Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/5q72Kq6nL9pUc_1R-8UPnJEIpHE.roa
File: 5q72Kq6nL9pUc_1R-8UPnJEIpHE.roa (raw, json)
Hash identifier: vu8nrVlFq4YC6GS9XMCK8AcC936/GeuSAc1WcNkatm8=
Subject key identifier: E6:AE:F6:2A:AE:A7:2F:DA:54:73:FD:51:FB:C5:0F:9C:91:08:A4:71
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 018580F7CD8CFAB9703E90D8F08B0FF83041
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/5q72Kq6nL9pUc_1R-8UPnJEIpHE.roa
Signing time: Thu 05 Jan 2023 08:06:41 +0000
ROA not before: Thu 05 Jan 2023 08:06:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35815
IP address blocks: 31.25.24.0/21 maxlen: 21
109.198.96.0/19 maxlen: 19
45.9.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 19 Feb 2023 16:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:80:f7:cd:8c:fa:b9:70:3e:90:d8:f0:8b:0f:f8:30:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Jan 5 08:06:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6aef62aaea72fda5473fd51fbc50f9c9108a471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:6c:d4:8f:55:c6:72:76:7e:06:59:2e:65:
10:39:83:83:07:bd:68:07:5f:28:6e:02:fa:9d:cc:
47:44:89:cc:ad:24:9f:57:ed:63:e8:2a:6a:39:c4:
f0:46:bd:52:e4:f3:a0:2c:e1:4e:59:2f:95:89:6c:
2d:67:77:cd:f6:86:0b:bb:19:7b:34:9f:0d:b0:91:
d0:23:06:89:4b:0d:3f:8b:91:d8:c4:e4:4d:c8:d0:
c5:1a:cb:81:32:4e:34:fb:f3:0a:90:2a:93:ed:4a:
a7:57:d7:7a:27:23:22:c7:4a:17:28:9f:57:1a:e7:
da:77:71:ad:2f:77:2c:75:50:14:65:e0:8c:4b:c9:
5d:43:6e:f7:b8:5d:50:77:5e:3f:b0:a7:3c:c9:c9:
21:c4:bf:38:b8:b1:99:87:7f:6c:ba:8d:8c:4f:35:
ef:37:d5:24:4c:50:df:19:38:b9:5d:4a:51:ea:bd:
e7:21:90:f7:20:27:6f:a2:94:0b:e4:8f:af:c9:65:
81:fe:63:65:f8:17:74:1a:da:3e:bd:b1:e6:8c:b1:
0c:0c:77:ac:44:8f:9c:61:e8:9b:05:6f:98:47:49:
5e:17:50:6e:17:da:e5:87:52:60:eb:00:7b:15:68:
ce:f6:b0:80:2d:85:df:d2:6b:d6:6f:a5:00:33:bc:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AE:F6:2A:AE:A7:2F:DA:54:73:FD:51:FB:C5:0F:9C:91:08:A4:71
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/5q72Kq6nL9pUc_1R-8UPnJEIpHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.24.0/21
45.9.212.0/22
109.198.96.0/19
Signature Algorithm: sha256WithRSAEncryption
68:14:e1:ad:a3:25:c0:1c:0c:02:1f:d9:bd:eb:5a:1e:51:5f:
90:1e:8d:1c:65:47:68:41:f8:50:9b:87:c4:0b:fa:31:27:c6:
c4:95:5a:f0:16:dc:98:da:3e:3b:84:63:04:8d:e7:bb:3d:10:
d0:db:52:db:41:6c:29:19:8e:ed:46:92:04:56:a3:99:d9:91:
db:85:12:1c:4b:6a:83:de:33:8e:c6:e2:d0:26:29:81:3c:65:
7a:31:de:bd:d2:e6:c4:b4:79:8c:8f:f7:a1:54:2d:92:a7:4b:
93:96:bf:f2:bc:9f:76:60:aa:a6:b3:e6:e2:97:c7:ae:94:c0:
e8:6b:16:71:a3:a1:a0:bd:7f:09:94:4e:f8:3a:36:64:b6:07:
1d:74:ca:19:3f:ce:40:b9:17:4d:22:9a:fa:db:35:ca:fe:59:
0e:93:95:3d:a7:35:24:02:46:9e:54:dc:d1:73:f7:ff:34:87:
1c:f1:ea:d6:d9:6e:12:f5:58:eb:d5:0b:83:ed:97:2f:c7:f0:
d0:10:31:d9:ae:21:3c:55:99:bb:d9:b9:4c:99:79:da:a0:aa:
a9:9a:4b:9c:09:96:e8:7d:0e:cb:b4:b7:e7:ba:49:59:b4:c9:
e5:1b:f5:28:63:ff:c5:c3:ba:1a:d3:d3:04:ea:0d:5e:2c:43:
ce:e6:be:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:42 2024 by rpki-client on console-ams.rpki-client.org