Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/KTNlV2eYF7IIMYwPO8cYu2HA0Fs.roa
File: KTNlV2eYF7IIMYwPO8cYu2HA0Fs.roa (raw, json)
Hash identifier: 3fA7q9trMfroJGR9RRJ27aAdHX/2pvcwCNwNsymfVCU=
Subject key identifier: 29:33:65:57:67:98:17:B2:08:31:8C:0F:3B:C7:18:BB:61:C0:D0:5B
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0192E9171222E453F203348EBC0ED3E2AB98
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/KTNlV2eYF7IIMYwPO8cYu2HA0Fs.roa
Signing time: Fri 01 Nov 2024 18:57:36 +0000
ROA not before: Fri 01 Nov 2024 18:57:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 5.102.100.0/22 maxlen: 22
5.102.104.0/22 maxlen: 24
5.102.116.0/22 maxlen: 22
31.186.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 07:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e9:17:12:22:e4:53:f2:03:34:8e:bc:0e:d3:e2:ab:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 1 18:57:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29336557679817b208318c0f3bc718bb61c0d05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:da:54:95:36:45:e6:f7:cd:19:86:18:46:
1e:30:af:99:4f:bd:17:03:81:61:88:00:a9:69:ff:
b7:21:a5:f9:fa:db:72:0d:8a:60:98:d6:8f:e3:90:
36:64:23:eb:76:cb:5f:e6:79:16:70:39:7b:93:bb:
2d:e6:30:a7:c6:50:cc:6d:d0:26:02:c4:fe:3f:cd:
04:a5:d8:f0:cf:c3:90:0b:4a:ed:a8:91:68:35:d2:
c8:de:07:7c:c1:b1:3a:27:3f:30:09:c1:eb:09:a6:
92:be:61:8d:53:c1:18:04:79:00:07:90:5b:f7:66:
0c:15:97:3d:08:d6:5f:8a:0e:d7:91:1b:7c:34:da:
4c:94:41:de:4d:5e:78:2e:91:59:f7:4c:8c:f3:aa:
47:ae:b0:ec:45:05:4a:c3:c3:40:bd:5a:c7:7c:2a:
cf:79:77:80:93:16:b0:14:10:3a:c6:cc:9c:e2:69:
05:e9:53:da:2c:63:3f:c0:cc:c5:38:b0:ba:e9:7c:
41:d3:1d:61:5b:42:ed:38:15:5f:30:1d:7e:f2:5c:
a8:74:20:af:17:58:c3:12:20:e9:bf:f9:53:fc:c6:
12:71:23:ef:66:f5:8f:28:4a:bb:74:15:8b:4e:5b:
8b:c2:35:4e:75:00:ac:a2:ed:a1:ac:bc:39:e2:a3:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:33:65:57:67:98:17:B2:08:31:8C:0F:3B:C7:18:BB:61:C0:D0:5B
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/KTNlV2eYF7IIMYwPO8cYu2HA0Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.100.0-5.102.107.255
5.102.116.0/22
31.186.180.0/22
Signature Algorithm: sha256WithRSAEncryption
69:4d:4e:a7:1f:bc:6d:4c:62:e9:ab:a6:6f:47:46:65:5f:70:
87:bd:3b:36:85:33:16:95:d8:0b:fb:0e:b5:c4:59:4d:cc:10:
ef:a2:2e:95:53:82:0c:5f:ba:23:62:d2:92:e1:71:40:88:99:
be:c9:5e:72:8c:85:f7:d3:c5:1b:64:cf:60:c0:81:be:f0:66:
b0:fa:85:ab:fa:2d:04:cf:54:b3:5f:36:6c:7e:c3:f5:f6:31:
85:90:95:95:4d:c8:d7:81:13:c0:f1:e0:67:ab:8a:58:c3:5a:
e2:ee:23:9f:9b:d5:ff:9f:a6:3b:47:36:1d:89:aa:6b:c0:6c:
f1:be:ea:ad:a0:17:dc:a2:b4:91:4e:c0:cc:73:7d:a1:95:aa:
ad:7e:fc:e4:38:02:3a:0d:bf:d5:8f:cc:26:be:51:b8:5e:61:
14:cc:b4:08:70:da:15:1e:3d:2c:0e:4b:4e:cb:cc:9b:97:f8:
e4:19:68:7f:ca:79:ff:5b:7b:ae:33:72:c8:c1:27:78:2a:d5:
67:78:ec:4c:0e:d5:fb:55:f5:ae:20:e5:07:e2:9f:81:9d:b8:
04:39:a1:2e:11:02:c3:8d:32:6d:54:8f:38:89:f8:01:4d:cd:
c8:72:f1:2a:52:7c:9e:b8:93:4d:da:e2:db:5a:0d:96:39:ac:
d5:24:04:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:38 2025 by rpki-client