Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1uhJFYvIzuopiVbW9JlUTkQKj5s.roa
File: 1uhJFYvIzuopiVbW9JlUTkQKj5s.roa (raw, json)
Hash identifier: rgCGLmAwPQ3HwjBA32jBn6f5GdDqKA8rQQI018Ym13g=
Subject key identifier: D6:E8:49:15:8B:C8:CE:EA:29:89:56:D6:F4:99:54:4E:44:0A:8F:9B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 018A21935A7F2988FB4CC7D2A4E4535D80F6
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1uhJFYvIzuopiVbW9JlUTkQKj5s.roa
Signing time: Wed 23 Aug 2023 08:46:59 +0000
ROA not before: Wed 23 Aug 2023 08:46:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57922
IP address blocks: 5.250.253.0/24 maxlen: 24
2a0f:4d00:1::/48 maxlen: 48
2a0f:4d00::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:93:5a:7f:29:88:fb:4c:c7:d2:a4:e4:53:5d:80:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Aug 23 08:46:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6e849158bc8ceea298956d6f499544e440a8f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:c0:07:62:a2:8d:82:88:e0:4e:a9:35:66:
02:f6:59:a0:35:a5:a5:42:9c:c3:4a:bd:23:26:9f:
53:c8:2d:91:05:01:cb:ac:df:f4:45:bf:c4:92:b8:
94:84:84:d4:24:be:b3:34:5f:2e:2c:a6:b3:63:5f:
87:f9:92:a2:93:cc:7f:86:05:c8:26:d8:f2:05:ea:
94:a2:6e:8f:5a:47:8a:7d:87:11:78:c7:be:95:30:
92:34:3f:0b:80:b1:d2:9f:d9:06:f0:c7:55:01:a9:
7b:af:f8:04:fd:5e:82:6d:a8:58:20:0b:16:e8:86:
a2:af:81:10:c2:03:4b:55:03:08:01:a4:ef:68:50:
49:cc:62:3d:34:e4:e6:56:aa:de:4b:51:4d:a8:6c:
ab:8e:76:b7:de:ef:f3:dd:52:e1:38:b5:dc:f6:84:
ec:df:09:1e:ad:d5:6c:23:68:90:df:b6:cb:0d:4a:
34:f4:72:3c:a3:cc:e7:42:60:95:a9:82:f2:19:c7:
08:67:25:b8:ae:2a:51:74:83:00:ce:91:6c:a0:b4:
09:e5:0c:96:fd:5f:49:1d:9c:13:7f:ef:63:51:d0:
d1:13:c2:bd:84:df:19:46:50:8e:37:51:8f:52:bb:
57:00:40:12:21:0a:a6:32:09:83:33:51:f8:fa:d2:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E8:49:15:8B:C8:CE:EA:29:89:56:D6:F4:99:54:4E:44:0A:8F:9B
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1uhJFYvIzuopiVbW9JlUTkQKj5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.253.0/24
IPv6:
2a0f:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
48:d3:b5:8f:42:00:cc:6c:90:3d:04:0c:03:c3:00:88:92:73:
0d:e6:74:31:df:95:dd:9d:06:67:66:53:ea:da:ec:0e:85:03:
18:25:40:0d:67:64:7d:be:26:3c:5d:93:4e:01:1d:7b:73:37:
d9:1a:aa:ab:4f:e0:54:3d:af:df:47:83:a4:fd:33:ec:7c:be:
fc:50:41:bf:8b:fe:17:51:64:d7:60:35:b5:81:26:a7:5d:84:
4b:26:07:fb:ea:84:99:c2:45:25:60:ac:cc:22:76:c1:f1:84:
9d:2f:5c:4a:a6:69:28:49:4f:ab:d8:14:bb:2f:e2:f8:51:9f:
30:4e:c5:83:05:e3:65:5b:92:35:66:e0:df:1d:ef:29:03:be:
94:a1:bc:4c:f4:82:e3:6b:61:10:77:4d:9a:10:88:64:0d:06:
66:71:cb:02:e6:a0:b0:e0:b8:a8:41:4d:4c:53:5a:86:bf:9f:
16:74:1d:d5:07:06:68:c4:16:1f:91:72:53:ad:7d:6b:12:6a:
92:d9:fc:e3:c5:ea:50:39:59:32:48:82:0e:93:f8:1c:46:12:
cf:da:5e:a1:3e:f1:e3:28:62:6b:44:fd:3f:0a:c4:9b:b4:5b:
95:8e:7b:ee:b7:f1:56:d8:36:47:5c:81:60:4f:9c:92:f7:32:
c5:80:88:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:47 2024 by rpki-client on console-fra.rpki-client.org