Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/5L_EALdadhEyfW9ON063FI7Rliw.roa
File: 5L_EALdadhEyfW9ON063FI7Rliw.roa (raw, json)
Hash identifier: aYPYr3Ieaw4cFODzOAGriZJV5gSkqye6j33iarLX2bI=
Subject key identifier: E4:BF:C4:00:B7:5A:76:11:32:7D:6F:4E:37:4E:B7:14:8E:D1:96:2C
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018D2741F9D173632BF1D283401671DA417E
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/5L_EALdadhEyfW9ON063FI7Rliw.roa
Signing time: Sat 20 Jan 2024 14:24:11 +0000
ROA not before: Sat 20 Jan 2024 14:24:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211020
IP address blocks: 5.201.162.0/24 maxlen: 24
89.37.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 11:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:27:41:f9:d1:73:63:2b:f1:d2:83:40:16:71:da:41:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 20 14:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4bfc400b75a7611327d6f4e374eb7148ed1962c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:b4:3c:52:47:a5:6f:37:c3:d1:12:ee:4b:
35:69:30:af:75:cb:9b:e4:0c:e0:38:77:f0:7d:8f:
9a:27:ee:4d:94:d2:5b:da:34:67:08:98:09:35:51:
a0:56:36:20:17:b4:c2:f6:ba:34:41:d7:90:40:6a:
48:e5:5f:11:c1:cd:0f:ae:c4:40:fd:83:d0:87:36:
89:df:5a:8b:e2:e1:01:88:fd:fb:b9:67:69:fb:d7:
93:9e:9c:1b:cf:b7:5a:fc:a9:04:90:19:84:6d:28:
41:ba:b7:35:ab:cd:fa:35:16:5d:2a:56:74:d9:2d:
5a:7f:33:1c:c0:f6:f5:ff:c1:e9:db:7f:c2:9e:93:
70:58:9a:ea:14:c5:34:ec:82:ee:5b:5b:68:24:59:
e6:2a:f4:a8:52:ad:b3:81:d8:7c:53:e6:e5:30:4b:
45:8a:52:38:40:f2:c1:32:cf:a6:20:40:b7:60:92:
ad:e5:1c:3e:2d:9a:8c:15:96:29:eb:b7:82:9d:4b:
36:a6:74:7e:26:32:18:b3:07:26:a4:6a:a3:7e:1d:
3d:95:df:2c:9f:fc:aa:3c:f5:ab:09:33:ec:5d:29:
52:5e:a5:2b:eb:27:d7:7a:53:1c:8e:c3:69:f1:e1:
5d:a3:71:c9:72:dc:1e:3f:b2:01:4a:64:2f:e7:09:
9a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BF:C4:00:B7:5A:76:11:32:7D:6F:4E:37:4E:B7:14:8E:D1:96:2C
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/5L_EALdadhEyfW9ON063FI7Rliw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.162.0/24
89.37.12.0/24
Signature Algorithm: sha256WithRSAEncryption
48:33:35:1d:81:cd:df:2b:95:c5:c1:a7:2b:c9:70:6b:c2:63:
fb:9b:dd:31:11:ff:75:5f:de:2e:96:e1:09:4a:8d:9b:07:b9:
87:fc:a0:9b:6a:02:5e:19:7e:b8:c3:f7:8a:4a:f2:02:70:0d:
8d:6b:97:a9:23:a8:eb:05:5f:7b:de:ac:f6:b7:bb:15:32:e9:
d7:0c:d8:f5:0d:65:f2:14:6c:1e:23:10:b3:88:73:f0:96:58:
1f:ef:4d:2f:e4:a6:f7:e7:e9:1b:f0:dd:6e:77:bd:7e:6a:65:
26:c9:fe:b7:f0:73:52:79:3f:9d:b2:e0:e0:b7:44:a7:32:e6:
e7:ec:9c:95:63:ab:05:95:f2:e5:ce:3f:92:6f:2a:bd:99:3a:
c5:2b:de:1f:76:49:54:01:0c:d1:59:b3:22:7e:32:35:7e:06:
4f:b4:c3:6d:24:57:fd:5f:de:06:fe:18:e8:dd:c9:b4:5d:1f:
3d:54:7b:4d:4b:46:31:d8:3e:59:e6:c0:45:df:67:a5:27:c4:
37:37:40:00:76:94:2a:e9:f6:42:c0:fd:44:78:34:99:8f:9c:
f5:24:cb:46:f9:01:f0:f2:f5:1f:29:b1:be:16:11:d1:2a:0c:
92:a2:af:79:17:f8:20:d6:24:b8:ed:71:7a:b5:1b:d3:1e:34:
79:59:a9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:19 2024 by rpki-client on console-ams.rpki-client.org