Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/4AnALMocneS7xvnRvGXaWrobHE4.roa
File: 4AnALMocneS7xvnRvGXaWrobHE4.roa (raw, json)
Hash identifier: hTY2uzVGhStJtjuyDCMkqaDpbvTREnhC6Mwrs7RL+es=
Subject key identifier: E0:09:C0:2C:CA:1C:9D:E4:BB:C6:F9:D1:BC:65:DA:5A:BA:1B:1C:4E
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 01856DCAE11F32B8B2DE5935C5BED687AC16
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/4AnALMocneS7xvnRvGXaWrobHE4.roa
Signing time: Sun 01 Jan 2023 14:44:50 +0000
ROA not before: Sun 01 Jan 2023 14:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57332
IP address blocks: 5.206.240.0/20 maxlen: 20
45.85.8.0/22 maxlen: 22
159.255.176.0/20 maxlen: 20
159.255.186.0/24 maxlen: 24
159.255.180.0/23 maxlen: 23
159.255.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e1:1f:32:b8:b2:de:59:35:c5:be:d6:87:ac:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: Jan 1 14:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e009c02cca1c9de4bbc6f9d1bc65da5aba1b1c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:bc:1a:35:be:36:73:da:ad:6e:cc:cd:8d:
d2:77:45:14:fe:84:bd:c4:49:26:db:78:7c:c4:5d:
1c:29:d4:97:7f:52:b7:e0:1c:88:91:32:f6:42:34:
e1:d6:a5:c6:f4:25:cc:7c:9e:5d:44:c7:6a:f7:ad:
b0:37:cb:3d:c1:fb:e4:3c:62:97:c9:3d:a8:c5:34:
f9:37:1b:80:6c:d7:50:d2:26:fd:ba:c9:12:43:67:
e3:b2:63:e3:13:40:87:5c:e6:4a:c4:1e:b4:32:57:
f1:7c:8b:56:91:53:a6:90:a4:87:16:85:96:4b:92:
a7:b9:82:67:84:d7:42:a7:02:c0:e9:a0:f0:73:8d:
12:57:3f:8e:68:19:71:08:b4:8c:8d:3c:14:0a:98:
53:c6:ec:e9:15:db:df:2f:07:ae:57:c2:14:f3:a2:
44:07:8e:4f:2c:ec:dc:dc:88:07:a3:5c:8e:7c:5c:
44:a5:a7:6b:f1:de:7e:24:66:eb:6b:b0:5d:1d:90:
81:24:df:72:27:99:7d:e8:0c:c6:d0:0f:50:37:47:
61:f5:56:31:f1:c8:52:38:e5:58:a3:7c:b0:c0:f5:
69:09:b6:83:ba:c7:3c:81:4a:47:53:72:df:75:5e:
58:1f:e7:00:10:20:cf:30:66:18:d7:b1:3c:8d:c8:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:09:C0:2C:CA:1C:9D:E4:BB:C6:F9:D1:BC:65:DA:5A:BA:1B:1C:4E
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/4AnALMocneS7xvnRvGXaWrobHE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.206.240.0/20
45.85.8.0/22
159.255.176.0/20
Signature Algorithm: sha256WithRSAEncryption
94:ad:3f:f4:19:90:cd:87:e2:26:7a:53:52:71:fa:53:cc:60:
e4:f4:af:23:44:32:1c:8d:cf:ae:2b:14:11:28:c4:f8:b9:20:
be:3c:8b:54:52:dc:89:d3:92:99:38:ba:50:71:20:e3:a4:84:
23:0d:81:de:4f:ff:13:d1:d5:89:30:90:f9:8f:52:97:28:39:
6e:51:36:fc:4d:af:e4:90:64:89:bc:3d:5f:3e:ef:9d:39:70:
ef:1e:11:f1:11:ed:67:9e:e6:6f:7c:2b:88:f4:6c:e7:38:d5:
65:4e:ac:9f:c8:0a:34:bf:0b:a7:cf:d3:5c:f3:71:71:e9:bf:
95:d4:45:82:62:ea:36:a4:a9:98:2d:fb:62:11:65:0a:fa:6b:
63:32:a4:ec:d2:aa:33:c2:24:1d:0c:de:15:44:32:9a:00:e4:
07:8d:70:1e:90:77:f5:23:0a:87:a8:75:2d:d7:b3:ca:51:4d:
02:dd:c6:bb:13:57:bd:c2:cb:2c:83:a1:9b:3f:5d:63:10:c0:
d0:b3:77:53:23:86:1c:1a:f8:a9:6a:29:c9:8d:b2:ea:49:07:
74:85:f8:6b:23:ee:ee:87:6f:0d:db:9f:bf:87:7b:eb:fc:64:
66:b9:96:ec:99:8b:b7:69:69:34:5a:7a:0e:9a:c3:4a:65:9f:
c0:ee:28:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:52 2024 by rpki-client on console-ams.rpki-client.org