Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/aRKCa28TiCuKAT5S8ngyPoHjinw.roa
File: aRKCa28TiCuKAT5S8ngyPoHjinw.roa (raw, json)
Hash identifier: vniaicstN0VMaAxlOlCPnQIYxoxqPFk/NNUenDw/QXk=
Subject key identifier: 69:12:82:6B:6F:13:88:2B:8A:01:3E:52:F2:78:32:3E:81:E3:8A:7C
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 018BA88F75B1D8259B172B69434506E61E6C
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/aRKCa28TiCuKAT5S8ngyPoHjinw.roa
Signing time: Tue 07 Nov 2023 06:54:15 +0000
ROA not before: Tue 07 Nov 2023 06:54:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 5.83.48.0/21 maxlen: 21
153.92.122.0/23 maxlen: 23
153.92.120.0/23 maxlen: 23
5.83.64.0/19 maxlen: 19
5.83.91.0/24 maxlen: 24
185.67.104.0/23 maxlen: 23
212.85.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:8f:75:b1:d8:25:9b:17:2b:69:43:45:06:e6:1e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Nov 7 06:54:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6912826b6f13882b8a013e52f278323e81e38a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:db:08:a9:03:76:cf:7b:6e:aa:11:bc:b6:
85:63:ab:c3:3f:04:a4:2f:99:ba:dd:17:88:8c:9f:
b8:cb:c3:3e:2b:cb:a8:c6:02:a4:2a:71:30:e4:2b:
5d:0f:73:31:7e:80:cb:e1:f7:9a:d1:2b:7f:7d:ee:
ff:df:2c:71:85:36:68:04:11:23:d7:14:a2:67:be:
a9:87:3d:ef:ee:d8:27:2b:fb:70:03:c6:cc:07:64:
94:99:54:7c:fe:4e:0f:98:c5:31:39:ef:5f:83:97:
fb:f4:4d:8d:95:7c:fc:9d:a2:29:ce:67:f1:7c:32:
38:f7:96:a6:a7:9b:dc:0a:dd:12:ec:b6:05:82:62:
e8:60:d5:c9:5f:3a:3d:92:47:f5:89:ae:e9:87:84:
b6:65:fa:07:f2:08:7f:b4:6c:8a:a0:d2:25:e6:1e:
de:0d:7e:7c:8c:c6:99:8e:ef:42:32:7b:97:50:48:
45:79:8a:94:11:00:1e:0b:7f:c0:08:61:12:3e:4f:
09:e7:42:5a:a4:00:9a:ec:4b:04:87:02:1e:f2:10:
f0:be:6e:3a:a1:ce:49:7a:ac:de:d9:b1:b5:ff:b0:
6a:c6:ea:0e:23:bb:18:75:33:f3:8e:80:a4:19:65:
82:65:35:18:91:d9:ec:c2:e6:9e:0f:e2:c0:ff:47:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:12:82:6B:6F:13:88:2B:8A:01:3E:52:F2:78:32:3E:81:E3:8A:7C
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/aRKCa28TiCuKAT5S8ngyPoHjinw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.48.0/21
5.83.64.0/19
153.92.120.0/22
185.67.104.0/23
212.85.246.0/23
Signature Algorithm: sha256WithRSAEncryption
27:07:80:7a:f2:8e:fb:8f:d1:4c:65:60:d8:91:ed:be:11:0f:
96:ee:8f:e8:cf:b2:f1:28:98:f2:74:1e:d6:87:7c:6d:59:d9:
8a:0a:6d:ad:e2:dd:90:e3:dd:20:fa:6c:b8:04:b5:46:b9:c9:
9f:5f:46:18:2e:5d:18:80:de:2a:f6:f2:2f:e5:7e:2f:42:87:
ca:dc:b4:0b:a0:d9:60:5c:ce:b9:bd:d8:a6:62:e0:22:f2:48:
a5:0e:1d:32:19:f4:1d:55:ce:7b:e6:09:22:ee:ff:db:c7:e3:
a9:58:95:4e:75:66:59:7e:1c:64:68:83:86:d1:38:50:07:9f:
f1:98:78:94:a9:34:65:6b:e1:c1:4b:ed:7f:c1:de:c4:c6:65:
d7:46:f6:90:89:3a:16:d2:0f:10:c4:59:e2:75:be:8e:f2:6e:
6b:9d:ed:6f:e7:ec:58:f2:e7:aa:b1:48:9f:a6:10:15:51:83:
38:f7:7b:c1:b4:37:50:e2:6d:d7:25:f4:96:b5:62:17:15:9b:
53:d5:5c:7c:40:03:96:db:cb:8c:5a:81:58:70:14:0c:ea:bf:
3f:e5:df:29:9c:a9:56:f1:22:3f:c8:9d:f8:11:97:d7:8b:a5:
fe:66:b3:5a:e2:95:47:fb:2b:e4:2d:e5:41:54:66:01:6e:ba:
98:86:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:25 2024 by rpki-client on console-ams.rpki-client.org