Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/V3keWIWcdOJEn7Xecb5MPxMVSjc.roa
File: V3keWIWcdOJEn7Xecb5MPxMVSjc.roa (raw, json)
Hash identifier: NpmQlG8gX0/dmyETRwJ14JacJvLEQPOa7etrUctG9XU=
Subject key identifier: 57:79:1E:58:85:9C:74:E2:44:9F:B5:DE:71:BE:4C:3F:13:15:4A:37
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018BD6EB281F772C2BAF2482257F5CF54DC5
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/V3keWIWcdOJEn7Xecb5MPxMVSjc.roa
Signing time: Thu 16 Nov 2023 06:56:57 +0000
ROA not before: Thu 16 Nov 2023 06:56:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/19 maxlen: 24
5.102.96.0/20 maxlen: 24
130.255.64.0/22 maxlen: 24
5.102.112.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 12:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:eb:28:1f:77:2c:2b:af:24:82:25:7f:5c:f5:4d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 16 06:56:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57791e58859c74e2449fb5de71be4c3f13154a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:c3:ee:e6:d6:9a:35:0f:19:a1:66:c0:03:
c9:09:31:e0:a9:b8:49:58:3d:45:4e:12:67:6a:a7:
c0:62:6f:23:22:22:bb:98:b5:b3:99:f8:d2:da:27:
c5:30:2d:ff:c9:4d:15:f7:72:c8:7c:9c:f3:5c:c4:
2b:d2:91:a6:2d:98:6e:95:36:13:17:8a:c5:9e:f2:
24:8a:72:b6:61:ef:14:1d:f3:e2:81:39:64:31:91:
0e:5f:4b:9d:d4:11:19:16:7d:48:f3:ae:c7:97:bc:
9c:6f:74:7a:5f:67:2b:d0:e3:68:45:7f:a5:f6:e8:
18:ba:3c:0c:19:c3:00:41:ae:eb:bc:af:26:cb:c5:
e2:ec:d7:96:34:2d:ad:f0:c7:52:bb:07:fc:37:cc:
e0:7c:c5:82:26:a8:7a:5b:f4:cc:d7:53:37:13:11:
21:9b:a6:9c:80:c2:2d:d8:f0:75:a5:b7:8b:bd:f4:
bb:6d:c3:12:3d:a7:88:e8:9d:0e:52:56:8d:60:9c:
a5:77:8e:26:9e:5b:1c:41:9a:f7:a0:0f:8e:08:89:
1e:49:88:98:90:1a:80:53:cd:45:50:81:d6:ef:48:
7a:f3:cb:0b:17:8a:97:1b:fd:d2:92:a6:c6:62:26:
ea:a1:db:7a:bc:f0:ac:77:79:df:44:a7:fc:7d:7b:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:79:1E:58:85:9C:74:E2:44:9F:B5:DE:71:BE:4C:3F:13:15:4A:37
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/V3keWIWcdOJEn7Xecb5MPxMVSjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/19
130.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
47:81:26:e7:d3:9e:c4:1b:b7:17:dd:ee:76:e6:0a:d7:31:92:
dc:e8:ae:54:0d:0a:f9:3f:d3:03:13:f1:41:69:b5:97:f2:f3:
93:cb:d6:65:20:fe:06:f4:e7:11:b1:da:8a:6e:21:31:90:c0:
cd:0a:43:85:02:6b:69:59:df:da:35:4f:24:ea:59:f1:0d:6b:
e9:93:84:97:59:1e:66:8b:a0:d1:03:5e:3b:0f:d3:a9:c2:8a:
1c:4b:1e:a2:8f:b6:a1:c1:f5:5c:56:41:ec:04:36:9e:3b:cf:
17:7b:2c:5f:0e:ee:9b:01:6d:51:c7:93:72:ce:f4:06:da:1f:
c9:4d:b9:97:ca:da:6b:93:d8:20:06:98:6c:7d:9c:bd:80:8b:
00:9c:ff:70:2f:e6:fc:80:6c:24:8a:6a:3c:ad:13:04:66:e6:
ce:8c:84:74:48:c1:a2:ba:0e:0a:9f:f7:a8:52:82:41:db:eb:
de:de:cc:a1:c9:65:99:7c:4f:86:ed:e3:5e:dc:53:47:e8:3e:
f7:d2:a9:51:a1:53:58:04:70:74:8b:f2:c6:a2:cd:d6:1c:f6:
66:bf:5e:bc:05:f3:cc:5d:96:12:7b:8c:dc:4c:d7:43:72:59:
ef:06:53:93:dc:ee:d0:c2:2d:8d:f0:6e:2c:16:8e:4e:cf:41:
f1:2d:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org