Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/5_ZDoyp8V2KoaTQyKgw3NIzWzG4.roa
File: 5_ZDoyp8V2KoaTQyKgw3NIzWzG4.roa (raw, json)
Hash identifier: tj9vNSAkrdmt5c1pfLHP7DpCaFZgchgLCD7KshKbUxs=
Subject key identifier: E7:F6:43:A3:2A:7C:57:62:A8:69:34:32:2A:0C:37:34:8C:D6:CC:6E
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 018FFD6025433259DB86AE542D6F77229FAA
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/5_ZDoyp8V2KoaTQyKgw3NIzWzG4.roa
Signing time: Sun 09 Jun 2024 14:21:27 +0000
ROA not before: Sun 09 Jun 2024 14:21:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 62.169.153.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 20:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fd:60:25:43:32:59:db:86:ae:54:2d:6f:77:22:9f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jun 9 14:21:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7f643a32a7c5762a86934322a0c37348cd6cc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:df:b8:3e:d6:a6:e2:8b:dc:f8:61:1e:17:
b5:59:57:e2:7d:eb:3e:36:d6:24:47:cd:12:81:f0:
61:2c:d0:7a:92:c3:45:e9:3c:f5:23:04:cf:af:9a:
b9:97:ee:41:c6:4e:1f:74:6b:f8:73:9c:9a:f2:b4:
07:7f:de:49:a7:a7:2b:a8:b4:0f:03:86:8f:9d:30:
ba:69:bb:f0:a4:ae:e0:41:07:e7:de:ab:9d:29:fe:
f6:68:46:99:a2:95:33:a8:f8:ea:7c:c4:9b:73:28:
ad:ec:99:02:89:72:ba:41:9d:09:fc:7f:75:64:ee:
59:c6:29:ff:72:37:4b:a6:b1:58:6f:94:2a:29:50:
93:7a:3f:f2:06:03:9d:33:0e:ed:01:bd:b9:e5:32:
c1:b9:26:88:78:dd:30:d4:08:74:00:3d:c4:bd:ec:
83:67:99:52:8a:c2:2d:91:2f:30:11:e0:10:e9:73:
f3:f2:91:d4:9d:6d:7c:14:69:8b:44:62:a5:7b:67:
fd:48:a5:86:7a:c4:15:d2:5e:81:03:87:4b:16:6a:
dc:59:21:f3:47:63:97:dd:f5:9c:a8:5a:b1:f2:cc:
08:6a:ed:89:e7:a3:ed:41:41:cf:19:81:bf:8e:6d:
c7:46:e6:8c:cb:7d:8e:8c:00:13:fd:f8:6b:fc:14:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F6:43:A3:2A:7C:57:62:A8:69:34:32:2A:0C:37:34:8C:D6:CC:6E
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/5_ZDoyp8V2KoaTQyKgw3NIzWzG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.153.0/24
185.121.133.0/24
Signature Algorithm: sha256WithRSAEncryption
32:8e:77:a6:4d:e2:c7:6e:4d:0e:88:33:30:d6:cd:60:11:df:
0a:49:c2:b3:92:90:a4:01:a5:3b:26:f5:c2:d8:13:cd:c1:fe:
95:6e:5b:c0:77:b3:5f:c2:48:e0:e2:89:f9:8f:b1:6f:44:2a:
23:ed:69:44:f6:2b:00:5b:2e:7f:9e:ef:fa:8e:d4:b6:cd:0e:
28:96:09:f5:5c:cd:ad:e5:49:7d:7d:22:43:ed:41:50:f1:79:
5f:77:83:f3:88:c6:de:8c:f8:a7:db:6c:97:39:3f:bc:a7:4e:
de:47:65:93:8f:0c:55:b9:eb:f5:71:f0:76:7a:7d:65:1b:c1:
b4:05:03:cb:64:8c:c1:e7:42:3c:1e:1c:79:ca:cd:46:fe:5f:
b2:1c:ce:98:76:d6:9b:65:c3:9f:93:5f:5d:00:5a:7a:b5:1a:
51:90:b5:99:77:f7:ad:0c:4a:b5:bb:37:fc:1e:5f:80:07:ce:
58:b9:49:30:22:cc:bf:48:0e:9d:f6:b1:d0:cf:7f:f8:b8:81:
6b:3b:5e:14:af:bf:09:75:90:03:b9:68:59:33:5a:c9:c6:be:
f1:29:5f:05:4f:c2:0c:26:77:32:ea:70:da:b1:e3:10:58:58:
36:e1:11:f2:e0:ec:6e:8a:29:46:fa:5d:2c:0e:07:30:5a:9c:
21:b2:bb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 21:07:17 2024 by rpki-client on console-ams.rpki-client.org