Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/g6A_9HKtlamUMUhDVagyJ8IWxlU.roa
File: g6A_9HKtlamUMUhDVagyJ8IWxlU.roa (raw, json)
Hash identifier: egPsgeWtAljx9Z9cmzxF9+ZUIbenf0ELOvg/LuqsMHA=
Subject key identifier: 83:A0:3F:F4:72:AD:95:A9:94:31:48:43:55:A8:32:27:C2:16:C6:55
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 018F8D8218BDBFCE5F77BE7646426B8BBBD1
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/g6A_9HKtlamUMUhDVagyJ8IWxlU.roa
Signing time: Sat 18 May 2024 21:01:04 +0000
ROA not before: Sat 18 May 2024 21:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210392
IP address blocks: 5.22.201.0/24 maxlen: 24
5.22.202.0/24 maxlen: 24
5.22.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 20:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8d:82:18:bd:bf:ce:5f:77:be:76:46:42:6b:8b:bb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: May 18 21:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83a03ff472ad95a99431484355a83227c216c655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4a:f5:69:32:41:9e:c4:6e:c6:f1:d6:fe:2d:
b4:66:cc:19:74:e6:4f:ea:ba:27:05:91:d0:be:58:
23:48:28:92:1d:df:8b:52:40:88:2f:9a:33:cd:28:
23:d5:85:b9:ba:05:4b:e5:e4:5a:04:b0:82:66:80:
69:ac:52:b4:4c:58:33:1b:19:47:c9:c0:fe:e9:a0:
c0:f2:8d:48:5f:67:b9:da:a9:cc:39:e8:6a:ba:28:
a3:f5:a2:a2:91:d1:e9:03:29:26:1c:62:ed:d4:16:
1f:a4:a6:a7:20:c4:af:33:9b:4c:ea:f3:6f:69:4a:
9d:0f:74:ff:c1:a1:29:e6:06:c0:fc:b7:2a:4e:9c:
e2:01:e9:9c:c9:4e:8a:31:b0:f9:cb:4d:bb:0b:ff:
6a:52:2b:b2:79:32:57:6d:aa:46:c9:0d:d9:c5:5b:
37:cd:39:1a:1b:3c:e0:0e:0d:33:d7:47:b2:65:76:
84:f2:fc:de:0c:f1:10:2b:df:73:1b:f3:98:d2:26:
4f:b3:cc:e0:ce:e2:90:74:32:84:70:3f:32:f0:90:
3f:9e:97:99:9a:bc:9a:43:c8:d3:ee:09:14:af:f8:
80:82:aa:f9:bc:ed:fd:c1:34:fa:e2:48:7c:97:d7:
96:2b:b1:8b:d1:78:fa:4a:46:af:a9:ef:0e:67:bf:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A0:3F:F4:72:AD:95:A9:94:31:48:43:55:A8:32:27:C2:16:C6:55
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/g6A_9HKtlamUMUhDVagyJ8IWxlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.201.0-5.22.203.255
Signature Algorithm: sha256WithRSAEncryption
73:c2:03:d6:7c:fc:10:c0:0a:bf:f2:b0:8e:8a:e3:80:98:c1:
6e:07:49:7e:56:df:a2:69:e9:47:c8:08:f5:70:6c:50:26:f2:
c3:3c:17:ea:12:e3:c0:96:19:d6:9b:c3:53:8b:91:09:05:ae:
5e:a3:45:1c:d5:a6:82:04:b6:eb:86:2e:26:20:c6:e9:ca:cb:
7e:71:2c:cf:11:8d:bd:2d:c0:be:e1:9e:13:3b:e0:0d:c1:86:
19:2e:02:b9:db:1e:b6:4b:4e:06:6d:9c:f3:5b:1b:0a:f8:4b:
c5:36:f6:b5:88:ea:6d:20:c4:f8:03:85:44:52:4b:8a:03:e8:
89:32:76:8b:94:e7:ca:20:fd:37:37:7e:05:84:77:b0:2a:40:
9a:ca:49:0d:a8:53:35:97:63:fc:e1:df:18:e1:9b:da:20:a1:
e7:78:29:5c:61:08:93:1e:f7:72:78:6c:95:e9:ea:75:da:7b:
bf:28:7a:fb:c2:a3:84:9f:19:58:ab:93:fc:2c:4a:9b:3b:ba:
0d:37:59:0c:d7:ab:da:6d:2a:b0:2e:2d:21:8d:c3:9e:ec:c3:
24:83:1e:80:a0:39:cd:4e:ee:0c:70:58:39:31:f6:9c:d0:aa:
ca:53:73:18:fd:fc:a7:f0:2f:f2:40:2d:7f:a2:a1:1a:66:6b:
51:13:78:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 21:14:53 2024 by rpki-client on console-fra.rpki-client.org