Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/TS6fIkkptae-g_FpHe0LzlqO-Ro.roa
File: TS6fIkkptae-g_FpHe0LzlqO-Ro.roa (raw, json)
Hash identifier: K56SWu/p6KlDggSbeSAm7OHRFQM8Ph4+3vCagm4EYWI=
Subject key identifier: 4D:2E:9F:22:49:29:B5:A7:BE:83:F1:69:1D:ED:0B:CE:5A:8E:F9:1A
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018572C37CAD717AB13EA5AC490D8861342D
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/TS6fIkkptae-g_FpHe0LzlqO-Ro.roa
Signing time: Mon 02 Jan 2023 13:54:52 +0000
ROA not before: Mon 02 Jan 2023 13:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 79.133.180.0/24 maxlen: 24
5.253.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:7c:ad:71:7a:b1:3e:a5:ac:49:0d:88:61:34:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jan 2 13:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d2e9f224929b5a7be83f1691ded0bce5a8ef91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:64:1a:4f:7c:fe:5a:9a:8f:6c:90:02:95:
6d:ec:f6:cc:e9:88:cb:2e:69:42:84:ff:41:18:af:
bf:e7:63:b2:d2:51:a5:3f:d5:75:7a:58:49:04:61:
fc:8d:73:60:d2:34:68:a0:2c:88:47:95:8a:db:c1:
6b:68:ae:e7:e5:96:b9:32:61:aa:c0:13:ca:97:06:
cf:c5:bc:60:e1:75:66:66:a8:db:1e:88:96:25:c4:
6d:c6:54:5a:68:6a:00:d0:ef:99:9f:93:f3:32:25:
29:70:ef:5f:fc:f3:48:dc:07:d6:df:db:21:df:2b:
22:4d:a7:38:fe:76:6d:b6:a6:a7:6e:70:63:36:ac:
a2:9d:48:9f:3b:49:7d:d1:ae:43:c5:91:c4:3d:76:
73:f5:0d:74:97:51:d3:c5:59:a5:5c:f7:f0:44:24:
2e:21:9b:15:a9:a4:b2:30:8c:14:b5:8c:ff:af:5e:
c0:93:f8:26:29:ff:af:43:1b:63:b4:70:7c:40:12:
99:88:09:ec:c9:03:86:2b:26:19:91:36:a7:b7:f1:
6c:90:11:8e:3e:48:2e:28:fb:4d:74:e7:04:d9:5d:
b1:1b:50:aa:4b:ac:6d:05:f8:c3:42:e9:1d:a3:c8:
7e:9c:16:38:62:b7:1f:76:0d:dd:73:5e:c7:ce:d1:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2E:9F:22:49:29:B5:A7:BE:83:F1:69:1D:ED:0B:CE:5A:8E:F9:1A
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/TS6fIkkptae-g_FpHe0LzlqO-Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.63.0/24
79.133.180.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:81:8c:8e:7b:14:44:05:de:29:6c:06:da:a5:1b:81:12:cd:
8a:fa:20:ef:87:e9:eb:45:20:a0:8d:7c:85:ee:1a:f5:f2:15:
bc:97:f2:ef:f4:56:ae:3e:3d:65:08:0b:7d:72:0b:20:38:ea:
7e:fd:ef:c7:a0:e1:c9:4d:1c:4e:b9:40:3b:81:58:76:41:bd:
4d:11:30:02:ad:a5:01:f2:5a:d4:1c:0d:c2:e3:68:89:4f:6f:
e4:db:66:f4:7d:56:71:04:db:a4:d9:ca:a7:36:90:e1:7b:6e:
26:bc:0f:18:63:18:1e:49:9b:60:b0:c5:72:a4:b4:7d:d7:c1:
d9:fe:3f:0f:5e:49:a9:37:cc:f6:35:82:97:f1:07:cc:52:0b:
f0:24:3d:9d:00:40:b7:3d:3a:41:5c:69:a3:e0:a7:d9:d3:d8:
65:57:af:de:2d:9f:1b:e9:ef:2d:b7:c6:16:25:c6:b2:23:6b:
49:89:82:9a:13:91:ef:93:dd:ba:9d:31:79:df:80:22:f4:c6:
29:25:33:72:c0:c9:ec:63:2b:d8:cd:a8:14:32:ae:f0:42:08:
37:af:e2:11:4c:7e:46:9d:77:3e:48:d5:c2:b0:11:43:ed:25:
35:36:1b:d8:3c:62:b5:76:2f:6f:36:6a:e7:08:2b:75:f3:a2:
06:74:b9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:36 2023 by rpki-client on console-fra.rpki-client.org