Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/M8HY7FYUIncCHN-uid4KRkkLXdU.roa
File: M8HY7FYUIncCHN-uid4KRkkLXdU.roa (raw, json)
Hash identifier: a/aLSmvqDG07jXlF3dqhW8yZJswJZcT5A8IzQXxqW8E=
Subject key identifier: 33:C1:D8:EC:56:14:22:77:02:1C:DF:AE:89:DE:0A:46:49:0B:5D:D5
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018CC5DCE664CF05672FCA583112DA0CD654
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/M8HY7FYUIncCHN-uid4KRkkLXdU.roa
Signing time: Mon 01 Jan 2024 16:30:37 +0000
ROA not before: Mon 01 Jan 2024 16:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 5.102.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 31 Jan 2024 19:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:e6:64:cf:05:67:2f:ca:58:31:12:da:0c:d6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 1 16:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33c1d8ec56142277021cdfae89de0a46490b5dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1b:66:2a:02:25:b7:c5:2d:75:ce:a1:05:aa:
95:4f:c5:0d:45:81:36:f3:71:03:be:a9:94:f6:aa:
84:2f:73:34:94:9d:50:20:5b:14:b9:0f:ca:e9:79:
b8:34:14:e9:e4:83:d9:1a:f4:35:21:6c:10:da:64:
60:c9:6f:f4:50:e8:b8:81:31:ec:76:1b:e7:4e:41:
0d:23:f5:74:54:01:1d:73:27:3f:fd:83:6f:e7:19:
2a:d1:15:80:3b:3c:26:29:ee:80:0f:55:ea:21:fb:
49:05:24:50:c4:54:a8:4a:05:74:d1:11:4d:8c:2f:
9b:bb:e6:39:c0:c0:fa:ea:1e:e9:86:77:52:9a:96:
e7:24:99:89:dc:cf:c2:3e:39:80:5a:5e:13:91:f0:
7a:16:e1:7b:f4:1b:40:5a:66:4e:f2:00:4c:43:c6:
e4:d4:2c:6f:a7:ca:e0:8c:38:f3:d1:6a:2a:ea:dc:
14:09:46:e6:28:a6:78:96:e7:bb:45:5f:e7:36:f0:
38:d9:92:0d:26:09:28:b2:d8:98:cc:dd:2a:5d:d2:
f0:ac:2a:c1:0a:11:d4:1f:2e:e3:6d:c6:32:bd:0a:
12:df:2e:a5:df:9a:2b:fa:cc:3a:ca:04:c2:80:36:
43:2b:18:0b:75:9d:e1:6b:eb:b3:81:ad:5e:b7:4f:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C1:D8:EC:56:14:22:77:02:1C:DF:AE:89:DE:0A:46:49:0B:5D:D5
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/M8HY7FYUIncCHN-uid4KRkkLXdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.124.0/22
Signature Algorithm: sha256WithRSAEncryption
55:45:29:8c:25:f4:ea:dc:47:37:fb:89:35:82:53:8c:48:80:
e9:e5:3c:48:7e:f6:cf:87:33:a4:0b:72:fc:07:07:c6:6d:5d:
83:8a:98:30:6d:09:63:c8:a1:e6:96:fe:8d:fb:d7:71:52:b3:
9e:95:70:55:e5:42:d4:f8:ba:9f:5d:ef:a2:32:9f:93:59:5f:
f0:bd:79:ec:ab:11:ec:67:17:1d:50:a9:37:c4:29:9a:ac:23:
6b:d3:37:19:1c:5b:40:38:95:17:ca:53:0e:0b:02:92:7e:96:
db:cd:0e:a5:be:c2:3c:81:92:72:80:cb:2d:a1:5b:a2:9a:4f:
00:c0:f9:39:3e:b3:33:96:5a:65:5d:96:e0:5d:73:26:b2:5e:
c9:de:6c:8b:12:1a:d7:3b:b0:4c:d2:b2:37:ae:0e:18:b9:b4:
1f:10:34:5b:09:b5:2c:84:43:ff:f3:8a:cc:a5:f6:ac:31:f1:
9f:c5:a9:af:54:14:a5:b9:32:9b:d9:b8:4f:91:b5:33:c0:be:
44:9d:3f:09:30:bc:c8:e7:8e:38:7e:93:5b:27:06:ce:6c:d8:
50:9e:a2:28:d7:8f:08:83:e5:8a:83:62:02:6f:fb:33:83:eb:
8c:42:79:b9:b4:9c:b8:47:2d:ea:2b:73:0a:79:23:df:1f:51:
88:4c:f5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org