Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/HJjsJtgEV8_ucLPaXh9MX8sQMAo.roa
File: HJjsJtgEV8_ucLPaXh9MX8sQMAo.roa (raw, json)
Hash identifier: n1le9orbEDf8wCKhwIHJ5A0tdSbUq1Gt6x7vuGquFXQ=
Subject key identifier: 1C:98:EC:26:D8:04:57:CF:EE:70:B3:DA:5E:1F:4C:5F:CB:10:30:0A
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 01878EFFCC31636FC25BAC934260787045C3
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/HJjsJtgEV8_ucLPaXh9MX8sQMAo.roa
Signing time: Mon 17 Apr 2023 11:35:41 +0000
ROA not before: Mon 17 Apr 2023 11:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59422
IP address blocks: 5.149.96.0/24 maxlen: 24
5.149.110.0/24 maxlen: 24
5.149.107.0/24 maxlen: 24
2a12:2340::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:ff:cc:31:63:6f:c2:5b:ac:93:42:60:78:70:45:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Apr 17 11:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c98ec26d80457cfee70b3da5e1f4c5fcb10300a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:e4:44:c4:d5:0a:fb:a5:7b:3c:42:5f:36:
6d:1d:a9:7f:b7:23:59:06:a5:11:d0:a6:9d:61:2a:
4f:70:f5:41:87:f1:2f:33:fa:58:5f:35:32:2c:7b:
ee:10:cb:02:88:da:6b:65:93:14:df:54:c7:c1:54:
85:d6:d8:48:43:28:d3:66:21:6d:64:91:c6:71:3d:
86:11:1e:af:8a:c2:9e:be:56:a7:da:09:59:dd:4b:
a4:93:8d:01:5e:d5:f6:80:29:35:bd:43:ae:df:70:
9a:7a:f9:12:8b:94:27:3f:4d:38:c0:fb:2d:e9:02:
94:ad:04:47:80:39:c4:49:65:3f:50:7d:45:c4:f3:
ff:01:bc:21:9e:b6:90:3f:07:51:d8:3b:de:a2:4e:
71:6c:e8:b5:5b:f5:e0:d1:64:89:62:74:a7:1a:4f:
18:a1:2e:86:e8:c5:03:10:2f:14:a4:48:c5:b6:b6:
81:5b:a6:d3:1d:5f:a8:5f:7a:12:fe:11:00:31:93:
a8:23:f6:f2:57:7a:c2:cd:2e:1e:3c:9d:a6:c4:f1:
6b:9a:97:b3:ae:37:aa:4c:0a:9d:41:a0:20:af:66:
35:f7:2e:bb:dc:68:fb:d8:90:c0:7f:c5:43:99:4d:
17:75:7b:f8:85:f5:c7:ce:a9:8a:35:09:1f:cd:0a:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:98:EC:26:D8:04:57:CF:EE:70:B3:DA:5E:1F:4C:5F:CB:10:30:0A
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/HJjsJtgEV8_ucLPaXh9MX8sQMAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.96.0/24
5.149.107.0/24
5.149.110.0/24
IPv6:
2a12:2340::/48
Signature Algorithm: sha256WithRSAEncryption
aa:e4:f3:9b:0e:0a:fd:80:4a:55:16:f3:69:97:ce:de:57:c7:
06:f0:98:d7:32:34:01:cd:cd:d7:3b:8a:d8:95:cb:ad:33:dd:
69:79:f7:4e:51:72:57:9d:c4:db:30:39:ce:be:b1:46:68:05:
a3:18:57:b1:17:bd:75:82:58:63:6a:1a:3b:05:14:c6:f1:b1:
8f:f9:42:3d:33:e0:c4:d2:f6:7a:87:5d:d8:d7:89:04:ae:f6:
09:3d:c2:01:da:37:c2:7e:c9:64:87:0f:25:cd:83:25:8b:c1:
3f:89:24:15:0e:45:fb:49:95:5a:e8:fd:2f:90:15:3d:9f:e6:
c4:f5:c3:91:31:e2:37:73:ef:ac:e8:32:ce:20:7c:6a:9e:31:
2c:aa:ef:21:19:d5:3d:81:b3:65:f0:7b:24:70:ae:8d:7e:e1:
54:37:59:6d:f2:d5:6d:e1:79:ea:e1:46:8c:17:9a:e5:46:df:
b2:5a:3a:fe:32:10:36:db:3c:bb:bf:d3:16:f5:2a:00:cd:20:
ad:c1:ac:a5:a8:13:df:c4:61:eb:e7:61:44:99:db:2e:6a:cd:
a6:ce:dc:04:b0:6a:17:0d:bb:68:31:74:2c:f6:ae:c3:54:a1:
7e:aa:f2:9c:e4:e8:64:c0:22:0b:97:40:dd:d2:36:b9:59:6e:
db:15:15:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:00 2024 by rpki-client on console-ams.rpki-client.org