Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/zYCeaLHKpykZG3v4BGqEKl_wlJI.roa
File: zYCeaLHKpykZG3v4BGqEKl_wlJI.roa (raw, json)
Hash identifier: mYAmLxtmZWT1adj+aVYNyJVF2+tTSDP69vcHQqqQiss=
Subject key identifier: CD:80:9E:68:B1:CA:A7:29:19:1B:7B:F8:04:6A:84:2A:5F:F0:94:92
Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial: 019271162EC1977DF97EAEBDF8E17F7A88D3
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/zYCeaLHKpykZG3v4BGqEKl_wlJI.roa
Signing time: Wed 09 Oct 2024 11:42:12 +0000
ROA not before: Wed 09 Oct 2024 11:42:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211014
IP address blocks: 5.253.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 15:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:16:2e:c1:97:7d:f9:7e:ae:bd:f8:e1:7f:7a:88:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Validity
Not Before: Oct 9 11:42:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd809e68b1caa729191b7bf8046a842a5ff09492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:93:89:e1:17:9f:01:cd:46:51:36:8a:42:
de:0a:1f:f1:61:f1:d6:4d:11:ca:16:5e:4d:0b:df:
ce:40:f8:fa:f6:24:52:8f:2a:99:42:59:06:51:d4:
65:9b:bf:44:9a:14:c3:97:f5:58:98:a0:4c:1f:28:
ba:1e:ef:62:52:48:79:f4:7d:ff:f3:65:07:fe:49:
49:1a:60:7f:00:17:3b:b4:1d:36:6d:c1:1c:9e:0f:
8b:9a:76:00:99:36:e4:c1:67:99:3d:b7:d6:48:ac:
45:df:b2:77:e9:89:6b:5d:17:34:33:08:59:4f:e3:
07:68:66:63:a2:a0:e6:a5:b0:6a:db:e3:df:82:9c:
e8:41:77:a3:25:a8:e9:c2:68:98:1d:ac:7a:92:63:
9d:08:04:59:ba:32:fa:91:28:a1:8d:15:d9:59:aa:
72:57:b0:bc:17:01:48:35:a3:59:50:a0:8f:74:43:
e5:a5:fe:76:cf:e2:2c:a0:cc:14:4b:fd:bc:2c:13:
be:e7:72:7a:16:21:5b:ff:7d:15:8f:70:12:8a:80:
42:4f:22:6f:7e:40:a1:6f:f1:7f:79:13:41:7c:10:
d4:06:e2:64:00:ad:e2:3a:fd:5a:7a:e3:33:b8:cc:
b9:38:db:d8:3f:39:30:3b:10:9e:1a:43:6d:53:97:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:80:9E:68:B1:CA:A7:29:19:1B:7B:F8:04:6A:84:2A:5F:F0:94:92
X509v3 Authority Key Identifier:
keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/zYCeaLHKpykZG3v4BGqEKl_wlJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.191.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f1:80:48:34:94:2c:35:29:08:24:6c:d0:72:a8:8a:0c:54:
4a:b2:4d:29:87:ad:29:7f:5a:24:6f:9b:93:28:ea:3e:93:b1:
cd:5f:9d:9e:65:e3:38:96:12:9a:b7:d7:86:41:14:e8:a1:9a:
63:c1:5a:7d:5e:49:ec:02:21:26:6d:ee:f1:db:9f:3a:fa:f6:
fc:39:c5:46:f2:c3:42:31:e8:c2:5b:2d:e6:dd:70:42:2f:60:
63:bc:1c:98:cf:07:78:9f:88:0c:ae:44:8b:78:8f:8a:11:65:
51:0b:7b:6b:f3:ea:e4:84:91:19:4a:ed:54:c6:7f:49:c3:c5:
f3:b8:ce:f3:53:b2:49:b6:7b:8d:21:2d:f5:f0:89:6d:8f:4d:
ec:77:c4:a0:a6:2c:c1:12:ca:86:3f:f2:78:a1:ac:80:a2:06:
32:66:ca:a3:67:94:07:16:51:3b:ae:c1:af:76:55:1f:74:be:
52:b7:df:4b:1a:9e:61:6a:d3:b2:49:5f:53:ea:0f:4c:5b:3c:
a2:2e:8c:7d:ec:84:c3:42:0e:9d:86:2e:17:d5:44:a0:91:3f:
64:b6:39:95:ef:fc:ad:f5:72:7b:32:86:37:d1:3f:e8:df:35:
86:a8:3f:90:66:df:55:74:38:6a:3d:47:85:0b:e9:c7:69:31:
38:13:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:03:15 2025 by rpki-client