Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/1-5FvHR6PajhfqVe2jlO4gwFH1ZA.roa
File: 1-5FvHR6PajhfqVe2jlO4gwFH1ZA.roa (raw, json)
Hash identifier: j1Vwyotx4tjUAK1Mq8Md2IBtYvrlSCjYS5y5dcf8vzg=
Subject key identifier: FB:91:6F:1D:1E:8F:6A:38:5F:A9:57:B6:8E:53:B8:83:01:47:D5:90
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 018CC425639BD0291AF30096AE85E904CD77
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/1-5FvHR6PajhfqVe2jlO4gwFH1ZA.roa
Signing time: Mon 01 Jan 2024 08:30:33 +0000
ROA not before: Mon 01 Jan 2024 08:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 5.252.8.0/23 maxlen: 23
5.252.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 14 May 2024 11:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:63:9b:d0:29:1a:f3:00:96:ae:85:e9:04:cd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb916f1d1e8f6a385fa957b68e53b8830147d590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:37:e0:87:0d:ee:c9:5e:7a:00:7d:ef:70:
c4:ff:04:45:a4:7b:e7:dc:e5:3c:f6:a2:5f:c2:0e:
3f:1e:15:63:6d:18:0b:16:4a:24:e8:4c:75:ca:e8:
4e:63:a7:f2:50:bb:c0:bb:6a:e8:0e:35:53:aa:89:
48:1b:a1:c9:f5:83:d6:f9:32:62:0f:2b:cc:fc:3c:
00:4a:87:81:a4:cb:7c:d7:36:f8:02:bb:5a:09:08:
cb:a3:57:cd:e7:c2:20:1f:8c:03:f7:f1:59:5b:bf:
56:b4:7a:92:fe:7c:51:f8:98:26:28:56:b7:59:87:
31:c2:34:b3:6b:a9:24:3b:a0:a6:db:c3:40:40:22:
fc:08:f7:18:ea:09:da:8e:7c:fe:ab:d1:79:0e:94:
17:51:c5:76:ac:37:19:5e:29:40:22:9b:d2:4f:a3:
c5:3a:c1:1d:63:5c:35:52:3a:69:b0:b7:f0:fe:f3:
c6:a1:cc:22:4a:eb:29:da:af:69:f2:f9:37:b5:50:
2d:0b:6e:90:32:53:b0:a7:c6:a0:74:75:0b:04:6a:
b4:25:0c:27:2e:00:4d:23:4d:c7:55:7b:d1:1e:63:
45:e7:0f:2b:3b:94:e2:3b:52:0d:8b:df:5d:98:89:
7f:70:59:65:62:b9:44:a1:bb:c2:a2:92:ef:fd:82:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:91:6F:1D:1E:8F:6A:38:5F:A9:57:B6:8E:53:B8:83:01:47:D5:90
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/1-5FvHR6PajhfqVe2jlO4gwFH1ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
26:73:d5:4d:37:2c:4e:bc:d0:08:15:3a:39:a1:ab:55:48:ae:
63:19:9b:1d:98:23:98:9c:da:ca:80:5c:3a:99:e1:09:38:2d:
ec:b6:75:99:ae:0e:0a:b4:d7:76:c8:08:9d:c6:68:09:38:7c:
1d:09:a8:b2:fd:2a:b7:c4:4c:28:fc:98:be:fb:b2:8c:70:c4:
92:b0:6d:ba:43:47:9c:c5:b4:81:57:68:27:9b:39:6a:2a:7c:
94:20:7f:fb:57:82:c4:db:a6:ae:ee:99:fd:20:6d:f1:61:36:
a2:cb:8c:bf:f5:87:20:1c:2a:27:56:b1:0b:02:22:94:8d:a5:
36:07:22:19:6e:ff:17:a7:df:3d:94:2e:ae:3b:83:3d:ba:ed:
0a:19:dc:c9:3b:cb:9a:41:4e:ac:c8:e6:96:40:c6:66:fa:e8:
81:14:c2:5a:fe:e7:f5:8e:a6:b7:ea:4d:38:ef:95:31:22:ac:
70:c8:5c:c1:60:1f:f0:4c:5a:1e:04:9b:08:1a:2a:4c:60:ce:
5d:54:b6:ae:c2:36:21:45:b2:dc:28:58:34:19:19:df:4d:f4:
dd:60:c0:7d:a3:8d:86:e5:f9:71:9a:95:6f:ee:9f:24:08:e6:
cd:7f:c0:c0:8f:41:19:24:8e:3b:e0:5d:59:10:6c:f4:65:84:
bf:70:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:58 2025 by rpki-client