Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/6Mrc7__S-4PQLAy10MPRE9iqtJw.roa
File: 6Mrc7__S-4PQLAy10MPRE9iqtJw.roa (raw, json)
Hash identifier: /L0NNQ56E0kxbQL6fAHBDZ10lV4NscGH9u1t0AAdpL8=
Subject key identifier: E8:CA:DC:EF:FF:D2:FB:83:D0:2C:0C:B5:D0:C3:D1:13:D8:AA:B4:9C
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0193D065563568D72E87177E41B3D2D0E909
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/6Mrc7__S-4PQLAy10MPRE9iqtJw.roa
Signing time: Mon 16 Dec 2024 16:55:22 +0000
ROA not before: Mon 16 Dec 2024 16:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213999
IP address blocks: 5.10.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 02 Jan 2025 10:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d0:65:56:35:68:d7:2e:87:17:7e:41:b3:d2:d0:e9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Dec 16 16:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8cadcefffd2fb83d02c0cb5d0c3d113d8aab49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:e1:a5:13:75:32:00:48:11:4c:d5:72:6c:
c5:87:9f:f8:0d:2d:1c:fa:56:ab:b9:c6:ca:e5:fd:
33:a3:e8:48:5b:e5:40:e8:63:23:42:11:41:c7:f5:
2c:ee:5a:91:58:6b:d9:08:e8:13:10:51:2b:0e:38:
08:b4:a5:b3:11:db:09:1c:0b:23:82:0c:44:1a:32:
fd:9e:79:09:39:1c:ed:8a:81:b3:e9:16:03:ea:37:
30:01:81:e4:fc:a8:33:8c:4b:b5:a0:26:ba:f6:ec:
0f:39:68:4f:57:db:c7:54:08:02:9d:ae:90:39:c9:
8f:e1:c1:1a:87:6b:b1:02:eb:9c:fc:d1:65:ea:15:
60:03:85:2a:c3:f5:8e:06:76:39:d4:a1:59:62:60:
af:da:0e:0b:62:60:1a:9e:e2:cd:1e:e2:88:f7:d3:
38:e3:df:51:cb:a8:d4:a1:3e:a2:15:b0:d0:dc:db:
05:3a:dc:a1:c6:c1:82:bc:ca:ac:28:d5:d1:a3:f9:
5a:71:81:1c:15:15:40:13:ae:6a:fe:d3:bb:6e:e9:
f8:7d:4e:01:52:5a:64:1d:01:c5:e2:06:56:f7:c8:
1d:9e:54:b5:14:0b:03:eb:aa:3e:5a:ed:08:9b:67:
de:ca:36:ef:a5:ae:6b:7e:7b:c0:a6:4e:de:10:36:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:DC:EF:FF:D2:FB:83:D0:2C:0C:B5:D0:C3:D1:13:D8:AA:B4:9C
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/6Mrc7__S-4PQLAy10MPRE9iqtJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.208.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:40:95:5d:1e:26:24:4e:17:31:ab:6e:75:5b:40:28:76:08:
df:3b:9e:2d:97:f3:cd:e1:5a:8d:76:ea:d7:c2:c3:61:a7:69:
99:2a:2a:c9:7e:6b:56:22:eb:48:df:47:85:7a:49:1f:5f:05:
8c:e6:c0:a4:0d:27:91:49:08:e7:45:ee:2a:e2:83:02:20:fa:
9b:a2:18:ef:1f:49:fd:c9:28:79:71:ac:61:ad:e5:a3:f5:fe:
46:e0:0a:13:12:5b:a4:d2:68:59:b0:7b:43:cb:2c:26:e7:10:
a2:c6:0c:94:90:0a:44:36:3a:90:b3:d6:fd:78:c0:02:38:1f:
01:40:31:4a:72:25:74:ee:6c:bc:4b:90:b7:42:46:2b:74:fd:
4f:f7:40:34:cc:e1:bf:74:5f:3b:20:e9:f0:ef:14:80:df:22:
3f:d0:52:5d:bb:e1:7d:5f:3c:4d:52:63:b7:2b:32:0a:03:2e:
ad:dd:c4:3b:c2:c0:4c:30:0a:ff:23:0d:f2:15:b3:cc:33:5f:
f5:9a:2f:87:c2:aa:7c:ec:ea:02:f6:2b:24:38:89:fa:f9:ae:
70:c1:ad:34:c3:2f:a1:ed:20:c1:14:62:51:15:3f:f3:dc:87:
22:f1:91:26:5d:95:2e:be:17:86:a0:61:eb:4f:2d:89:25:5b:
26:78:a3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:38:21 2025 by rpki-client