Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/jcWNuMFbNObMxXxTNpVEb_1Zyao.roa
File: jcWNuMFbNObMxXxTNpVEb_1Zyao.roa (raw, json)
Hash identifier: U143XqAEzzA3tI353gNr5ZSDkTx0XV3PWvvyC4UGTvA=
Subject key identifier: 8D:C5:8D:B8:C1:5B:34:E6:CC:C5:7C:53:36:95:44:6F:FD:59:C9:AA
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018C6E9C4DB67BAFCCBF62FAB8E2F427DE49
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/jcWNuMFbNObMxXxTNpVEb_1Zyao.roa
Signing time: Fri 15 Dec 2023 17:53:06 +0000
ROA not before: Fri 15 Dec 2023 17:53:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/20 maxlen: 24
31.186.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Dec 2023 13:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:9c:4d:b6:7b:af:cc:bf:62:fa:b8:e2:f4:27:de:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Dec 15 17:53:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dc58db8c15b34e6ccc57c533695446ffd59c9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:28:5c:82:82:f9:9c:80:41:a2:ff:be:62:a9:
f3:da:98:67:b3:26:7b:4e:52:04:92:75:37:18:58:
3e:36:01:82:4f:91:07:4f:31:9d:25:ae:b5:2e:2c:
bb:de:83:01:61:58:26:75:74:b3:7d:02:43:dc:27:
e6:e6:61:fe:be:27:0f:e6:93:b4:76:26:bf:0c:ff:
24:5f:86:ba:25:53:39:8c:70:aa:19:33:be:3a:ff:
26:59:01:ed:f9:c7:35:02:17:68:22:1a:14:74:18:
8a:a6:da:e0:6e:22:f7:9e:02:7f:c8:9b:2f:3c:07:
52:a6:75:48:25:bd:58:05:7b:b5:6f:6d:d3:d7:33:
64:38:9e:99:34:99:c8:ec:d9:2e:20:18:2d:9d:4e:
9a:35:95:aa:4d:7c:e1:99:a4:b9:93:8c:86:a9:a4:
39:39:4d:a4:14:bc:04:b0:4c:fa:ed:14:89:e3:28:
62:53:a8:9a:fb:75:e6:cd:49:fe:90:ab:a4:bb:00:
b9:dc:aa:1b:3c:6f:e8:0b:35:4a:82:ce:0b:4f:f8:
d3:2f:3f:52:5f:be:26:76:a3:fd:be:cb:f3:d7:00:
51:f5:09:98:5f:27:2a:20:e1:b8:f3:79:9b:85:70:
ff:35:c0:f8:ff:dd:b9:7d:aa:65:2c:65:7d:9d:63:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C5:8D:B8:C1:5B:34:E6:CC:C5:7C:53:36:95:44:6F:FD:59:C9:AA
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/jcWNuMFbNObMxXxTNpVEb_1Zyao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/20
31.186.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:ee:04:13:02:e8:34:f9:3f:f2:22:58:8c:c9:dc:a4:9f:cf:
2a:1c:61:50:f9:12:54:f9:25:f5:98:b8:31:ba:80:29:83:95:
f7:1e:ed:85:57:40:b2:02:21:73:7e:09:75:7b:3a:a0:43:59:
66:48:d7:b9:00:06:5e:67:a8:2b:64:60:02:31:02:40:17:a3:
6e:2f:f8:df:36:8b:c8:4f:b8:a1:a2:88:92:2b:1d:c6:2b:66:
cb:63:a3:fb:59:c5:68:07:b3:21:f9:0b:76:22:a8:e9:45:7e:
50:b7:f2:0e:8c:44:b0:2c:ce:45:f4:16:88:a9:45:7d:3b:af:
df:ae:83:07:3a:b8:8c:ae:f9:a0:eb:85:fd:ea:18:f3:98:cc:
e5:7d:87:19:62:3d:ea:ee:2b:0b:00:3c:45:ff:32:86:94:5a:
51:f1:6f:dc:3d:08:45:01:4b:69:5c:18:55:08:a1:be:34:aa:
9e:26:c7:50:16:9f:d7:dc:08:39:f0:8f:60:ad:17:92:b1:76:
54:05:11:cd:26:62:db:61:05:75:7b:18:de:31:31:9a:5d:31:
8f:82:d4:04:e1:25:a0:9d:a2:cc:1f:47:37:f8:08:8b:56:ef:
16:ca:d6:21:a3:8f:9d:6d:2b:e6:26:be:2c:55:cb:00:83:4b:
d6:c1:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:36 2024 by rpki-client on console-fra.rpki-client.org