Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ygm2O4flZXpAoZ7fCLZXAQXPQDo.roa
File: ygm2O4flZXpAoZ7fCLZXAQXPQDo.roa (raw, json)
Hash identifier: 7RIDpT6ppGJy4dG9jLgudgldrBP2xDPtY+7AD91NhP0=
Subject key identifier: CA:09:B6:3B:87:E5:65:7A:40:A1:9E:DF:08:B6:57:01:05:CF:40:3A
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018CB9DCF7E43F6E2BD6DF909484610D022D
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ygm2O4flZXpAoZ7fCLZXAQXPQDo.roa
Signing time: Sat 30 Dec 2023 08:35:15 +0000
ROA not before: Sat 30 Dec 2023 08:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/20 maxlen: 24
5.102.96.0/21 maxlen: 24
5.102.108.0/22 maxlen: 22
5.102.124.0/22 maxlen: 22
31.186.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Dec 2023 08:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b9:dc:f7:e4:3f:6e:2b:d6:df:90:94:84:61:0d:02:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Dec 30 08:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca09b63b87e5657a40a19edf08b6570105cf403a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:5e:8f:e5:67:65:6d:02:60:3d:28:3b:62:
ed:6d:fd:9d:74:f0:f5:56:b7:c3:f2:47:42:a3:d2:
cd:79:76:57:54:3d:0e:3c:9f:e4:5a:b5:96:f4:de:
4b:79:75:b8:1f:46:3d:bc:b2:4e:22:17:8f:8c:95:
7e:89:4e:d8:a4:d0:6b:36:8f:ce:58:9f:ba:51:78:
20:16:b2:e4:ca:61:02:2b:e4:9c:38:e0:d1:d3:ef:
ad:d0:47:0b:97:04:10:16:98:cd:34:8a:16:dd:bb:
e8:aa:da:63:73:1f:e7:cd:4e:fe:14:7a:d8:b0:b2:
a9:49:9f:04:15:07:f9:37:57:cb:7c:d1:5d:7f:5d:
11:cb:a5:ab:ec:1d:40:48:b8:7f:8c:92:6b:7c:2b:
6e:ea:19:3b:9f:45:71:15:be:37:f4:62:32:fc:7c:
7e:ec:5c:2e:64:1e:bf:cc:c1:be:6c:75:1e:a6:49:
85:a8:78:a3:ad:9c:8b:97:9f:15:63:9c:c4:5b:92:
40:46:b9:29:ba:e8:a6:18:ae:1b:cc:e6:ee:88:95:
0f:54:1d:04:dc:70:2b:3e:0b:59:da:a3:4d:74:5a:
39:82:e9:ba:9b:c5:73:bd:5b:3c:20:b7:3e:bd:b6:
5b:34:42:cf:32:cb:34:20:b3:f7:c5:b0:df:8b:94:
68:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:09:B6:3B:87:E5:65:7A:40:A1:9E:DF:08:B6:57:01:05:CF:40:3A
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ygm2O4flZXpAoZ7fCLZXAQXPQDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/20
5.102.124.0/22
31.186.180.0/22
Signature Algorithm: sha256WithRSAEncryption
93:8e:0f:14:58:c6:dd:6c:c0:f0:cd:ab:43:cf:83:50:10:2a:
d7:ee:ec:a6:bb:57:38:54:b8:70:97:32:d6:61:19:99:60:01:
00:18:14:08:8b:2c:98:01:77:29:86:78:08:7b:10:51:8c:65:
c6:eb:60:6e:33:05:e0:a4:ad:55:28:5e:62:50:a8:4b:5f:4d:
c0:54:5d:c1:3d:73:62:a1:29:30:88:25:ab:91:7d:92:19:41:
30:8c:69:76:3e:a4:c1:b4:31:56:f2:51:7c:9e:a2:40:dc:76:
2a:57:03:9e:d3:20:a9:3a:80:ab:2a:5a:0a:ad:4d:f0:8e:3b:
e4:68:3c:bd:57:e1:4e:b1:bc:dd:aa:09:cc:5f:47:35:d3:ab:
16:01:20:3b:41:3b:23:f8:b5:75:d4:25:a7:61:b5:70:e9:ac:
e9:18:4a:0a:5d:3c:74:00:9b:75:15:e9:81:2c:d4:7b:79:d8:
59:59:38:4b:6d:f1:ba:88:a7:f0:76:45:0a:e6:83:74:b2:2f:
74:66:e3:25:68:98:31:c3:e0:aa:2a:89:b2:dc:d7:2a:b0:bc:
ac:fe:3a:c1:40:8b:66:31:ae:6d:f3:a3:00:d2:27:b9:d3:dc:
fc:36:ff:b1:9d:08:00:a1:5f:63:83:31:cd:74:7e:41:87:72:
3b:e6:9f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org