Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/lhujeSg78BZUwob0bx5KTeIe_A8.roa
File: lhujeSg78BZUwob0bx5KTeIe_A8.roa (raw, json)
Hash identifier: rISnpcTRTYsZ0PgLJKJBA3MQWn7Zjq/8+vSVZZ1VJzc=
Subject key identifier: 96:1B:A3:79:28:3B:F0:16:54:C2:86:F4:6F:1E:4A:4D:E2:1E:FC:0F
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018D56A34F056C7CB947CD29F044663D9F7C
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/lhujeSg78BZUwob0bx5KTeIe_A8.roa
Signing time: Mon 29 Jan 2024 19:12:39 +0000
ROA not before: Mon 29 Jan 2024 19:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200229
IP address blocks: 5.39.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 18:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:56:a3:4f:05:6c:7c:b9:47:cd:29:f0:44:66:3d:9f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 29 19:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=961ba379283bf01654c286f46f1e4a4de21efc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:4f:42:aa:ed:a2:ea:02:32:77:4a:46:f7:
bb:6d:3e:a7:aa:4b:ce:2d:ef:82:58:ba:06:d9:06:
13:7b:5e:63:3a:4d:1e:70:93:e0:58:19:a6:66:04:
a6:64:96:b7:6b:c5:d4:e3:14:cf:19:ba:e2:ea:17:
1f:23:eb:9b:c3:23:6d:3e:b5:ad:6c:c7:f3:e0:77:
dc:37:a1:4e:db:64:31:fc:18:55:0b:27:f1:27:91:
7e:45:6b:e3:81:71:90:51:f0:7d:90:b9:b4:13:49:
5c:b0:7f:c3:ac:08:c1:ed:72:ec:96:58:ae:0c:5c:
e3:3d:c9:1f:05:d5:c5:b3:84:cd:29:47:2d:54:72:
20:15:b9:69:1e:85:35:a0:ba:f0:40:c8:50:7e:e4:
dd:30:45:aa:33:97:0f:bb:81:3f:90:68:e9:47:1f:
82:2e:5e:0c:ec:7f:b3:5a:d2:94:5b:cd:ef:5c:f2:
3e:04:ad:bb:3b:0a:23:41:0b:83:e4:b3:42:94:59:
8e:83:e4:d4:99:18:6e:34:c7:6a:d2:a0:78:9a:67:
78:de:29:65:2f:1d:e3:51:41:63:b3:e5:08:ea:07:
20:74:d6:09:f2:f0:5a:21:b7:8e:f7:c8:94:0e:0b:
a1:8d:e6:de:06:34:1e:04:84:3c:39:be:68:94:2c:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1B:A3:79:28:3B:F0:16:54:C2:86:F4:6F:1E:4A:4D:E2:1E:FC:0F
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/lhujeSg78BZUwob0bx5KTeIe_A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.255.0/24
Signature Algorithm: sha256WithRSAEncryption
78:29:f5:29:21:31:93:79:8f:71:6d:d3:5d:f3:dd:98:00:19:
1b:b5:0e:65:77:f4:40:44:18:9f:86:17:7a:e5:76:d9:2b:0c:
a1:32:e2:d5:e1:b5:3f:2d:38:16:b5:b6:fe:a2:04:ba:d1:e8:
48:df:61:42:88:36:77:a4:49:d1:f3:12:66:4c:bd:dd:0a:4b:
7b:b7:0a:e1:b0:90:28:fc:f0:a8:b4:95:0e:ce:d5:4f:66:da:
62:92:aa:15:2f:3e:da:5d:a5:62:d5:1a:09:5d:3b:01:62:a5:
2a:6a:66:9b:3f:54:e9:3b:2c:62:84:e4:c3:f2:dd:34:da:d2:
a5:fb:c3:ec:5d:f7:65:e7:dc:18:2c:7c:1f:2f:46:73:cb:c1:
b2:d9:28:4f:fb:1c:d6:9e:62:1e:ae:a9:9f:ca:4e:16:a5:e9:
cd:b2:a1:0c:12:26:6b:59:92:8e:10:da:69:ab:9e:1d:4d:86:
5f:f5:46:1c:5e:a2:0a:94:a3:a7:28:32:62:ba:8c:da:d4:5a:
de:64:65:e6:ba:71:ec:72:32:48:c4:5c:51:c6:6c:b9:1a:25:
89:48:bc:ca:d3:60:9d:99:11:c8:21:60:fa:0e:50:d5:f1:28:
09:5b:f6:d8:e7:a1:b0:e7:7b:94:bb:71:78:7a:d3:e4:e7:bc:
31:36:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 21:15:54 2024 by rpki-client on console-ams.rpki-client.org