:a8:66:
b5:93:63:aa:e5:ee:37:91:4e:61:4d:db:92:4b:a7:ae:ee:da:
fb:b0:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org