Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/4f6OSqTjVfv1TBbsRNZwqgq0fqM.roa
File: 4f6OSqTjVfv1TBbsRNZwqgq0fqM.roa (raw, json)
Hash identifier: V2fT16gZh4O4ZRTd7CZ8XcAssZq8n10Z9KgUO4b1SDg=
Subject key identifier: E1:FE:8E:4A:A4:E3:55:FB:F5:4C:16:EC:44:D6:70:AA:0A:B4:7E:A3
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01856F94C6451374FBA559AA970E537F9C82
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/4f6OSqTjVfv1TBbsRNZwqgq0fqM.roa
Signing time: Sun 01 Jan 2023 23:04:59 +0000
ROA not before: Sun 01 Jan 2023 23:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56466
IP address blocks: 5.200.64.0/19 maxlen: 24
5.200.80.0/20 maxlen: 20
89.235.77.0/24 maxlen: 24
31.24.200.0/21 maxlen: 21
86.109.39.0/24 maxlen: 24
87.247.179.0/24 maxlen: 24
86.109.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 11:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:c6:45:13:74:fb:a5:59:aa:97:0e:53:7f:9c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 23:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1fe8e4aa4e355fbf54c16ec44d670aa0ab47ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:b4:9d:30:e3:c0:cb:84:32:fc:28:eb:62:
2c:26:0e:96:93:57:83:c7:1f:ea:cc:69:95:7c:cb:
fe:44:23:eb:75:c6:64:d0:31:00:b9:09:fa:e3:7d:
b2:e2:fc:40:07:6e:d8:90:58:08:25:18:f8:36:c0:
c7:46:a8:83:5e:a2:c5:5e:c8:b9:ac:f6:9c:20:b3:
1c:d1:01:9f:0f:54:ee:28:97:40:ac:78:5b:9b:a5:
8c:d4:98:fe:ef:54:b8:44:43:a5:e0:3e:ad:c4:77:
6e:60:ca:56:14:d1:e8:56:f8:29:fb:b6:b2:e2:81:
57:38:f3:41:88:1c:a9:3b:7c:3d:4c:5e:17:e0:08:
8a:be:c2:ba:10:de:7d:bb:37:ef:c0:1c:ec:d8:5b:
01:4d:c2:1d:1d:70:11:f4:53:b2:9e:4c:4b:96:ae:
c3:60:c0:0e:40:d5:69:9c:cc:ad:33:83:fd:d2:b4:
2c:f5:e6:79:7e:27:fb:ec:df:5a:bc:42:a3:df:2a:
96:19:00:40:18:ec:b7:60:96:55:54:1f:24:d1:87:
c1:1f:f7:69:8f:15:82:2a:93:e3:b1:7b:65:f4:be:
26:f4:5d:4f:5a:14:40:b0:30:39:69:2e:6c:f1:1c:
b4:4e:e1:3f:f8:1d:cf:3e:a3:11:fb:99:23:7b:fb:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FE:8E:4A:A4:E3:55:FB:F5:4C:16:EC:44:D6:70:AA:0A:B4:7E:A3
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/4f6OSqTjVfv1TBbsRNZwqgq0fqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.200.64.0/19
31.24.200.0/21
86.109.39.0/24
86.109.59.0/24
87.247.179.0/24
89.235.77.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7d:76:39:15:6a:2e:71:ea:c8:37:67:9b:3d:11:d6:ba:09:
09:62:fd:e5:c4:34:fa:b3:4b:72:41:ef:0f:d2:93:9a:5c:47:
39:69:8c:d9:c5:d7:f9:9d:55:81:04:03:10:b0:2f:50:eb:75:
4b:d8:2a:47:d5:0a:a2:a3:4c:a0:17:2b:78:d6:3d:1d:96:df:
66:60:da:1d:cc:e3:00:27:5c:3c:c6:9e:e0:70:d9:76:1e:a1:
07:9b:d8:23:2c:2f:28:a9:4c:2e:b1:0f:57:2a:b9:4e:18:d4:
2e:69:f1:0e:6f:c9:08:9d:54:07:e0:15:01:f9:34:62:5a:a8:
5b:61:53:cb:ba:23:a5:a9:1e:e5:91:08:58:90:a4:15:d3:17:
60:7c:a2:74:30:14:29:47:75:9e:7d:b9:ae:6e:ec:75:b2:7c:
b6:75:ac:50:0d:f8:09:fe:fd:8b:6f:fe:ec:b9:e1:d8:26:9f:
ad:8c:f2:86:3e:1c:ba:99:1b:5d:b9:2f:c6:6b:27:43:e4:71:
23:a0:6e:85:23:1c:7e:ca:fd:0b:53:95:81:35:f6:ac:64:47:
28:eb:5f:5c:74:c0:7b:e9:ee:f2:60:4e:36:6a:d3:26:b8:c6:
42:9a:63:75:6f:07:40:3c:bc:ba:bd:20:a9:64:91:6f:df:b8:
9c:de:20:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org