Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/ir7kW9kmr-mI1szWpPVr_v20xJY.roa
File: ir7kW9kmr-mI1szWpPVr_v20xJY.roa (raw, json)
Hash identifier: RrMjaCa8yPdh2gKVJOeOkfyEE2/XVhbJo4GVsdPDEcQ=
Subject key identifier: 8A:BE:E4:5B:D9:26:AF:E9:88:D6:CC:D6:A4:F5:6B:FE:FD:B4:C4:96
Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial: 01926FFFDC0CA65DAAE2FE41F5070944EB72
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/ir7kW9kmr-mI1szWpPVr_v20xJY.roa
Signing time: Wed 09 Oct 2024 06:38:11 +0000
ROA not before: Wed 09 Oct 2024 06:38:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39011
IP address blocks: 5.253.191.0/24 maxlen: 24
194.102.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 11:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6f:ff:dc:0c:a6:5d:aa:e2:fe:41:f5:07:09:44:eb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Validity
Not Before: Oct 9 06:38:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8abee45bd926afe988d6ccd6a4f56bfefdb4c496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:a8:84:03:65:88:8b:fd:44:af:a7:3c:99:
3a:1f:c9:8a:00:fc:49:5e:00:77:27:2b:78:22:ad:
fa:66:e5:ba:2b:9a:85:1c:53:bb:d9:ab:0a:ac:31:
e2:5d:19:a8:31:81:c3:33:7e:e1:06:fa:3b:e3:93:
5e:1c:45:27:63:ac:c7:16:25:5f:fd:30:13:37:a7:
3d:31:4e:f6:51:fc:1d:b1:1e:09:66:ff:f0:84:9c:
fc:de:32:2a:04:97:35:0b:74:46:63:dd:1f:c4:58:
01:1d:a2:14:98:ff:3f:f3:57:57:72:ec:82:54:4b:
33:0c:7f:9d:36:94:7e:a5:45:13:db:a9:37:e3:4f:
ba:96:6a:5e:47:78:69:d2:83:01:cd:19:d2:f8:5b:
2a:d9:f4:7d:4c:b2:a7:f3:e7:b9:28:51:cc:a8:71:
e3:8e:9c:15:a3:99:f4:20:9d:fe:29:b8:3a:ec:16:
87:aa:3c:a9:75:50:d4:c9:f8:a6:44:e1:3f:e8:91:
ec:4b:86:f3:ab:b8:e1:f5:7e:74:66:b4:aa:e2:5d:
32:0f:4b:e8:5f:35:c9:fb:22:0e:3e:5d:5d:c9:ee:
ba:e9:9c:5a:ec:5b:45:75:16:6c:3a:9b:eb:6c:f4:
c2:0c:8d:c5:82:86:2c:e5:42:47:eb:28:dd:01:5d:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BE:E4:5B:D9:26:AF:E9:88:D6:CC:D6:A4:F5:6B:FE:FD:B4:C4:96
X509v3 Authority Key Identifier:
keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/ir7kW9kmr-mI1szWpPVr_v20xJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.191.0/24
194.102.204.0/24
Signature Algorithm: sha256WithRSAEncryption
62:bc:93:cc:e8:8a:92:a7:48:36:91:33:d4:33:ff:f2:65:9d:
82:08:de:29:00:39:d6:ae:5b:b3:ef:46:c9:d5:2f:3e:b8:b7:
17:3a:93:05:df:76:b1:6b:7d:dd:58:16:00:f1:fe:0b:8e:b4:
e0:64:76:ae:5b:a4:d1:72:cd:f8:b3:92:b3:6f:59:9c:e6:63:
93:b6:ec:70:b5:c4:99:e3:22:47:44:ba:6d:27:7d:de:c2:0a:
60:48:98:ed:d2:18:c2:31:0d:f0:c3:9b:56:6b:98:8c:be:3c:
a0:b7:f7:25:81:fb:fe:ec:4e:43:59:f0:10:1f:ba:12:b4:74:
53:a8:2f:ce:08:b5:9c:3f:e5:f3:d8:8b:96:b1:93:81:8c:4c:
6b:41:04:2b:b7:22:55:c8:4a:c9:8d:f7:5e:40:73:c3:de:ec:
44:44:89:79:5a:46:5a:0c:94:12:e4:28:e5:a9:bd:64:fa:89:
fa:a8:f3:2e:38:12:8b:2a:46:bf:8f:72:28:2b:f5:50:af:55:
24:87:00:9e:a2:7e:cd:7e:38:96:38:24:09:09:33:17:84:f4:
96:b9:75:dd:52:28:98:e7:e1:d3:51:43:91:f2:eb:d2:b2:7b:
09:6f:f5:6c:55:9f:f0:ea:30:8a:67:fc:92:6c:b0:27:7b:58:
bc:50:31:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:06 2025 by rpki-client