Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/5VU2CxoVEUF2umPI3eKHndRqMQE.roa
File: 5VU2CxoVEUF2umPI3eKHndRqMQE.roa (raw, json)
Hash identifier: TChhPObs8u4ffzZJwUfFdf2uTMtVDaN9e2nhPvpvmrY=
Subject key identifier: E5:55:36:0B:1A:15:11:41:76:BA:63:C8:DD:E2:87:9D:D4:6A:31:01
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 018CC794539664C24C45DB57DAACE88241B7
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/5VU2CxoVEUF2umPI3eKHndRqMQE.roa
Signing time: Tue 02 Jan 2024 00:30:35 +0000
ROA not before: Tue 02 Jan 2024 00:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213269
IP address blocks: 86.111.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:53:96:64:c2:4c:45:db:57:da:ac:e8:82:41:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Jan 2 00:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e555360b1a15114176ba63c8dde2879dd46a3101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:ce:64:05:81:8f:47:3d:bc:89:ef:bc:ca:
73:e9:c1:53:4b:15:9c:8a:cb:3d:15:93:52:3c:56:
5e:42:d9:1f:ac:ae:05:b3:bb:a6:d0:ce:77:24:55:
27:61:5a:09:ce:4f:50:78:47:ea:2d:97:ad:0e:33:
cd:29:ff:c1:93:ea:15:a6:8e:c1:ee:24:13:58:f4:
41:1f:03:a9:ac:74:16:93:8d:b9:1a:1a:39:0a:95:
41:8d:f7:78:99:33:f7:71:34:d4:81:89:3d:1e:5a:
72:c6:34:9f:7b:65:b7:66:d4:15:e4:91:72:1d:ab:
1a:dc:76:cf:a2:8f:9d:bd:fb:56:b4:64:2d:6c:87:
e8:5d:25:b8:38:7a:84:9a:be:68:bc:8a:f2:70:6a:
d2:8e:ba:19:1b:27:02:ec:6c:4d:8a:90:d9:74:06:
d0:02:50:90:ff:74:78:af:db:a9:80:6b:7f:29:86:
f4:2e:6c:ad:af:44:37:f8:3d:77:9a:d2:9a:6b:fd:
24:f0:1f:a5:14:ff:7e:dc:17:bd:f9:18:20:02:14:
d3:5f:a2:3d:71:1a:dc:d6:cf:f2:89:cf:da:a7:fd:
37:0c:96:2e:ec:a5:5a:8f:1b:61:59:57:8d:6d:7b:
43:18:51:69:b7:cf:64:3d:48:6c:ce:f5:87:57:03:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:55:36:0B:1A:15:11:41:76:BA:63:C8:DD:E2:87:9D:D4:6A:31:01
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/5VU2CxoVEUF2umPI3eKHndRqMQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.212.0/24
Signature Algorithm: sha256WithRSAEncryption
38:08:6b:2d:2f:c4:f4:10:f2:c7:b3:e0:20:48:a4:86:50:57:
c2:05:4e:9b:19:08:0f:2f:e4:6a:8c:ea:c0:5e:83:42:0a:b3:
01:0a:40:29:54:07:83:57:84:c1:da:68:d3:de:36:43:4d:80:
b2:8d:ec:1d:f1:ab:df:dc:ec:a1:3e:39:b2:04:d9:fa:e0:ad:
80:77:7d:47:5b:4b:99:d4:b1:50:a0:8e:31:4b:f6:5c:05:13:
5b:a8:53:ab:ca:cc:ab:60:87:da:d5:90:58:51:0a:fd:0b:51:
f3:e4:da:9d:a0:c1:f6:7c:20:e7:01:02:53:c1:50:90:68:21:
85:25:82:20:d0:44:f7:d1:c7:ea:9c:26:65:78:95:76:e8:5b:
64:5b:29:f7:5c:ac:74:c5:7d:0e:04:db:ca:fd:39:9f:94:57:
ed:fb:67:9d:3b:23:3a:15:31:33:94:b7:ff:71:a9:60:c8:76:
30:35:6c:dd:2d:fc:af:82:45:9c:14:40:c0:dd:3a:52:be:f4:
77:41:66:12:79:ae:4a:e5:72:76:07:f5:8b:98:05:25:4e:07:
bc:6f:9a:3c:8a:5d:65:5f:c4:ec:02:6e:64:ba:89:f2:a6:72:
1c:80:a6:d1:5b:65:93:d5:8b:5f:75:a4:ce:4a:47:19:29:41:
67:2f:95:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:13:05 2025 by rpki-client