Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/9KjZ-5RgKE0vxy6M_yDrIe1GkkU.roa
File: 9KjZ-5RgKE0vxy6M_yDrIe1GkkU.roa (raw, json)
Hash identifier: Az992AOdMucWOt+iDpUiOOIJVVAsvyBmBVrdONcFKHw=
Subject key identifier: F4:A8:D9:FB:94:60:28:4D:2F:C7:2E:8C:FF:20:EB:21:ED:46:92:45
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 018CC794FEAD945196EDD09C0DA2DAAD040A
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/9KjZ-5RgKE0vxy6M_yDrIe1GkkU.roa
Signing time: Tue 02 Jan 2024 00:31:19 +0000
ROA not before: Tue 02 Jan 2024 00:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205847
IP address blocks: 5.181.58.0/24 maxlen: 24
5.181.58.0/23 maxlen: 23
5.181.57.0/24 maxlen: 24
5.181.56.0/24 maxlen: 24
5.181.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 05:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:fe:ad:94:51:96:ed:d0:9c:0d:a2:da:ad:04:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Jan 2 00:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4a8d9fb9460284d2fc72e8cff20eb21ed469245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:a9:27:96:47:b5:b2:94:05:43:27:9d:69:
fc:f1:cb:52:89:c7:ae:9f:3c:98:af:1f:8a:99:30:
d9:9a:bc:b6:d4:61:23:3c:1d:cb:13:3a:f2:f4:4e:
2d:1e:a5:3d:44:80:e2:cc:64:3d:08:27:02:88:f7:
3f:15:75:50:d1:71:77:5e:0b:94:52:4b:bb:cd:53:
a9:1d:0c:86:b4:7d:18:4c:84:61:f2:89:09:e7:44:
b0:2e:82:58:79:dc:11:e0:bf:71:15:68:9e:ea:0a:
75:8c:ac:e0:c4:d3:91:4f:13:43:f9:f3:c6:3c:65:
d0:d0:0a:20:f9:55:c5:a6:5e:86:b5:fb:3f:56:68:
cf:9f:0d:5d:48:8f:5c:dc:17:60:2e:29:fd:71:62:
71:60:5f:0e:36:41:fe:5d:91:72:6a:88:7f:fc:77:
9d:e4:f7:83:4d:5b:0d:75:24:e7:b0:1b:64:0d:84:
6b:24:6e:06:61:27:3d:85:17:6c:62:9d:46:7d:33:
f1:54:46:95:32:d4:c6:2e:40:16:fe:95:32:ba:df:
8d:25:b1:a4:ab:ac:c2:38:77:79:c7:f5:36:a7:88:
d5:b0:70:00:3b:b7:12:7a:a1:cc:ea:92:d6:a0:94:
4f:ab:85:3f:a7:56:55:9f:50:44:8e:09:e7:0a:ee:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A8:D9:FB:94:60:28:4D:2F:C7:2E:8C:FF:20:EB:21:ED:46:92:45
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/9KjZ-5RgKE0vxy6M_yDrIe1GkkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.56.0/22
Signature Algorithm: sha256WithRSAEncryption
76:5d:b9:f3:94:4e:a4:0c:be:b3:9c:01:b2:42:4f:2c:cc:20:
4e:ff:60:42:7b:04:dc:30:6b:c5:e4:c6:71:ff:a0:d7:00:1f:
11:8a:ff:be:35:51:39:b8:4f:f5:12:ab:77:b9:dd:9f:fc:3d:
bc:aa:73:54:72:54:bb:eb:a4:47:05:67:ea:af:0c:4d:a2:83:
a9:c9:b7:c1:5f:0b:49:3c:df:73:07:7f:6d:47:90:a0:37:2e:
47:68:32:a0:7a:43:b6:10:30:02:32:03:be:c4:14:a3:45:0f:
ed:2d:3f:75:5a:40:3d:5d:bc:bb:49:de:9e:79:bd:8b:a2:82:
8c:28:48:58:62:2f:2c:3f:2b:a3:0b:32:66:87:8f:92:7c:26:
21:b1:40:50:c8:cc:27:45:be:fb:bf:61:aa:99:3c:21:b7:ca:
2e:bc:02:e8:cf:4b:7b:5c:30:82:8a:2c:89:67:2d:53:fe:90:
0e:b7:aa:8b:a3:48:76:6e:8a:2a:c1:c6:4c:91:53:e3:eb:e0:
d2:fd:78:a4:98:b4:1d:36:f8:44:ce:8e:91:eb:24:4b:3c:b2:
bc:43:24:15:18:e0:4d:67:0b:10:2a:73:71:af:9e:4a:68:8d:
01:50:9d:74:e3:73:01:cc:7f:3b:9e:3a:d3:ed:b0:3d:4b:35:
ef:2f:da:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:11 2024 by rpki-client on console-ams.rpki-client.org