Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/CfgHA3Yb9GobrGj0nVFUAn3zv8I.roa
File: CfgHA3Yb9GobrGj0nVFUAn3zv8I.roa (raw, json)
Hash identifier: Y//bdyiOatLJ1OmTTmX1C/aCnPG4J5JS+q08R58ZNjg=
Subject key identifier: 09:F8:07:03:76:1B:F4:6A:1B:AC:68:F4:9D:51:54:02:7D:F3:BF:C2
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018DC6631BD22D09EA473B2DCB0A0C242BBB
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/CfgHA3Yb9GobrGj0nVFUAn3zv8I.roa
Signing time: Tue 20 Feb 2024 12:00:00 +0000
ROA not before: Tue 20 Feb 2024 12:00:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207614
IP address blocks: 5.154.7.0/24 maxlen: 24
78.136.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 02:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:63:1b:d2:2d:09:ea:47:3b:2d:cb:0a:0c:24:2b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Feb 20 12:00:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09f80703761bf46a1bac68f49d5154027df3bfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:57:c5:a2:29:40:c9:15:05:b1:ed:31:45:
88:9f:fc:d2:e9:48:04:a0:f3:05:50:00:21:af:88:
ca:80:a6:44:ca:29:3b:c9:6c:b3:bb:14:43:5a:9d:
4f:e7:3d:58:67:69:2c:24:5b:72:c6:0e:50:ed:20:
6d:f5:ae:70:01:4c:4c:a5:45:a7:9a:60:56:a7:05:
19:79:ef:0d:25:c8:d0:b2:e6:15:86:65:b5:83:cb:
68:27:67:55:ad:57:3c:a5:fc:bb:e6:57:40:d9:ae:
cd:49:94:b3:cf:b5:89:00:e5:bf:6a:1e:ca:34:52:
67:ce:6f:c2:e0:0a:30:46:d1:69:f7:b9:72:c1:59:
84:b7:40:b9:92:d7:24:e7:66:b5:7e:55:1d:3a:da:
11:ee:c6:1b:32:b3:96:a1:a6:67:01:a9:c2:1d:fd:
f5:0f:23:09:d7:31:51:b1:ad:ba:47:36:fe:be:da:
3d:82:15:af:96:8b:8e:79:84:21:c5:ef:b5:0f:2b:
0a:ad:91:71:0f:b7:8d:55:7d:2f:ce:0e:dd:14:97:
a6:0f:c7:fc:d7:f0:c1:47:61:00:9d:30:7a:9a:31:
9c:86:0d:f4:c7:14:89:32:2d:c5:e3:56:b2:79:a6:
fa:e1:5c:69:2c:ab:cd:cd:59:72:44:82:e3:00:f8:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F8:07:03:76:1B:F4:6A:1B:AC:68:F4:9D:51:54:02:7D:F3:BF:C2
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/CfgHA3Yb9GobrGj0nVFUAn3zv8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.7.0/24
78.136.79.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3f:ae:88:cc:6a:b0:8d:60:ec:fd:14:ad:21:ed:02:32:cf:
7c:7b:71:a6:97:d5:61:3f:9e:da:a3:48:5e:da:5d:f0:93:6e:
84:a7:c0:c7:cc:d0:4d:cf:5d:8f:e3:1f:7e:4a:74:a2:86:04:
05:b1:0c:71:67:0d:14:f1:ff:44:b2:49:b1:1c:73:dd:8d:8a:
00:bc:d1:20:de:9c:a0:b1:a8:80:70:c8:32:11:29:b8:b9:49:
b8:32:fe:c2:d7:78:bc:c4:f7:7b:9f:28:33:8f:d6:9d:7d:4e:
d1:6f:44:67:56:76:be:9d:97:76:69:b8:ed:2a:e9:95:d9:60:
d0:c1:12:e7:75:8d:68:df:5a:db:64:80:82:b2:72:54:c6:d4:
08:65:aa:9f:78:2e:11:1d:37:3a:74:13:5a:66:70:5e:04:a7:
33:87:98:06:b0:20:b9:42:7f:07:70:a4:8a:28:0e:2d:4a:61:
f6:66:61:84:c4:a4:3b:d6:21:82:4b:a8:59:ec:4a:b0:ec:a7:
aa:57:9f:70:c7:8d:57:1f:9a:59:2a:ea:97:3f:84:f8:ea:b8:
c2:d3:e1:3e:24:9c:44:11:6a:e3:0c:2a:8a:ed:4a:08:37:63:
89:26:d9:1c:86:ee:c2:ad:82:8e:12:6e:57:a5:8e:9c:03:2f:
4d:b3:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 04:00:45 2024 by rpki-client on console-ams.rpki-client.org