Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/zXHVkS84cCArMIJt-2tikK59EVM.roa
File: zXHVkS84cCArMIJt-2tikK59EVM.roa (raw, json)
Hash identifier: RXTLACv6OYvfk12weijkxPjYO+FGbTQLjInbC+TJOEA=
Subject key identifier: CD:71:D5:91:2F:38:70:20:2B:30:82:6D:FB:6B:62:90:AE:7D:11:53
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 018E5832C1E9624B8E8D1734FF3EB94E904C
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/zXHVkS84cCArMIJt-2tikK59EVM.roa
Signing time: Tue 19 Mar 2024 19:31:45 +0000
ROA not before: Tue 19 Mar 2024 19:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 5.42.72.0/21 maxlen: 21
5.42.80.0/21 maxlen: 21
5.42.94.0/23 maxlen: 23
5.42.100.0/23 maxlen: 23
5.42.102.0/23 maxlen: 23
5.42.104.0/23 maxlen: 23
5.42.106.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 19 Mar 2024 21:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:58:32:c1:e9:62:4b:8e:8d:17:34:ff:3e:b9:4e:90:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Mar 19 19:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd71d5912f3870202b30826dfb6b6290ae7d1153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:63:85:ef:96:05:ef:a6:1a:9c:14:cd:29:
63:c2:af:4a:d0:de:77:9c:cc:00:fe:08:d2:ab:66:
31:b6:41:eb:b4:96:0b:90:fd:5f:1a:d2:8f:fc:6a:
67:0b:ed:58:12:7b:d7:2b:4f:1f:8b:bd:f0:78:77:
1d:b0:3f:d0:5a:b4:bc:fa:78:04:c4:e6:c3:fe:18:
e6:b8:09:ec:df:c2:6c:52:62:0c:c6:15:86:e8:35:
ce:6d:cb:1d:5d:02:4e:d3:4a:dc:6d:7c:ff:09:2f:
cf:19:dd:35:d6:c2:51:bd:f8:01:01:df:85:0e:f1:
30:bc:9d:0b:db:bc:8b:99:a9:06:6a:bf:74:26:b7:
ac:ad:08:bd:b0:5b:6e:22:5b:b4:09:e1:dd:8a:3a:
02:52:ac:c7:2d:41:5c:0f:8b:fe:b9:36:d6:37:a1:
64:14:55:61:23:a8:25:d0:d3:bd:78:2d:bd:e7:fe:
76:4f:51:ab:1e:36:00:fd:b7:b4:d7:5b:51:96:7d:
82:cd:8e:c3:29:36:25:cf:ed:bf:c0:59:b0:2a:a8:
d4:d9:17:6a:28:8d:59:a0:30:02:28:0c:4c:e5:ff:
f8:e4:f7:72:18:72:bc:4c:e9:1b:5d:c5:00:fb:92:
ae:e0:43:78:4d:14:bc:bd:34:0a:33:51:07:51:a4:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:71:D5:91:2F:38:70:20:2B:30:82:6D:FB:6B:62:90:AE:7D:11:53
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/zXHVkS84cCArMIJt-2tikK59EVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.72.0-5.42.87.255
5.42.94.0/23
5.42.100.0-5.42.107.255
Signature Algorithm: sha256WithRSAEncryption
d0:6a:38:d1:1d:f3:9c:ea:51:a0:31:21:79:f9:04:36:3e:eb:
97:f2:bf:90:8d:3a:91:2c:61:ee:1b:85:c0:6f:d4:03:69:dd:
54:67:58:d8:aa:63:b8:90:dd:bd:4d:a6:d7:c2:a2:01:62:fd:
73:74:e9:6a:6b:c0:dd:e1:6a:4c:f0:a6:d9:2a:b5:10:05:10:
8b:31:15:ca:2a:32:be:a8:ca:3e:26:e6:aa:2d:e2:00:6e:60:
5a:4c:f3:e5:0a:cb:44:99:85:bf:86:9c:68:19:25:ea:8e:0b:
9f:ee:07:55:2d:d6:7f:3e:28:7d:da:76:c9:66:44:c3:1d:80:
a4:73:14:0e:59:a5:ad:19:49:5c:9e:52:2e:ba:a6:02:f2:51:
28:3c:e1:40:2e:0e:e1:da:b8:cf:59:41:e2:f8:19:dd:f1:3b:
01:62:c6:80:40:c9:e0:70:ec:5a:b2:55:2f:96:38:82:b1:63:
c6:d0:7d:d8:e5:c7:68:81:18:e9:7b:a0:53:76:9b:9e:1c:dd:
c4:b8:08:47:a4:e9:7b:85:d8:23:e9:cd:1d:28:92:88:8e:fb:
ed:cd:09:89:c2:23:1a:60:52:3b:2b:bc:e5:96:47:66:1c:f8:
8d:0c:01:04:ac:dc:01:80:f9:00:69:6e:c6:ce:00:ea:f3:ea:
5a:33:16:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 01:05:16 2024 by rpki-client on console-fra.rpki-client.org