Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/1-51RLKM9WyK3ww36Oehkt-jyO1Q.roa
File: 1-51RLKM9WyK3ww36Oehkt-jyO1Q.roa (raw, json)
Hash identifier: gbOPzwuF+SohdxFY5Hv1Fm+86XIpitXqaORDPm1xs3A=
Subject key identifier: FB:9D:51:2C:A3:3D:5B:22:B7:C3:0D:FA:39:E8:64:B7:E8:F2:3B:54
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 018D52B350731C9A00FE539B17BD4759AF19
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/1-51RLKM9WyK3ww36Oehkt-jyO1Q.roa
Signing time: Mon 29 Jan 2024 00:51:39 +0000
ROA not before: Mon 29 Jan 2024 00:51:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59422
IP address blocks: 5.149.96.0/24 maxlen: 24
5.149.107.0/24 maxlen: 24
5.149.110.0/24 maxlen: 24
2a12:2340::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 10 Mar 2024 15:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:52:b3:50:73:1c:9a:00:fe:53:9b:17:bd:47:59:af:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Jan 29 00:51:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb9d512ca33d5b22b7c30dfa39e864b7e8f23b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:aa:be:89:d2:e7:57:d6:12:a8:e5:d8:59:
21:b8:76:55:16:d7:6f:f4:d1:f1:6a:a8:42:19:f7:
6e:a7:19:46:92:66:b7:01:c0:24:ab:a9:4f:2d:2b:
95:2e:65:90:23:e4:45:45:f8:5b:2f:9f:be:6e:90:
a4:c9:a9:c3:fc:b0:96:34:c9:cd:ed:83:63:8e:f6:
19:6f:11:2f:fc:87:71:e1:5a:19:39:25:9c:e2:a5:
9c:03:6c:76:55:3a:ec:ed:5e:4e:fa:13:61:eb:1c:
e0:f4:be:8c:7f:1b:79:0c:40:ce:1c:37:6f:f1:db:
68:91:76:e4:96:50:f6:a5:b6:17:25:3f:2d:94:dd:
7d:af:b6:b4:e9:b1:8d:a7:c0:aa:95:11:b5:69:9c:
a0:9c:d0:9e:02:36:91:02:6a:be:d3:da:3a:41:32:
b9:ce:ec:37:f7:69:db:5f:59:79:71:f7:b3:1a:b4:
f9:48:ec:e1:da:94:04:51:1e:00:15:f0:82:4c:92:
cb:72:fd:54:bc:71:f0:5c:2c:49:19:3c:b7:33:49:
61:08:ee:fe:4c:21:ce:96:f9:13:21:13:94:8b:90:
71:4e:7f:8f:89:75:aa:d2:02:84:34:18:91:45:3e:
8e:fe:9e:42:0c:a4:dc:0e:0e:bf:7a:f6:b0:e5:4c:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9D:51:2C:A3:3D:5B:22:B7:C3:0D:FA:39:E8:64:B7:E8:F2:3B:54
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/1-51RLKM9WyK3ww36Oehkt-jyO1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.96.0/24
5.149.107.0/24
5.149.110.0/24
IPv6:
2a12:2340::/48
Signature Algorithm: sha256WithRSAEncryption
2f:20:09:52:81:c8:e0:f2:8a:bd:e0:d8:cc:b8:9e:72:cc:0e:
66:69:7c:d4:82:0c:c4:20:3e:e9:5d:41:78:c0:d4:3b:05:a7:
1b:53:9e:59:c4:4f:b7:46:e1:27:a7:18:8d:9b:c7:ac:cf:cb:
02:cd:1a:30:46:7e:12:63:4f:72:cc:eb:4e:7e:ba:aa:0a:83:
72:2e:56:92:b8:74:b5:10:2c:66:b4:5a:01:48:9b:8b:d0:96:
b8:6f:36:a6:f9:66:5d:90:f9:6a:79:77:54:e9:d4:18:f0:bd:
29:62:42:45:b0:f1:35:d6:11:cc:0d:24:26:b7:a5:e6:ad:03:
91:f4:55:42:7c:1b:28:06:57:a7:2f:3b:f0:24:27:2b:92:8f:
98:af:4e:ee:20:2d:bf:af:7a:fa:40:f1:7a:73:6c:b5:a0:ed:
7c:ae:76:6d:31:88:db:32:86:72:c4:1b:2e:2a:79:e1:61:60:
c3:8e:30:67:03:18:80:04:95:57:df:99:a5:86:72:ef:1a:66:
99:6b:b4:53:08:c1:24:1f:8a:2e:c2:eb:68:70:1a:26:35:52:
bd:11:00:67:97:a5:31:6f:33:e0:53:3b:7b:4a:df:43:ba:94:
16:4f:82:4b:5e:0a:f6:30:ab:6f:00:76:c1:89:5a:b6:75:83:
5f:20:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:20 2024 by rpki-client on console-fra.rpki-client.org