Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/RH__XBThlZxJMR_29ybmW23Bn7Y.roa
File: RH__XBThlZxJMR_29ybmW23Bn7Y.roa (raw, json)
Hash identifier: ZJ2ff7/1D7Rq7WVZ7UyoF4BRcQUyuCFlwlrj8RygTLk=
Subject key identifier: 44:7F:FF:5C:14:E1:95:9C:49:31:1F:F6:F7:26:E6:5B:6D:C1:9F:B6
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019188876E94E5F482278AE256916C6CDEA5
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/RH__XBThlZxJMR_29ybmW23Bn7Y.roa
Signing time: Sun 25 Aug 2024 07:54:22 +0000
ROA not before: Sun 25 Aug 2024 07:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/20 maxlen: 24
5.102.96.0/21 maxlen: 24
5.102.96.0/22 maxlen: 24
5.102.112.0/22 maxlen: 24
82.163.96.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 09:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:88:87:6e:94:e5:f4:82:27:8a:e2:56:91:6c:6c:de:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Aug 25 07:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=447fff5c14e1959c49311ff6f726e65b6dc19fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:10:9a:72:b9:6d:6f:c7:d9:d4:ae:e1:6a:
5d:94:b0:70:da:06:83:ef:9c:4d:e2:98:d6:00:ce:
02:7a:4b:c7:b4:42:81:b2:ab:9e:4e:03:2e:88:09:
3e:ac:e8:a3:7d:db:36:8c:06:20:b5:48:34:43:6b:
25:de:4e:2b:fe:02:aa:e9:36:62:10:8e:fe:fa:6a:
43:c7:fb:36:3b:c6:06:79:93:a4:b8:cd:62:38:d9:
ba:77:bf:3b:f0:ce:68:74:fa:8e:2c:66:64:77:d9:
ba:20:ef:37:21:bb:ac:49:b8:da:4a:db:75:7a:6f:
3d:fa:89:3f:92:e6:c1:88:76:63:5e:48:10:07:48:
22:72:da:09:78:82:b6:40:c0:b6:cc:f0:de:28:39:
e3:73:da:cd:55:1b:db:79:e5:ef:c5:7d:1f:79:69:
61:a9:c5:0f:4a:33:67:67:dc:99:a5:eb:48:c9:1e:
3e:64:04:8c:41:96:f6:94:09:49:a1:fe:c9:4b:d5:
8d:60:8b:66:75:a1:5e:c2:2b:1a:1e:2c:35:cb:a3:
95:44:fa:60:e7:8a:70:14:b4:68:f5:f5:0a:22:74:
bc:a5:cd:1f:a7:7d:ae:4d:e0:7a:63:c0:92:66:03:
20:10:6d:e3:d7:51:28:56:93:fc:a2:6d:43:ec:b2:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7F:FF:5C:14:E1:95:9C:49:31:1F:F6:F7:26:E6:5B:6D:C1:9F:B6
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/RH__XBThlZxJMR_29ybmW23Bn7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0-5.102.115.255
82.163.96.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:b2:53:4d:09:22:f7:52:4a:98:5c:cb:e4:ec:8f:0a:1e:05:
1b:2d:ee:b2:16:3e:e8:11:58:5c:d7:f5:82:33:91:7b:4f:3e:
dc:1e:48:a1:db:1d:a0:45:f7:0d:59:0b:4e:ab:de:e4:c9:93:
fc:dd:81:27:8c:41:41:ab:87:99:e9:f8:fd:29:e2:ce:8e:73:
9a:ea:d6:33:e6:48:38:1d:46:64:ac:2e:68:54:64:47:6e:43:
f2:23:ae:0c:fb:5b:ea:f7:57:36:21:cc:69:68:fc:08:0c:04:
01:e0:ab:d8:fe:8c:cb:58:30:a0:0f:d6:95:14:97:c2:c1:ba:
3f:09:1c:99:47:03:ad:22:84:ff:6c:5d:59:ae:fe:70:5b:f5:
b7:6a:77:58:ba:f0:52:9e:b1:b1:1a:4d:8c:59:c7:4c:4a:8f:
ae:99:37:d3:c1:c8:5e:6c:e4:83:4d:55:d8:4a:1f:a0:f8:9a:
3d:9f:31:1e:c5:83:1f:6c:f9:b4:68:32:b8:14:db:86:da:d1:
65:9a:ee:1b:f5:13:5a:40:50:14:b0:e9:e1:77:53:df:d3:5f:
a3:81:ab:0f:e8:e0:23:17:8f:ab:6b:bf:b9:ff:fc:82:f9:85:
c6:a0:1f:e1:5d:4d:a4:a1:2b:74:c1:d3:98:c2:55:ae:d0:82:
b9:26:2a:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 15 11:19:27 2024 by rpki-client on console-ams.rpki-client.org