Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/9fKmrPkOl5WGfC51aHTydd0mcmE.roa
File: 9fKmrPkOl5WGfC51aHTydd0mcmE.roa (raw, json)
Hash identifier: enoBH6ydhaxSPEuNlY4rCCNQ8CtIeUOzWgFIBGdClSM=
Subject key identifier: F5:F2:A6:AC:F9:0E:97:95:86:7C:2E:75:68:74:F2:75:DD:26:72:61
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018B1E98DA9E5B3F542F87740B7C682DBEFD
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/9fKmrPkOl5WGfC51aHTydd0mcmE.roa
Signing time: Wed 11 Oct 2023 11:56:55 +0000
ROA not before: Wed 11 Oct 2023 11:56:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52468
IP address blocks: 94.125.137.0/24 maxlen: 24
46.29.28.0/24 maxlen: 24
201.77.53.0/24 maxlen: 24
201.77.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:98:da:9e:5b:3f:54:2f:87:74:0b:7c:68:2d:be:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 11 11:56:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5f2a6acf90e9795867c2e756874f275dd267261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d2:fd:ed:75:e7:d1:ca:b0:c1:50:2c:08:58:
65:65:2c:c9:2a:a4:57:e4:8c:14:8b:aa:4c:6c:90:
7a:01:02:fb:00:a2:16:1e:29:57:5e:7a:0c:33:84:
6c:f0:65:74:f3:8d:e3:21:7f:c2:e4:da:69:2f:ad:
48:76:e5:83:eb:53:4f:a0:74:0e:f7:69:68:ed:32:
f9:f1:05:7e:08:96:a9:93:09:b6:e8:86:cc:b2:94:
2c:a6:91:03:bb:f8:50:57:95:fc:7e:5f:c4:63:f0:
76:41:7f:5f:63:df:3d:6b:ef:17:58:ed:5c:a7:70:
2b:6a:0f:a4:cf:cd:8f:95:d8:3a:f9:9d:29:2f:77:
77:82:ec:b4:01:c7:02:e9:54:01:84:d8:4c:54:9d:
c7:7e:a5:37:31:8c:2f:f9:3b:9c:fb:be:e9:2a:40:
53:84:a2:12:60:ff:ed:b6:3f:d2:7e:70:d4:06:fb:
b0:f7:a1:eb:e6:26:29:46:ce:af:9b:b7:85:75:c1:
88:31:7b:ea:35:3d:0b:54:e2:1f:f4:c7:cc:24:bf:
4f:7c:ba:8f:70:0f:cd:57:e7:31:e3:29:06:2f:66:
f0:d0:69:06:f4:5b:64:42:56:56:c2:6c:81:01:11:
91:d3:06:be:d2:33:29:3a:b1:42:4a:a6:58:2d:ae:
0a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F2:A6:AC:F9:0E:97:95:86:7C:2E:75:68:74:F2:75:DD:26:72:61
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/9fKmrPkOl5WGfC51aHTydd0mcmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.28.0/24
94.125.137.0/24
201.77.53.0/24
201.77.55.0/24
Signature Algorithm: sha256WithRSAEncryption
22:31:a4:ef:67:e1:f2:dd:24:07:78:d1:c9:a7:72:23:fe:c6:
9d:f3:05:80:14:6b:7a:ce:87:3e:2a:67:41:8d:49:d8:14:bc:
7c:39:2b:14:4a:7d:be:4e:d5:78:96:0e:6c:48:73:c8:b7:8f:
65:18:a4:a2:b8:f5:6f:a0:51:a3:19:b8:87:de:41:ad:71:8d:
2b:eb:88:69:63:db:b3:35:72:6d:5c:42:eb:a0:16:6e:30:6c:
ac:57:1b:46:33:90:88:09:63:28:e0:58:a7:f4:c0:9e:dc:dd:
d0:d8:99:9c:5c:66:1b:dc:97:f8:8c:e9:47:62:12:9c:8d:72:
fa:d6:93:e1:2f:40:13:90:37:3a:64:8a:91:5c:f0:1d:d3:1c:
09:f9:fb:eb:4e:75:e3:a6:52:94:f7:95:40:95:38:fc:d5:ea:
95:8d:0c:36:8b:89:bf:d0:6c:2d:ca:63:b1:f5:3f:29:d1:95:
ca:87:a6:89:c9:43:6f:41:b3:9a:9e:bf:82:6e:52:d8:38:6d:
22:7a:d6:d8:64:1f:51:85:a2:4c:bb:53:25:97:3e:3d:06:0c:
1e:81:34:6a:78:8d:0e:50:d4:f5:d7:e2:a6:68:e8:ce:7a:fa:
ee:ae:d3:5e:5e:d5:a1:e8:e5:1f:75:a2:20:bd:df:78:7a:66:
75:76:c7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:08 2024 by rpki-client on console-ams.rpki-client.org