Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/9WD6AooEjx8f64YvQZbmF-D6Uks.roa
File: 9WD6AooEjx8f64YvQZbmF-D6Uks.roa (raw, json)
Hash identifier: f+jyIHFCJS6hBUwjUKHfWO5Xaz4hBHmPZycyMDedU0g=
Subject key identifier: F5:60:FA:02:8A:04:8F:1F:1F:EB:86:2F:41:96:E6:17:E0:FA:52:4B
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 0189BF219D45FCE48CA77C1A7A8F91FC5DA2
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/9WD6AooEjx8f64YvQZbmF-D6Uks.roa
Signing time: Fri 04 Aug 2023 05:59:58 +0000
ROA not before: Fri 04 Aug 2023 05:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47913
IP address blocks: 5.252.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:21:9d:45:fc:e4:8c:a7:7c:1a:7a:8f:91:fc:5d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Aug 4 05:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f560fa028a048f1f1feb862f4196e617e0fa524b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c0:db:60:1d:d2:bf:02:32:dc:7f:dc:d2:88:
dd:9b:57:90:18:5b:a6:79:6b:c4:32:c8:e0:a2:8d:
ef:ec:a5:61:32:ce:74:76:13:a6:5c:a1:d8:03:f6:
38:7b:71:21:47:4b:b3:ee:9d:3e:49:9d:b1:6b:4f:
49:a7:fd:94:c5:cf:e4:6f:b7:4e:20:fd:84:b9:0c:
e8:3f:69:e9:f9:15:49:f0:da:96:fa:14:9b:47:c9:
14:d1:d9:d3:ea:89:0d:d7:2b:11:2b:89:eb:42:23:
61:f2:fe:75:63:e9:e8:56:57:d3:ca:62:d6:20:6f:
07:1b:d9:5a:17:71:60:09:bb:d2:c3:50:4d:2e:40:
a6:a3:dc:e3:03:0b:97:84:b4:00:d8:c4:35:0f:58:
10:b4:01:9e:bf:8a:b6:29:c3:92:fe:b8:cb:83:7d:
4c:fc:ab:d9:54:04:5a:f0:cf:f5:90:a6:33:78:89:
64:da:a8:fe:28:84:a6:c1:ba:ba:63:e0:59:24:21:
91:f5:18:7c:48:9f:01:f6:8c:4b:f2:29:61:07:67:
f8:3d:d1:33:06:4f:78:5d:85:03:c8:7f:77:e4:fd:
22:ed:40:55:18:af:dd:5b:c5:a8:f0:2d:ca:50:82:
f4:86:97:ca:04:1e:c9:da:0c:fc:78:03:fa:7e:f0:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:60:FA:02:8A:04:8F:1F:1F:EB:86:2F:41:96:E6:17:E0:FA:52:4B
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/9WD6AooEjx8f64YvQZbmF-D6Uks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:33:38:fa:cb:de:ba:7c:d5:a8:5e:1b:9b:81:d5:c3:6f:5f:
af:9f:d4:3d:d7:bd:e7:7d:25:bf:9d:db:35:8e:37:96:85:64:
ec:74:7d:3d:ad:69:a7:db:71:2b:45:34:f0:f9:e4:6d:ce:7b:
2e:8e:42:ea:cf:d0:41:1a:d2:86:1d:c3:c4:59:dd:51:d0:62:
c6:c9:e2:c3:d5:f6:35:13:bd:e3:bd:eb:ac:c6:30:64:ae:84:
eb:ca:ce:42:5f:9a:dc:a6:e5:b5:e2:ef:01:5a:d7:da:7f:cd:
8f:13:1a:b2:4f:c0:35:27:67:b5:d6:c1:34:9e:8b:8e:d3:59:
e9:19:b3:31:01:f3:26:64:33:b5:96:8b:fb:00:8a:c8:85:0b:
9c:e0:39:5b:b6:22:df:a1:8a:75:55:19:a7:a0:56:f6:9b:bb:
46:71:e6:27:6b:4b:22:95:c6:c7:f9:72:4d:ca:0d:5f:27:bb:
4d:5a:dc:d9:1c:7b:b3:e7:80:5d:b7:14:43:4b:bb:75:7a:e3:
53:15:83:5a:c6:cf:9c:ad:c0:3f:a0:bb:aa:07:6c:0b:d5:b1:
d7:83:35:cf:4d:e1:56:26:64:36:c0:1f:39:65:45:1b:45:fa:
dd:56:22:a5:44:fc:eb:2b:6a:1b:72:f8:58:39:a9:66:b4:92:
64:fe:6f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:03 2024 by rpki-client on console-ams.rpki-client.org