Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ER8zWo1tghQpv-HxMP14YnoBDCE.roa
File: ER8zWo1tghQpv-HxMP14YnoBDCE.roa (raw, json)
Hash identifier: hjE/A86pBNvhRvTs9MfDsmtDCuExi4+04VBi3TdR2NM=
Subject key identifier: 11:1F:33:5A:8D:6D:82:14:29:BF:E1:F1:30:FD:78:62:7A:01:0C:21
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018C1B02F6050753E4BF079C1BF38296DF70
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ER8zWo1tghQpv-HxMP14YnoBDCE.roa
Signing time: Wed 29 Nov 2023 12:17:08 +0000
ROA not before: Wed 29 Nov 2023 12:17:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 5.102.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:02:f6:05:07:53:e4:bf:07:9c:1b:f3:82:96:df:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 29 12:17:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=111f335a8d6d821429bfe1f130fd78627a010c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:32:9f:47:8a:20:dd:21:15:91:dd:68:51:
78:98:63:93:1e:e1:aa:f9:69:b5:1b:d9:9d:8e:07:
04:47:bf:93:97:1e:be:02:52:a1:95:92:9c:e7:35:
20:72:7b:03:b8:20:7d:13:98:9c:b3:34:15:f2:9c:
42:10:a9:b2:da:bf:8c:dd:c8:cf:47:de:db:82:9b:
ed:65:bf:e8:a8:59:7e:dc:61:57:3b:f7:3f:da:17:
e6:9f:ee:70:e6:24:4d:83:47:19:c4:ad:3a:56:b4:
df:2f:44:1f:fc:86:73:ce:22:f7:86:73:88:b9:68:
d5:20:bb:5e:34:e8:a3:f7:0b:82:51:0f:fc:14:32:
49:c5:51:cd:3d:a0:7e:db:ca:71:3b:a5:3c:80:b1:
bf:99:66:45:83:30:da:f3:3d:b6:f1:41:36:c1:11:
54:8e:b1:45:05:b1:6e:da:e5:97:b4:a7:26:f6:fe:
15:56:f1:14:1d:6d:c0:73:66:c4:3a:c2:d2:b7:f2:
78:a2:6e:75:b8:f9:0f:79:aa:3c:39:34:1d:4f:8e:
3b:6a:e5:c1:7c:90:ae:82:1b:10:a3:fe:97:41:f0:
f1:a2:0a:e3:39:fe:9d:7e:41:4b:f5:94:12:f7:1f:
77:ba:5b:1c:3e:aa:43:c0:d1:73:0a:47:c5:97:db:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1F:33:5A:8D:6D:82:14:29:BF:E1:F1:30:FD:78:62:7A:01:0C:21
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ER8zWo1tghQpv-HxMP14YnoBDCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.104.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:4b:0b:69:c3:59:9e:85:3e:19:2e:50:a9:b8:07:8b:a8:40:
b0:80:cf:0e:0e:d7:49:64:8c:b3:c8:66:d2:02:59:5d:18:cd:
e4:82:a7:5b:a9:8a:04:e5:b2:8a:f8:e8:28:88:ce:22:7c:7f:
09:8c:3d:50:c6:f1:69:49:15:ed:7d:2a:a0:1d:09:78:7e:75:
c9:5e:db:54:b9:9a:13:53:6b:89:cc:39:b1:aa:67:d9:f8:b1:
83:ba:55:44:f4:c6:e9:50:8f:92:d5:81:d3:fc:6d:3d:2d:c1:
2f:19:52:9f:8d:f4:89:be:83:20:67:41:51:4a:f5:6c:86:e2:
de:49:ae:c4:bf:34:86:a4:ec:76:4a:76:1e:48:38:e5:9a:f2:
8b:20:52:da:3e:23:7f:6b:31:48:44:23:a8:f2:10:c5:69:e9:
92:78:4f:ed:60:b7:68:9f:33:8b:79:02:76:60:13:de:9e:64:
c5:73:f9:47:38:e1:88:07:57:a6:64:c4:85:65:7f:d8:1b:f0:
ba:e3:d5:01:fc:29:32:1f:80:d7:7c:52:28:cf:36:41:22:35:
f8:3a:63:fe:82:33:8e:66:fe:1f:f4:ef:ef:4b:b9:33:13:f0:
7a:7c:80:36:19:f4:00:a3:8c:50:1d:15:f2:34:45:e1:c5:a2:
10:31:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org