Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Fc1Cg0Gvwv5UJUKE9W_nLqcDEpQ.roa
File: Fc1Cg0Gvwv5UJUKE9W_nLqcDEpQ.roa (raw, json)
Hash identifier: W2kuqssAGD/SaAVfFPqr2Co/BiWBRMtyDziWH9dMKHI=
Subject key identifier: 15:CD:42:83:41:AF:C2:FE:54:25:42:84:F5:6F:E7:2E:A7:03:12:94
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018E31A38A2ABE136D6068497BBD80A26279
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Fc1Cg0Gvwv5UJUKE9W_nLqcDEpQ.roa
Signing time: Tue 12 Mar 2024 07:49:45 +0000
ROA not before: Tue 12 Mar 2024 07:49:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/20 maxlen: 24
5.102.96.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 08:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:a3:8a:2a:be:13:6d:60:68:49:7b:bd:80:a2:62:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Mar 12 07:49:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15cd428341afc2fe54254284f56fe72ea7031294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:3e:ec:f6:cf:0e:9d:93:54:61:fa:26:6e:
31:fe:ac:8c:38:09:8a:7e:28:64:bf:5e:13:95:b6:
02:ea:b0:45:e7:3d:42:fa:e9:e6:88:9b:76:1b:ec:
80:39:bd:50:28:be:72:d5:12:34:3f:19:25:c4:74:
4c:6c:b5:c6:92:b7:5c:17:98:9e:c7:62:0c:29:3b:
46:57:59:7e:cc:45:90:54:fe:b7:29:48:93:03:e6:
d3:61:f3:43:14:e3:a8:3d:4a:cf:d1:db:1c:53:62:
09:38:11:5b:65:8f:52:4f:5d:73:c2:89:d1:be:77:
f7:46:70:f5:2e:eb:1c:07:3a:fe:12:36:a5:73:58:
18:76:c0:bf:8d:c0:46:d3:d8:c7:72:79:05:f7:e1:
82:54:85:fc:70:63:3d:22:68:4f:27:aa:f7:86:3e:
cb:54:ac:5f:c8:0d:38:b6:23:17:47:98:51:bd:b5:
87:7f:ae:eb:6f:0a:38:08:90:d2:6d:ee:3a:af:4c:
81:a2:0f:75:81:44:08:1f:ad:6f:84:b5:b2:96:c5:
4c:bf:3e:e0:cf:3f:50:fb:3a:84:b6:77:d4:f4:c4:
cc:92:e5:97:c3:32:50:3f:29:a8:71:2f:25:5c:96:
f2:67:f5:d7:e0:b7:b8:3e:0a:21:f4:d8:4c:41:de:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CD:42:83:41:AF:C2:FE:54:25:42:84:F5:6F:E7:2E:A7:03:12:94
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Fc1Cg0Gvwv5UJUKE9W_nLqcDEpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/20
Signature Algorithm: sha256WithRSAEncryption
83:61:bf:99:2d:2c:8e:ef:40:46:1c:26:c3:b6:6a:ed:e2:89:
33:a9:74:e5:06:90:e7:b0:7e:98:f3:01:f6:4f:7a:9f:b5:6c:
25:5c:16:4a:aa:dc:78:68:81:99:01:5d:4d:30:8c:9e:c9:78:
3e:80:75:be:04:5f:bc:b7:fa:fe:af:a9:97:3b:cc:60:e4:9b:
e2:60:2a:dc:24:ce:7c:ea:60:11:cb:3b:1c:4b:d3:19:84:68:
65:38:f5:dd:8c:11:e6:5a:7e:b2:5d:a8:d6:52:40:88:94:81:
93:1a:30:fe:a8:fd:cb:f5:f3:84:e3:c4:2a:fb:48:77:d2:5f:
e3:db:53:10:12:4f:6b:d4:36:db:6c:d8:45:0e:a6:cf:69:11:
a5:5d:31:8a:d5:31:5c:84:68:50:c6:24:c0:d5:d4:87:26:69:
b6:c8:3b:da:a7:a9:da:7b:ff:3c:c9:9e:c1:78:c4:6e:d5:bc:
df:d5:42:ef:59:05:0d:0e:23:62:8d:17:b7:fb:36:8a:12:cc:
93:62:c1:f1:5e:c7:a1:9c:e9:18:ed:9f:30:2e:d7:99:8d:32:
35:b8:74:22:81:66:d0:ed:14:60:f7:3c:f8:a8:c5:dd:8d:97:
db:87:0d:e4:a6:65:b6:5b:8c:94:b2:d4:4c:3e:26:53:34:d6:
aa:3b:3a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org