Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/_jdNabYL4IZ2ZwsA2ndgt3a2-fI.roa
File: _jdNabYL4IZ2ZwsA2ndgt3a2-fI.roa (raw, json)
Hash identifier: y0eBjznfUKVBhmLZ0+f4vlGJfk7j+IRQg/f2SifR5TM=
Subject key identifier: FE:37:4D:69:B6:0B:E0:86:76:67:0B:00:DA:77:60:B7:76:B6:F9:F2
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018CE33B5FDAB9C427A3DEB766EE0404FF7D
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/_jdNabYL4IZ2ZwsA2ndgt3a2-fI.roa
Signing time: Sun 07 Jan 2024 09:22:48 +0000
ROA not before: Sun 07 Jan 2024 09:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 149.126.88.0/22 maxlen: 22
5.102.96.0/22 maxlen: 22
5.102.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 16 Jan 2024 08:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e3:3b:5f:da:b9:c4:27:a3:de:b7:66:ee:04:04:ff:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 7 09:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe374d69b60be08676670b00da7760b776b6f9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:30:d3:1f:86:20:c1:28:e7:fb:65:ea:98:
ec:6f:b4:59:03:98:a6:03:d7:24:a1:ae:0c:1a:61:
65:42:8e:c7:24:8d:51:2a:4c:71:2a:a1:bc:22:cb:
84:6f:80:04:4a:2f:17:eb:71:4d:79:37:35:13:69:
c2:77:53:d0:b3:f5:ba:c1:78:81:8b:6a:ab:2d:3f:
88:0b:e7:a8:82:57:4a:31:4b:68:92:aa:d5:ff:45:
d3:50:1a:dc:f4:45:6c:d4:ac:bc:da:a2:ce:2c:cc:
d2:11:ca:2a:da:16:d7:1b:88:60:28:7c:4f:ba:c1:
e0:6a:7f:df:59:63:da:c3:e0:bc:cb:b6:7c:0f:7b:
fc:4e:94:72:0e:78:8c:a7:e3:bb:38:b5:d7:98:05:
db:fb:37:48:98:05:cf:57:14:b5:3d:21:62:55:ef:
ee:f0:f0:4f:a5:7c:53:46:13:ae:15:46:83:2f:97:
42:b3:c5:1e:35:ed:ee:02:13:57:7e:42:25:91:db:
b4:8e:0b:b6:f4:45:92:85:b3:c3:e3:b6:dc:e0:48:
dc:a1:3e:d9:a4:cc:95:bf:8c:44:22:df:b5:8c:e0:
f5:71:17:2d:62:03:29:05:3f:1b:a4:b3:59:c7:c6:
d1:da:6b:66:4c:76:6b:90:46:ad:ad:a2:53:10:29:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:37:4D:69:B6:0B:E0:86:76:67:0B:00:DA:77:60:B7:76:B6:F9:F2
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/_jdNabYL4IZ2ZwsA2ndgt3a2-fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/22
5.102.120.0/22
149.126.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:02:90:bd:24:c6:87:a5:ef:49:83:95:d9:7b:87:d7:5f:3c:
48:bb:5f:9b:c9:00:8c:05:cc:c2:5d:b0:3b:da:dc:da:92:cb:
d5:91:d5:2c:12:5e:7c:5e:34:cd:64:70:ed:a3:51:58:84:77:
f2:18:d3:f8:8e:af:39:14:5d:bc:e6:79:58:4d:4a:23:2f:2e:
38:85:76:b2:5e:da:90:a7:20:1c:cf:ee:9b:47:1f:4a:1d:38:
4f:c9:7c:45:32:83:5b:87:85:f9:7f:36:31:0a:8b:6d:69:51:
5a:99:01:8f:cc:38:0a:33:2c:45:1f:9c:e6:99:9a:c1:30:10:
47:2d:8f:f8:f2:bc:03:3d:01:fe:f0:8a:df:1e:c1:a0:47:68:
ce:aa:1a:dd:dc:87:1b:c1:f2:49:68:97:7d:b2:14:14:f7:67:
ef:4c:cf:b0:5a:b5:ff:4e:a5:b7:60:46:a6:b1:05:98:41:a0:
06:4a:85:ae:99:65:68:a9:ca:8a:58:1a:21:c8:f7:45:2c:24:
65:e5:73:53:9a:92:09:17:4f:15:92:6b:84:95:2f:a7:20:74:
e3:7d:ec:cb:50:56:df:b2:f3:f8:47:9f:c0:51:b8:4d:f0:4c:
47:a3:e7:81:4b:de:4a:4a:6a:22:c7:a3:65:03:bf:81:0a:8e:
94:de:a3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org