Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/v0WGyMn0OSpVcRC7yQdIPL9QlYw.roa
File: v0WGyMn0OSpVcRC7yQdIPL9QlYw.roa (raw, json)
Hash identifier: s2BbiaROL32unm7llvaW4A20Th92yVTKrDVn/xX5fNw=
Subject key identifier: BF:45:86:C8:C9:F4:39:2A:55:71:10:BB:C9:07:48:3C:BF:50:95:8C
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 01856C8A62C5743BD374265DBEEDE9E8CF0B
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/v0WGyMn0OSpVcRC7yQdIPL9QlYw.roa
Signing time: Sun 01 Jan 2023 08:54:46 +0000
ROA not before: Sun 01 Jan 2023 08:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201121
IP address blocks: 5.158.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:62:c5:74:3b:d3:74:26:5d:be:ed:e9:e8:cf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Jan 1 08:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf4586c8c9f4392a557110bbc907483cbf50958c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b1:31:8c:83:6f:cb:2c:37:a0:ed:88:6c:d0:
72:26:71:42:5b:5b:9f:c6:ed:24:f3:20:a5:db:bb:
1d:33:66:9c:f2:27:70:2d:67:23:7a:e9:83:32:a0:
21:2a:5f:f2:ca:ea:c3:66:a7:be:e7:18:10:1b:29:
28:c8:72:80:b7:ae:4f:cb:c8:1e:6a:85:2a:9e:22:
32:df:2b:77:ad:86:cb:a5:8b:2d:d2:5d:b3:2e:63:
3e:ab:55:ab:39:7a:45:0b:c8:e0:fb:94:94:71:a0:
f9:d5:1a:a6:c6:cc:3f:86:22:90:57:57:d5:ee:85:
0e:55:65:37:ba:16:bc:cb:86:7a:72:63:27:14:6e:
0d:92:ff:b2:c0:df:44:fd:fc:33:c6:ad:b4:06:51:
22:e2:3e:6c:00:ce:66:fc:03:58:2c:a0:04:5a:3d:
fd:a5:a0:18:de:21:d2:60:99:4d:01:51:ff:13:f0:
79:39:8c:66:0a:67:e8:62:21:c9:88:41:96:86:6b:
cb:49:0c:3c:82:77:77:83:42:d4:ca:a1:2f:6d:38:
37:24:e3:7f:61:d2:f9:0d:fd:13:96:07:d1:d0:b5:
ba:cc:3a:92:4b:a7:85:e0:8d:6b:99:b0:e6:85:b5:
6e:df:9f:ff:19:b4:dd:83:ec:3e:3d:a8:ee:d8:65:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:45:86:C8:C9:F4:39:2A:55:71:10:BB:C9:07:48:3C:BF:50:95:8C
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/v0WGyMn0OSpVcRC7yQdIPL9QlYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.87.0/24
Signature Algorithm: sha256WithRSAEncryption
09:7e:6e:ce:54:00:e5:c8:49:67:a7:c4:a5:a3:95:64:8c:4a:
4a:02:10:14:3e:3a:e1:92:9d:ba:9b:df:cb:43:8b:90:8a:7a:
69:c7:87:d1:57:4b:c1:f3:7a:a0:04:97:25:1d:3f:73:ef:24:
74:ec:39:a3:78:d0:fc:bc:8c:6e:51:6a:00:9a:3a:99:05:2b:
c8:d9:60:0c:8e:27:66:4f:8f:07:7b:a9:52:44:6b:83:85:1f:
ea:40:22:61:d9:d1:4b:b4:27:4c:05:a4:2b:cf:5a:dc:ed:94:
c8:46:28:f5:30:8d:9a:0b:28:13:13:a4:7b:fe:3f:b4:ee:cc:
ba:16:7a:7c:15:1d:0c:34:27:eb:00:67:76:55:33:a5:95:4e:
60:0e:e9:30:ae:06:40:00:70:a8:1f:59:93:2e:2b:4a:56:e6:
73:eb:6a:2c:5a:c8:47:88:0c:25:61:c9:fd:f6:99:e5:93:c9:
52:e2:4a:9f:de:39:46:cb:6f:7b:a9:e8:94:92:c4:65:f4:e2:
f5:7c:58:ab:87:2b:4b:7d:e6:25:f8:a8:ca:56:81:11:fa:e5:
ab:08:37:2c:e1:e9:02:23:ef:c2:89:5c:1b:dc:80:4c:a3:3f:
6e:e9:20:a7:7c:08:fc:2d:cb:0e:9d:1d:1a:fd:54:05:d6:eb:
c2:b4:b0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:29 2024 by rpki-client on console-fra.rpki-client.org