Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/H_PI8yEIns4c1JiyxpFqSIbddiQ.roa
File: H_PI8yEIns4c1JiyxpFqSIbddiQ.roa (raw, json)
Hash identifier: LD2+mq4wIzeNSm9ebTXmN32lT+EzxK3J41nja0mIhdA=
Subject key identifier: 1F:F3:C8:F3:21:08:9E:CE:1C:D4:98:B2:C6:91:6A:48:86:DD:76:24
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0188473CC76CB1BA36EFDFAD2FD40AFAE53C
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/H_PI8yEIns4c1JiyxpFqSIbddiQ.roa
Signing time: Tue 23 May 2023 06:12:25 +0000
ROA not before: Tue 23 May 2023 06:12:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34412
IP address blocks: 5.57.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 May 2023 14:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:3c:c7:6c:b1:ba:36:ef:df:ad:2f:d4:0a:fa:e5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 23 06:12:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ff3c8f321089ece1cd498b2c6916a4886dd7624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:72:c7:d0:0c:82:11:83:18:3a:ad:72:39:28:
fd:10:04:f4:a5:dc:86:d2:cd:18:75:18:f2:66:48:
90:c5:de:94:6b:6c:42:0d:1f:19:48:44:cc:bc:36:
ca:e3:62:1e:e7:02:a0:a3:02:a8:f1:8b:49:9c:e0:
85:bb:59:d0:3b:a6:47:b0:07:01:0d:e4:44:af:0b:
aa:fa:84:05:f7:8e:45:b4:a8:3d:73:11:0b:b6:18:
8a:0e:20:43:7b:c7:aa:0d:3f:47:0d:c2:68:87:d4:
0b:11:b8:87:e9:a9:ab:3e:94:62:34:11:73:d9:55:
2c:ef:fc:6c:82:1d:a7:22:37:39:e6:27:22:1e:8e:
3c:51:23:dd:a0:4d:8f:78:f5:f6:1b:a3:4a:d3:9d:
d4:06:21:c3:a3:4b:8c:9b:b0:61:8f:3f:5d:7e:f8:
05:72:ee:49:07:19:07:c2:6d:3f:e4:99:de:68:0f:
51:74:48:5e:eb:13:1e:2a:68:f6:51:26:3c:8b:fc:
e3:7f:08:05:09:86:c4:ea:2e:b7:9e:ad:90:f1:30:
f0:e7:a4:79:b4:50:27:11:88:22:e7:1f:47:7c:30:
ca:af:6b:0c:f0:9c:28:d3:7f:ad:d9:aa:1a:6d:46:
39:34:03:3d:99:5b:c3:27:cb:16:20:31:a4:24:75:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F3:C8:F3:21:08:9E:CE:1C:D4:98:B2:C6:91:6A:48:86:DD:76:24
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/H_PI8yEIns4c1JiyxpFqSIbddiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.37.0/24
Signature Algorithm: sha256WithRSAEncryption
48:84:71:7f:b3:c7:17:e8:cf:a9:0c:71:51:ae:57:57:d7:59:
b5:fe:20:ac:5a:b2:49:60:ce:2b:a7:3d:ec:7f:d1:ed:c2:8c:
68:fb:17:a5:25:6c:4d:f7:56:ef:a5:f2:fe:fe:4c:74:36:8f:
99:e8:62:7c:04:33:58:c8:37:3f:0a:4e:f7:6c:d3:ca:cc:71:
19:fc:fa:5f:8e:2e:ce:4a:cf:77:5a:0f:f5:8b:67:3d:14:f6:
47:68:5a:30:06:47:a8:e2:40:90:9f:63:54:14:f1:53:ae:2c:
de:19:6b:80:34:2f:02:1d:f0:22:6a:ce:1c:f4:79:94:67:a7:
d4:db:9f:04:6a:ec:8c:f5:9e:ff:99:04:92:01:9d:ea:fc:20:
64:6e:6c:8f:4c:56:47:7e:e3:46:3b:fd:1f:e8:6e:bf:e7:f9:
43:24:07:22:bb:8a:17:ec:51:90:c6:54:c9:2c:49:10:32:3b:
4e:7d:06:62:a5:19:6f:da:98:85:8c:e3:b7:9b:5e:78:1a:67:
75:1f:dd:ab:f8:ab:34:86:7f:21:30:9d:a0:d9:1b:c4:a3:33:
36:01:20:e3:df:0c:c5:7a:0e:e1:40:3c:68:6e:b1:c2:64:06:
e9:a8:f9:20:78:f8:f1:09:da:de:74:14:6b:6c:1d:25:bc:60:
07:fc:81:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:29 2024 by rpki-client on console-fra.rpki-client.org