Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/pkEZ6fr6FE8bn7YhrYK-zsoWjlQ.roa
File: pkEZ6fr6FE8bn7YhrYK-zsoWjlQ.roa (raw, json)
Hash identifier: qegSBiPicU9nn2LTncUej0gBs198EAnINbC0LExHpgs=
Subject key identifier: A6:41:19:E9:FA:FA:14:4F:1B:9F:B6:21:AD:82:BE:CE:CA:16:8E:54
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018943EB8511A98DBE9959F67A1892B44A37
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/pkEZ6fr6FE8bn7YhrYK-zsoWjlQ.roa
Signing time: Tue 11 Jul 2023 07:47:35 +0000
ROA not before: Tue 11 Jul 2023 07:47:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.75.69.0/24 maxlen: 24
88.218.42.0/24 maxlen: 24
45.151.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 06:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:eb:85:11:a9:8d:be:99:59:f6:7a:18:92:b4:4a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jul 11 07:47:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a64119e9fafa144f1b9fb621ad82bececa168e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:30:48:74:2e:df:65:3f:ac:23:24:01:a6:
78:cc:df:2d:4a:50:aa:0c:c3:c0:a7:41:62:eb:17:
99:f3:27:80:31:7e:e8:92:d6:e1:cc:92:c4:b2:60:
6c:e5:71:d3:48:10:4d:69:9a:24:e0:33:27:6f:4b:
83:0a:ca:dc:07:99:15:3a:bb:0a:78:ae:a0:3c:ec:
6c:e0:0f:ea:e7:8b:05:da:d9:7d:34:1c:a8:7e:13:
1a:d0:53:43:78:fa:50:13:37:06:0b:34:65:ad:98:
b0:b6:e7:57:48:59:70:4b:b0:88:ab:5f:cf:ab:1b:
4a:77:f4:19:c8:a0:02:11:99:b6:5a:e9:97:e5:d0:
ae:10:1c:28:8b:6f:37:d4:f5:73:50:a7:42:df:f3:
df:87:20:27:04:16:92:cf:d4:01:6e:92:9b:a8:5a:
7d:a9:bd:44:33:77:77:fa:5c:3b:0f:26:0f:01:ee:
d5:2e:08:63:dd:25:19:bf:71:0e:46:44:82:12:a5:
1f:6a:3a:89:e1:a2:71:86:55:8c:de:fa:a7:d4:99:
07:b3:4e:88:b0:b3:0b:9b:ad:c1:f1:c4:de:39:28:
47:e5:0a:08:4a:0a:73:d4:67:e3:bf:12:4a:28:1d:
ee:87:1e:b3:16:37:94:b8:1a:e0:d1:4b:ea:cf:c2:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:41:19:E9:FA:FA:14:4F:1B:9F:B6:21:AD:82:BE:CE:CA:16:8E:54
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/pkEZ6fr6FE8bn7YhrYK-zsoWjlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
88.218.42.0/24
103.75.69.0/24
Signature Algorithm: sha256WithRSAEncryption
22:9e:d1:eb:1a:01:11:1d:06:f4:fb:4d:88:69:0f:77:36:89:
27:ac:8f:cf:44:63:1f:83:d5:0c:d2:bb:52:5d:0e:9c:f7:78:
42:be:43:b9:59:be:96:9c:dd:04:5b:41:73:cd:7e:13:cb:e8:
f7:72:ec:b8:ef:25:b6:e2:1d:3a:e6:65:b4:8b:79:0b:c9:19:
fc:96:00:75:ef:c9:b9:3a:e6:3b:e8:2d:4d:f5:11:34:0e:55:
12:36:82:35:0e:0f:0b:19:95:69:da:df:4d:22:33:c7:7e:5b:
13:36:61:cb:2c:23:cc:3d:fc:8a:66:cc:c3:22:32:ec:65:77:
b0:37:59:4a:43:62:b3:75:8c:dd:4f:1d:78:df:1b:a9:c9:7a:
b9:7b:27:f6:66:5d:d0:d1:e5:94:4f:35:83:06:3a:6f:ec:e8:
bf:8b:ef:c2:89:f3:88:fb:70:b4:3e:dc:4b:6b:7a:60:2e:b6:
36:0d:f0:28:83:5d:5a:de:43:ba:56:d9:30:c1:4f:5a:34:fd:
9c:cc:bc:92:ca:8c:9e:81:da:cc:02:bf:19:9c:9e:6f:01:ff:
f1:3e:f4:d3:ba:43:04:3e:78:1e:4b:0b:2b:84:15:02:a8:55:
3f:14:80:f9:43:e3:0c:38:bd:7b:33:82:b2:6f:eb:c2:99:37:
07:d1:b8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org