Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/1-W6mmzP2WE5sldkTVE7fRChWDfQ.roa
File: 1-W6mmzP2WE5sldkTVE7fRChWDfQ.roa (raw, json)
Hash identifier: u68ySlkByieCIs5BYrd2M1J2f5kqQ/8aMN7xaHJqH1A=
Subject key identifier: F9:6E:A6:9B:33:F6:58:4E:6C:95:D9:13:54:4E:DF:44:28:56:0D:F4
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018CBEE5C50C78FA293C812F136DD931C287
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/1-W6mmzP2WE5sldkTVE7fRChWDfQ.roa
Signing time: Sun 31 Dec 2023 08:02:58 +0000
ROA not before: Sun 31 Dec 2023 08:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 5.102.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:be:e5:c5:0c:78:fa:29:3c:81:2f:13:6d:d9:31:c2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Dec 31 08:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f96ea69b33f6584e6c95d913544edf4428560df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:45:f0:65:ac:d5:c9:92:44:31:5c:4c:79:
50:22:eb:db:ca:60:18:53:ae:2e:5a:3e:0a:ab:2e:
09:d3:e8:c4:68:f4:30:4c:3b:10:67:03:ba:f6:1f:
1e:17:a9:e1:2a:b4:b4:41:a9:70:e7:e9:9d:c8:d9:
69:2c:e5:e8:73:8c:0c:a8:39:60:57:28:2a:1a:b1:
aa:44:6e:bb:01:c8:e7:e3:88:8e:1f:0c:23:eb:80:
8f:71:54:ae:7e:cc:5b:2a:d1:eb:be:3b:66:dc:f8:
d9:68:ec:2b:d2:54:34:62:4c:d5:d7:00:32:38:a8:
b4:45:79:8c:4b:e6:fd:31:13:4e:4e:6c:d4:d8:c6:
d9:ad:2c:77:aa:7a:45:b2:e4:0e:3b:7f:24:70:af:
42:c2:cd:c5:11:78:48:87:f6:e4:15:1c:bd:1a:98:
f5:c9:75:04:12:5e:49:0b:71:93:b0:8e:c8:d5:d1:
3f:09:00:b0:1b:e3:e5:51:25:95:b6:06:0c:22:31:
5a:61:d2:62:1a:75:61:03:6c:2b:a0:a8:0a:d2:af:
36:f6:4d:61:b6:6e:c4:23:1f:f3:e2:00:a6:a2:4b:
19:c5:7d:ec:b7:fb:7e:61:34:16:b2:0b:a5:56:8d:
5e:f3:66:5a:c9:d4:77:69:2c:d3:b7:4e:ae:93:05:
0a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6E:A6:9B:33:F6:58:4E:6C:95:D9:13:54:4E:DF:44:28:56:0D:F4
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/1-W6mmzP2WE5sldkTVE7fRChWDfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.124.0/22
Signature Algorithm: sha256WithRSAEncryption
10:91:15:0a:f6:33:a9:50:cd:c4:9a:51:da:91:eb:45:0e:4e:
f6:a9:17:f9:81:fb:f7:06:12:03:08:52:3e:a7:a0:e3:86:3f:
52:1c:ab:06:86:6c:85:3c:74:fa:c8:06:27:00:a9:5d:45:86:
5d:4f:c4:00:75:32:2c:eb:09:a2:71:64:c6:19:af:68:ee:40:
6a:4f:bc:4d:18:45:4e:3c:2a:4a:27:ea:0d:b2:6d:34:54:28:
73:f6:2a:01:e2:96:7c:eb:06:56:78:d2:f1:df:e2:8e:d2:6c:
50:7f:73:41:64:f3:65:a8:cc:97:c0:0d:49:ab:07:33:d4:df:
86:15:69:1b:01:3c:6f:64:58:3c:80:4d:65:a2:f4:93:74:19:
b0:26:ed:97:a6:eb:3d:17:38:b0:09:79:e5:71:9e:cf:b9:30:
24:1e:69:31:c3:98:9a:ec:9f:e8:cf:d0:d6:04:5d:d6:1e:25:
39:4b:08:b6:ec:d7:9d:3a:66:8d:81:f5:5d:71:0d:c6:37:e5:
db:d0:1c:da:13:de:86:f5:d0:93:88:41:d9:79:35:f5:4a:31:
15:b6:05:78:36:e1:e4:50:58:f6:f9:91:80:d8:27:5b:91:4c:
f2:fe:77:e1:29:52:93:c6:b2:91:cd:78:61:02:f1:d8:70:87:
ca:c4:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org