Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/hVY6cygUwKYMygBxTmJFaKFtv3k.roa
File: hVY6cygUwKYMygBxTmJFaKFtv3k.roa (raw, json)
Hash identifier: U5qkQKu/uQ7vRnF+cOG2m6UpNEae9m2W0tCns98tPU0=
Subject key identifier: 85:56:3A:73:28:14:C0:A6:0C:CA:00:71:4E:62:45:68:A1:6D:BF:79
Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial: 0191D6CEE5C711B8CAF5B9462F3B9F62FE77
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/hVY6cygUwKYMygBxTmJFaKFtv3k.roa
Signing time: Mon 09 Sep 2024 12:42:49 +0000
ROA not before: Mon 09 Sep 2024 12:42:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214304
IP address blocks: 5.253.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 06:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:ce:e5:c7:11:b8:ca:f5:b9:46:2f:3b:9f:62:fe:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Validity
Not Before: Sep 9 12:42:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85563a732814c0a60cca00714e624568a16dbf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:36:ed:87:80:c6:0e:7a:ff:82:67:d9:d3:
b2:e7:5b:d2:50:c3:2b:8f:36:81:4d:73:89:ec:71:
a8:ad:74:1e:bd:94:3b:4a:62:d1:77:df:cc:5a:67:
29:ee:f5:72:09:ce:d0:57:34:b2:1f:0c:6f:0d:c2:
ad:3e:a0:3b:52:d1:4e:b8:07:14:cf:61:af:ce:b8:
ec:fd:92:16:38:f9:a8:90:09:51:76:5e:b3:fe:3e:
c1:a1:00:5f:9f:c2:2f:6e:14:e5:04:7e:67:b2:ab:
f0:f9:5e:3e:e7:d3:a1:47:d1:55:67:e7:ce:69:0f:
8c:3d:19:62:f4:ea:0e:99:f4:8e:24:bf:e2:3b:11:
c3:fc:40:59:ad:e7:83:e6:c5:26:3a:41:e1:1a:81:
97:76:c8:b8:2d:3c:28:53:39:76:ff:10:a3:10:fc:
61:9b:c3:74:45:3f:dc:c5:23:29:5e:17:0e:8c:c6:
2a:f4:77:73:5e:79:c1:d7:0d:f3:5d:a6:d4:21:aa:
2f:f8:f6:d3:43:01:8c:4d:4a:01:b2:e5:6d:8c:54:
01:d0:de:0d:eb:2a:43:25:06:7e:e6:92:35:c1:51:
25:15:11:3c:1f:b2:0c:52:a9:d4:a8:9a:bd:50:3d:
13:5a:d1:66:56:b8:f5:ad:fc:1b:8b:8d:6c:b1:93:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:56:3A:73:28:14:C0:A6:0C:CA:00:71:4E:62:45:68:A1:6D:BF:79
X509v3 Authority Key Identifier:
keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/hVY6cygUwKYMygBxTmJFaKFtv3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.191.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1f:55:90:ce:5a:21:64:98:e5:77:cd:5a:1b:b9:6f:f8:91:
e9:d1:78:32:9d:1d:53:4f:ae:17:eb:51:9e:8f:de:91:9f:b8:
1c:68:79:b0:ce:32:b2:76:d5:f2:52:43:45:70:6b:fb:19:46:
b2:d3:35:5e:9b:7e:61:a3:15:cd:66:3b:16:56:38:71:2f:68:
16:e1:5a:06:e7:74:63:fd:14:89:7a:f9:7a:1f:2c:50:5a:b9:
6a:c9:f7:73:f0:26:f4:68:35:eb:33:8d:c0:d1:7a:61:5d:3f:
27:ba:75:3b:62:50:10:7b:68:13:7d:68:7d:82:dc:fc:60:99:
d5:bf:00:5d:1d:fb:b4:94:6c:10:48:86:a2:7c:42:42:be:3d:
02:f5:54:02:dc:22:97:77:73:4c:6c:95:b6:b3:6d:b6:b8:4f:
1e:50:f5:b0:3a:01:4e:9a:a3:49:fd:c0:76:33:26:e0:fa:dd:
cb:44:11:50:38:a3:ce:51:c0:5e:a9:61:b0:f7:fc:36:bf:7f:
d3:36:21:cc:ab:33:f8:3f:f6:d7:44:ab:37:57:39:79:b4:dd:
d0:5c:94:98:dd:b3:23:08:a7:e9:2f:5a:a0:37:5c:f1:73:f1:
c2:9a:fc:cc:6e:1a:12:15:a0:0d:84:61:83:0b:4b:11:06:8a:
5c:d9:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:37 2025 by rpki-client