Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wY-I3shzHCtQ5sMnCEnbG7wikkE.roa
File: wY-I3shzHCtQ5sMnCEnbG7wikkE.roa (raw, json)
Hash identifier: vgN2Z3GopGbT6DlwI9l5xz971lMsaVLvNprXkkVyrGc=
Subject key identifier: C1:8F:88:DE:C8:73:1C:2B:50:E6:C3:27:08:49:DB:1B:BC:22:92:41
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019261D0879BCD0CFA9CC9EA9E6EFC58EF99
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wY-I3shzHCtQ5sMnCEnbG7wikkE.roa
Signing time: Sun 06 Oct 2024 12:31:48 +0000
ROA not before: Sun 06 Oct 2024 12:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/20 maxlen: 24
5.102.96.0/21 maxlen: 24
5.102.96.0/22 maxlen: 24
82.163.96.0/21 maxlen: 24
92.114.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:61:d0:87:9b:cd:0c:fa:9c:c9:ea:9e:6e:fc:58:ef:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Oct 6 12:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c18f88dec8731c2b50e6c3270849db1bbc229241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:0b:d5:6e:08:6a:91:dc:78:7e:8a:a2:f2:
6f:fb:93:e4:07:be:65:b3:b5:40:d0:b0:83:6f:e4:
4a:ed:6f:d0:42:3c:7f:ab:bd:49:0a:d6:ca:f0:b8:
b6:81:47:6e:b8:56:23:06:ae:76:b9:12:a5:8b:3a:
24:65:fb:7f:ae:a2:03:fc:e4:10:54:08:e4:d3:c7:
af:0a:41:9c:b9:28:b9:91:2b:48:0a:26:e7:d0:6e:
48:00:ea:e3:c3:09:3c:03:2f:b1:0c:be:b6:4b:42:
a6:67:b5:98:8d:8f:86:36:04:5b:45:23:73:84:ed:
62:67:cf:4f:47:45:bf:42:b8:85:89:75:c1:f2:66:
4d:77:60:0e:65:3f:71:78:4c:92:2f:14:77:24:1e:
c5:84:0a:e0:f1:c9:af:e4:a5:97:eb:46:40:f1:c4:
90:69:15:0f:94:7a:a8:e0:64:0e:a1:84:70:ac:7a:
55:76:f8:ae:37:72:18:45:68:3b:d2:2b:10:cf:16:
8a:7e:27:ab:d7:13:59:85:86:10:73:1e:4f:77:fa:
80:ae:97:87:5f:7f:f3:d4:15:bc:2c:5e:fa:95:98:
cd:67:ad:df:d7:6a:d5:9c:4a:f9:b5:ac:b0:b5:38:
88:af:0c:49:33:2a:7f:a8:51:15:7c:27:09:9a:26:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8F:88:DE:C8:73:1C:2B:50:E6:C3:27:08:49:DB:1B:BC:22:92:41
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wY-I3shzHCtQ5sMnCEnbG7wikkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/20
82.163.96.0/21
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:08:b3:b0:fa:2c:44:b5:d8:0b:d6:35:90:12:44:61:dc:cb:
ea:00:50:eb:e1:c2:91:e0:77:84:ef:fb:4c:b5:db:7e:6a:b4:
72:72:af:8f:a1:bb:e5:00:44:a1:12:b2:63:3a:16:14:c4:a1:
3d:e4:53:5d:62:0c:3a:c2:d4:eb:84:f8:62:20:c0:15:be:0d:
02:38:95:45:a4:d2:6e:f8:09:1f:48:bf:07:b6:25:2e:bf:b5:
2b:ca:3b:81:6c:94:1f:fd:b1:18:7e:85:e9:96:b8:61:36:7a:
e3:ed:7a:cd:ca:9d:89:de:ba:3f:77:d5:5c:f9:2b:bf:e5:cf:
31:6f:d3:20:a4:8e:50:9e:4f:4d:78:b4:fc:25:e3:c0:48:84:
d8:ad:59:2a:a4:17:ff:9b:db:e7:4e:4a:c4:7c:a1:7a:d5:86:
aa:f5:28:40:ca:a4:9f:0f:8d:fb:07:68:21:b8:f3:ed:37:6c:
b0:b1:fd:cf:1a:2f:2b:ba:ce:96:e7:24:be:82:3b:54:87:42:
ab:bc:0c:ef:25:fe:e3:fa:74:7a:61:b9:88:a0:89:fa:4b:40:
aa:3b:59:29:14:91:fa:31:a0:7e:69:a2:5d:7f:6b:ad:f6:fd:
5c:5e:ba:6a:99:65:69:c9:cf:07:b0:a6:75:42:74:df:72:2d:
49:21:61:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 13:25:52 2024 by rpki-client on console-fra.rpki-client.org