Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/hw8VHuVTc4Ik7eJO69v5ZydpBs4.roa
File: hw8VHuVTc4Ik7eJO69v5ZydpBs4.roa (raw, json)
Hash identifier: W8CWnwTyp1kMx6ReC+ftkYoErwEv41tHP6zlrPy8ieE=
Subject key identifier: 87:0F:15:1E:E5:53:73:82:24:ED:E2:4E:EB:DB:F9:67:27:69:06:CE
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 018F856B2C47461D29CC4FCA294B570122E9
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/hw8VHuVTc4Ik7eJO69v5ZydpBs4.roa
Signing time: Fri 17 May 2024 07:19:04 +0000
ROA not before: Fri 17 May 2024 07:19:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210392
IP address blocks: 5.22.200.0/24 maxlen: 24
5.22.201.0/24 maxlen: 24
5.22.202.0/24 maxlen: 24
5.22.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 May 2024 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:6b:2c:47:46:1d:29:cc:4f:ca:29:4b:57:01:22:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: May 17 07:19:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=870f151ee553738224ede24eebdbf967276906ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:39:dd:28:00:db:0e:b8:c2:3a:e9:1d:14:83:
87:03:48:ae:4b:7c:c0:5f:ef:81:48:ef:5b:3f:c3:
a1:0e:f7:d2:25:6c:1a:58:e1:43:27:d9:17:de:16:
e8:2a:f8:95:d1:7b:b0:f3:c0:d2:8c:0e:78:1a:ef:
49:f6:bb:d6:ec:52:89:b7:31:d8:f1:81:85:f7:93:
dc:71:e1:5c:e4:f5:8c:b5:ce:7e:91:64:5e:5e:cb:
02:e7:14:30:74:fd:21:a2:6a:54:36:34:e8:ed:93:
8a:2f:82:32:f4:79:18:f7:38:1d:4c:ac:04:ce:cd:
18:e6:11:b2:ab:c1:9d:52:61:e5:6d:28:b6:fe:9c:
2f:d5:93:71:24:6e:45:09:10:c4:9d:fb:ac:4f:96:
88:76:19:c4:87:6d:f1:05:62:93:83:da:57:20:67:
ba:c8:d7:44:9d:78:f4:7a:38:7c:b0:b7:90:7c:c6:
e0:be:d3:8e:7d:3b:3a:d6:6a:5a:3c:e5:2e:97:53:
f8:7d:2f:98:38:7b:15:23:4c:61:02:d7:82:93:fd:
cc:5c:20:e5:22:52:82:d7:b5:a8:61:aa:f6:71:2e:
6f:d1:b8:51:e3:13:da:4f:d6:58:56:ae:ab:47:73:
c7:90:51:5b:68:34:17:cf:63:09:3f:60:aa:ee:b2:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0F:15:1E:E5:53:73:82:24:ED:E2:4E:EB:DB:F9:67:27:69:06:CE
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/hw8VHuVTc4Ik7eJO69v5ZydpBs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:77:d7:ac:d2:6f:7f:fd:57:4f:24:bd:64:00:34:bf:6d:6f:
e2:a0:b7:55:77:89:aa:26:c1:6c:9d:95:27:d0:ee:c4:fb:0b:
96:c9:c2:a4:a5:7d:00:82:77:be:e6:a3:30:f2:af:9c:fa:5e:
32:3b:f8:ae:11:93:b8:9c:51:1e:98:17:72:ef:bb:3e:1c:28:
21:f2:ca:52:e2:05:b7:ec:86:9f:d6:7c:8c:d4:e2:74:e2:f6:
3f:c1:ad:30:0e:7f:53:19:66:f6:81:b8:a2:10:3d:22:1c:51:
83:56:6e:c2:eb:51:37:5f:d5:28:ca:24:ef:5a:0e:71:52:f2:
f6:05:4a:2b:21:31:01:e4:b9:4e:a0:88:71:3f:6f:53:42:71:
9f:2f:fd:d1:1d:68:15:69:c8:35:4b:c6:43:43:27:e3:8e:7a:
93:61:f8:8b:3d:22:9a:e7:d9:8e:58:3e:d4:4e:35:69:08:65:
33:bd:aa:57:4f:2e:13:22:f9:c9:88:72:32:a4:63:e1:c8:73:
70:d7:d1:01:b1:62:28:dd:43:3a:e4:ae:43:ac:68:c7:a5:d0:
20:36:ef:71:ad:e2:7f:81:49:ee:a3:c1:76:71:e3:2c:2c:ab:
47:cb:80:7d:de:a0:f1:81:58:99:87:3a:cf:78:c9:62:41:92:
d9:46:f6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:02 2024 by rpki-client on console-fra.rpki-client.org