Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/pFAv3CbEWt4W5MMcAu3jloAti-I.roa
File: pFAv3CbEWt4W5MMcAu3jloAti-I.roa (raw, json)
Hash identifier: V9hIX69JR8lR5YT0YFNcEVaRFYHr5bCSJRAneZdUgB4=
Subject key identifier: A4:50:2F:DC:26:C4:5A:DE:16:E4:C3:1C:02:ED:E3:96:80:2D:8B:E2
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 01857002892B63FA3DFEE02E800CE4049CC1
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/pFAv3CbEWt4W5MMcAu3jloAti-I.roa
Signing time: Mon 02 Jan 2023 01:04:52 +0000
ROA not before: Mon 02 Jan 2023 01:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 5.252.10.0/23 maxlen: 23
5.252.8.0/23 maxlen: 23
5.252.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 12 Dec 2023 12:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:89:2b:63:fa:3d:fe:e0:2e:80:0c:e4:04:9c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Jan 2 01:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4502fdc26c45ade16e4c31c02ede396802d8be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:d0:1a:fa:9f:ce:f9:d7:bd:c2:1a:fb:1b:
7a:57:8a:ed:25:a1:25:e9:46:dd:81:8b:41:0c:15:
f7:a2:2b:71:58:37:f2:c3:c5:fc:e1:e9:2b:08:12:
84:cd:49:47:cc:36:51:b4:f7:18:cd:aa:c5:97:89:
cb:89:d3:3f:cb:c9:a9:ec:d3:4b:bd:64:1b:7e:a2:
91:7b:31:43:ab:7f:ca:ba:99:bf:6f:17:48:1d:05:
b8:0d:b5:4f:a4:ea:40:c5:78:43:c6:a5:1e:8f:3e:
3d:60:a5:94:b7:a8:51:f9:2c:f6:54:51:24:39:fb:
f8:dc:ef:f0:2a:d4:96:1b:d4:4a:5b:43:7f:13:b5:
95:ae:8f:74:26:6b:c1:b5:d3:d1:33:64:34:67:65:
53:e4:01:00:31:a1:f2:66:ad:79:ac:0e:50:e8:bc:
64:8c:cc:4d:5b:e6:ea:53:7b:9d:11:46:aa:4d:63:
ce:e7:13:41:bd:3d:db:dc:1e:d7:71:5d:85:59:06:
7c:29:22:8f:13:98:e8:76:40:c9:0a:0f:bf:9c:4f:
f4:a6:e9:12:f4:9e:f3:3f:f9:d9:3c:52:96:3f:27:
a8:58:e0:3d:23:c0:d3:ee:90:f8:b6:76:f0:78:4f:
35:78:c8:6a:cb:23:07:14:16:80:74:f0:57:3f:4c:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:50:2F:DC:26:C4:5A:DE:16:E4:C3:1C:02:ED:E3:96:80:2D:8B:E2
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/pFAv3CbEWt4W5MMcAu3jloAti-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
49:a1:55:6c:fa:ae:8f:b8:ec:1b:54:88:48:e0:42:cf:b0:53:
41:1f:f2:b0:a6:93:a7:6b:ea:13:27:f9:72:1c:11:e5:a5:1e:
bb:01:b3:c8:0d:b0:7f:15:7b:53:21:2a:da:d2:58:18:76:69:
0b:08:26:09:d9:b3:c5:08:2c:ae:42:4f:08:0c:1f:28:ac:5e:
f2:d5:a3:55:74:dc:62:c1:a2:8f:1a:8d:f2:24:a8:e4:87:b5:
2c:a8:4f:69:66:a1:b7:75:9b:0e:7d:32:59:2b:c3:cc:b4:e8:
72:b9:2f:fd:30:70:d2:91:a4:97:10:91:88:8a:90:37:e6:71:
8f:98:4a:f7:b1:0e:5e:d8:57:24:a8:e5:13:76:e5:8f:f2:09:
e2:93:91:fc:ad:73:2e:89:89:e3:9f:c4:48:8b:d7:b8:d2:00:
83:c0:a2:e4:a3:6b:b6:ea:63:59:f3:2c:66:dc:fb:90:a1:aa:
79:5a:82:2c:be:dc:57:34:38:58:1f:45:98:d4:85:f3:ab:db:
27:51:de:ff:99:e0:1d:48:75:31:a8:48:34:14:24:f4:79:dc:
7f:a8:ab:75:d7:fb:c4:93:72:5e:f7:e2:38:5d:6c:55:7f:90:
9e:0f:53:45:9f:f9:37:e0:24:85:98:7b:d5:95:73:6b:35:04:
c6:c6:c8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:48 2024 by rpki-client on console-ams.rpki-client.org