Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/Xfr1Wz69FVMJ9XrrYkkIbaTRaD4.roa
File: Xfr1Wz69FVMJ9XrrYkkIbaTRaD4.roa (raw, json)
Hash identifier: OZWT5mhYJRf/4hxR4tlckjzG51mxqBIuzfVjmf8vH9c=
Subject key identifier: 5D:FA:F5:5B:3E:BD:15:53:09:F5:7A:EB:62:49:08:6D:A4:D1:68:3E
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 018CC3B7130DAAE88BC14FC57091B839B444
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/Xfr1Wz69FVMJ9XrrYkkIbaTRaD4.roa
Signing time: Mon 01 Jan 2024 06:30:04 +0000
ROA not before: Mon 01 Jan 2024 06:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58233
IP address blocks: 5.56.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jul 2024 10:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:13:0d:aa:e8:8b:c1:4f:c5:70:91:b8:39:b4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Jan 1 06:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dfaf55b3ebd155309f57aeb6249086da4d1683e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:9a:1a:f3:0f:4b:5a:6c:fa:72:b6:a4:a2:
64:9c:f1:b0:53:8f:2e:c7:ca:37:21:fb:ae:80:14:
80:06:cf:b0:40:9a:7b:b7:38:e3:c2:40:3d:9f:7d:
2e:77:b0:02:7a:b6:4a:0a:4e:97:34:81:76:a7:68:
6b:ec:e4:79:47:e8:7f:6b:73:21:68:86:bb:ad:24:
b0:23:1c:64:57:61:6c:ea:99:97:89:19:d5:30:64:
5d:53:47:15:a1:25:e6:c1:ec:e2:ea:54:80:08:e3:
02:c0:9b:dd:35:e4:e0:48:a4:a9:42:05:05:f9:76:
87:8d:15:15:9a:70:e8:af:9d:ea:21:8b:e9:56:77:
72:55:c0:39:95:f4:56:60:ab:22:f7:13:aa:80:eb:
88:df:3f:6f:e6:04:9a:ab:0e:79:63:99:1e:53:15:
1b:aa:3e:c8:07:4b:0c:8e:45:76:17:2f:33:7a:ed:
58:f3:7a:0f:dd:10:8c:0d:4b:b0:78:72:c2:cf:c7:
f1:26:68:8e:eb:1d:40:49:bd:19:34:db:60:de:1b:
39:99:26:c6:00:cd:45:e1:3a:40:b8:23:5b:b3:1e:
65:ba:f4:d7:ea:7a:af:8b:3c:9d:bc:e9:18:24:f6:
2a:11:fb:60:b5:1a:82:b6:b9:7d:36:68:32:b6:c9:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FA:F5:5B:3E:BD:15:53:09:F5:7A:EB:62:49:08:6D:A4:D1:68:3E
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/Xfr1Wz69FVMJ9XrrYkkIbaTRaD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.164.0/22
Signature Algorithm: sha256WithRSAEncryption
23:9d:08:96:df:2e:de:5f:64:1b:32:4a:c6:18:41:a0:db:46:
10:72:7c:8e:8f:2f:fa:be:ba:c7:a4:ba:2b:fa:86:38:0d:af:
b9:14:55:9a:1b:7d:88:84:15:97:7d:84:34:b5:ae:e6:a3:a5:
51:6a:1d:88:5b:e9:66:f4:b8:9a:bc:48:4e:ba:57:4e:79:4a:
e1:ba:6b:67:a9:86:07:6a:67:c5:2b:3f:b6:b3:27:46:ce:d8:
f7:4f:3d:ae:a2:4c:39:2b:47:79:c5:fa:0c:15:c9:d9:96:a3:
5b:f2:17:a5:2d:e9:62:9e:ad:d2:d2:03:5a:6c:91:89:be:4d:
f6:f7:78:50:18:02:ee:85:dc:06:de:46:81:ad:72:99:39:92:
ca:0f:72:42:b0:2c:1b:f5:49:22:bd:d9:bc:12:58:25:61:1f:
ee:22:21:c3:b7:c6:a4:7e:16:36:5f:c4:fb:e0:46:91:40:dd:
9d:cc:9a:c0:6d:f0:97:c3:b2:be:0e:2c:98:ff:51:18:29:7e:
10:8d:a1:02:bb:d2:43:6f:fe:70:98:61:af:ca:28:4d:9f:3f:
c6:98:27:c2:17:cd:e2:2b:e4:eb:ec:58:a8:82:24:07:0b:a2:
24:6d:d3:09:04:d9:0c:e7:8c:94:58:4e:2b:f6:1e:90:48:f1:
0e:bc:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:43 2025 by rpki-client