Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/05j1azbWVbcUruTfu_7reP60cNI.roa
File: 05j1azbWVbcUruTfu_7reP60cNI.roa (raw, json)
Hash identifier: +H2d9d4hveGFoJFb/dppMJRIgO/VdQvCWz+oBsukPz8=
Subject key identifier: D3:98:F5:6B:36:D6:55:B7:14:AE:E4:DF:BB:FE:EB:78:FE:B4:70:D2
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018E50B68E6F5B9E45480D39C6B5AF403528
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/05j1azbWVbcUruTfu_7reP60cNI.roa
Signing time: Mon 18 Mar 2024 08:38:45 +0000
ROA not before: Mon 18 Mar 2024 08:38:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/20 maxlen: 24
5.102.96.0/21 maxlen: 24
5.102.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 10:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:b6:8e:6f:5b:9e:45:48:0d:39:c6:b5:af:40:35:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Mar 18 08:38:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d398f56b36d655b714aee4dfbbfeeb78feb470d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9d:fb:d9:ec:d7:16:47:18:d8:6f:ef:c8:58:
04:af:c0:95:ce:54:d4:c3:e1:c1:d5:23:df:8f:a9:
f4:48:45:ba:c2:00:3f:43:23:72:98:e5:31:11:97:
db:78:ae:d3:a2:76:13:7d:33:bb:25:0e:8c:ad:f9:
ff:45:3f:cc:36:9b:d4:9e:2d:73:c4:a0:92:14:5f:
fe:e8:31:b0:c5:63:26:a7:17:67:6c:ea:cc:17:c8:
69:46:8e:1b:ca:15:f7:27:4e:85:b7:93:c1:4a:82:
d1:47:e4:bf:53:e4:c8:9e:3b:68:ac:90:bf:1b:e3:
2a:61:06:9f:7a:b5:31:c4:7d:b3:b5:b4:eb:fb:b3:
1b:56:4a:52:ff:7e:be:cd:53:0e:3e:14:fa:df:a6:
11:05:d5:d3:05:40:58:7e:24:24:33:38:4d:5e:0a:
43:74:a3:b1:41:1b:43:80:8e:9a:42:37:7f:07:f8:
7e:8c:45:b2:a9:c9:4e:56:e4:2b:d5:f0:f9:01:4d:
25:96:06:97:ff:26:bf:5f:38:e5:e6:c0:3f:7d:a7:
5d:4f:d9:20:d4:1a:ec:73:e1:fd:6f:7f:34:ae:65:
25:fe:43:d9:02:5e:49:00:87:a2:a9:04:fd:db:4a:
59:d2:29:7f:69:3d:a3:68:ef:11:7c:7e:29:df:ba:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:98:F5:6B:36:D6:55:B7:14:AE:E4:DF:BB:FE:EB:78:FE:B4:70:D2
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/05j1azbWVbcUruTfu_7reP60cNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/20
5.102.120.0/22
Signature Algorithm: sha256WithRSAEncryption
34:12:ed:f8:67:4b:8e:ed:57:5c:ea:ee:5d:6c:61:3e:41:a5:
a4:c2:46:1d:82:1c:53:45:f5:33:cc:61:66:a7:2d:47:97:4f:
20:e4:9c:30:b4:31:04:df:1e:7c:f0:8e:77:57:b7:d1:86:b6:
e7:77:43:14:87:11:9a:c3:6c:cc:0b:52:33:6e:ac:b1:3c:e1:
ea:ae:d1:a4:46:22:8d:68:0c:3c:18:b7:fb:46:2a:3a:9a:c8:
a8:dd:2f:4e:19:52:d5:c5:dd:45:aa:2c:e3:37:91:e3:82:ae:
47:b1:7d:19:4c:ec:86:e3:12:58:d6:89:f9:46:60:25:ca:36:
aa:04:fa:84:af:a5:35:5e:24:14:ee:11:be:6a:0c:4a:0d:45:
0b:ac:14:38:d8:73:11:0c:f1:dd:29:e1:2b:fa:95:8a:0d:21:
1e:0f:47:86:91:7c:37:c3:3b:17:06:50:06:01:65:c0:14:09:
2a:6c:66:72:49:82:9a:0e:15:c3:09:bd:04:4e:90:4b:dc:ae:
31:f1:ab:20:68:a2:d6:4b:e3:89:c3:95:87:a6:72:9a:20:2f:
23:8e:47:32:83:a8:f9:77:c6:d3:ab:4d:06:cf:6c:56:3f:26:
b9:a3:86:dc:4f:9d:3f:d4:0e:2e:c7:c5:aa:ff:1f:09:da:0b:
93:4f:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org