Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/1gn667nldQEo8gQGprtF_jWzcgg.roa
File: 1gn667nldQEo8gQGprtF_jWzcgg.roa (raw, json)
Hash identifier: rTy2KcA8BVfueNz7nk+QQ/bY60OaTSR/RvwqIyBsme0=
Subject key identifier: D6:09:FA:EB:B9:E5:75:01:28:F2:04:06:A6:BB:45:FE:35:B3:72:08
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 01901736F09DAD16BAD246020435A3F10BDF
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/1gn667nldQEo8gQGprtF_jWzcgg.roa
Signing time: Fri 14 Jun 2024 14:46:34 +0000
ROA not before: Fri 14 Jun 2024 14:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209095
IP address blocks: 5.182.136.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 09:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:17:36:f0:9d:ad:16:ba:d2:46:02:04:35:a3:f1:0b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Jun 14 14:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d609faebb9e5750128f20406a6bb45fe35b37208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:2a:2b:61:09:33:57:c6:52:52:71:6e:a4:
6e:1e:44:ac:12:b6:e4:fd:d8:c9:c4:26:7b:7a:a5:
30:d1:d6:f7:a4:76:ab:4c:46:b2:fa:dc:a5:1c:d0:
47:d2:17:23:c2:cb:63:bf:6c:c7:1e:8f:ca:d5:ac:
23:a2:63:35:60:a4:6f:ee:a6:1a:a3:1c:3b:09:07:
2a:c5:a4:28:0a:64:09:75:a3:c7:fb:96:90:69:92:
10:83:1e:bc:f7:45:43:0e:7a:05:29:b2:18:ff:75:
f9:89:cc:cf:2a:ea:a6:d5:40:d8:19:bf:02:01:52:
5a:b0:3c:d5:6b:85:c0:1e:62:a9:cc:e0:d2:35:6f:
46:b7:67:fd:1d:f7:c5:e9:9e:c0:7a:49:da:86:1f:
0f:eb:b6:7c:2e:99:58:ba:78:d1:89:a9:c1:9f:8b:
17:28:04:9c:5b:f2:f3:b1:b5:34:3d:95:00:71:c1:
03:a1:14:5b:73:e9:3d:6d:ac:7f:d4:60:6f:cc:60:
70:1a:ad:56:f5:d7:9a:44:03:a9:63:98:03:cc:59:
e0:55:17:27:df:b4:43:20:94:f1:df:13:c7:2b:dd:
f5:da:c8:c6:56:30:6b:55:3f:b5:ca:89:d9:ed:f9:
6f:12:d0:e9:8d:4d:8c:5b:87:e1:b3:d6:48:b5:1d:
8f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:09:FA:EB:B9:E5:75:01:28:F2:04:06:A6:BB:45:FE:35:B3:72:08
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/1gn667nldQEo8gQGprtF_jWzcgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.136.0/22
Signature Algorithm: sha256WithRSAEncryption
21:7e:80:32:bc:84:e2:b2:e8:2a:21:09:23:b5:3c:9f:02:1a:
ad:7d:4f:f2:36:7d:ad:9c:e4:ad:5a:66:17:7e:3e:f8:07:59:
91:8d:99:f3:9e:bc:6c:3f:42:29:02:42:a2:19:4b:d0:58:ac:
aa:6c:35:42:16:d0:9b:5e:22:a6:38:dc:b2:2c:f1:36:08:84:
b5:02:00:b1:21:ba:b1:13:c8:86:67:43:3b:98:31:a5:af:af:
81:be:cf:df:e3:09:7b:66:d2:17:ac:c5:19:33:8f:84:2a:3e:
c0:87:2c:c4:70:0b:ee:b6:aa:f6:37:5c:31:d0:b3:8c:4b:2f:
3c:1e:36:80:37:b4:c6:57:3a:64:17:a6:96:de:04:91:0f:b3:
6f:1b:af:38:9a:ba:9d:64:82:4b:85:3c:b1:ab:c7:c9:ca:f7:
3b:5a:9e:ef:33:52:dd:94:c9:98:d8:68:73:8b:e0:a1:ea:84:
64:8d:14:2e:5b:2a:cf:ed:52:a1:7a:db:4e:01:d4:82:1a:58:
18:eb:34:8c:71:88:e5:ed:5e:00:2f:7a:ec:00:42:31:0d:20:
f7:51:1a:c8:ee:39:bd:5e:27:f4:f2:ea:4b:55:a5:1b:12:c3:
dd:3a:bf:80:a1:87:84:13:6a:a3:4e:25:24:7b:18:63:b8:1e:
5b:41:8d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:17 2025 by rpki-client