Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/5cyr-hoJfZuedPJcaDwa9uB6Td8.roa
File: 5cyr-hoJfZuedPJcaDwa9uB6Td8.roa (raw, json)
Hash identifier: 8cLsqz6wwlA4ZHjEpNvVR8HyjoBcSUkI24V1Yl8L9CQ=
Subject key identifier: E5:CC:AB:FA:1A:09:7D:9B:9E:74:F2:5C:68:3C:1A:F6:E0:7A:4D:DF
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 018D1883755D97F5DD9FA061F6B6C7D02235
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/5cyr-hoJfZuedPJcaDwa9uB6Td8.roa
Signing time: Wed 17 Jan 2024 17:41:24 +0000
ROA not before: Wed 17 Jan 2024 17:41:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 62.233.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 13:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:18:83:75:5d:97:f5:dd:9f:a0:61:f6:b6:c7:d0:22:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Jan 17 17:41:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5ccabfa1a097d9b9e74f25c683c1af6e07a4ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ef:ee:06:85:01:cb:6d:2c:94:f5:2c:79:04:
8d:a3:b7:7b:65:4e:c4:d2:59:68:18:1e:64:8d:39:
90:57:f7:76:95:dd:1c:1e:d9:2a:31:ef:4f:fb:e9:
bb:54:48:f6:68:f8:24:71:b7:f0:db:53:e8:b0:87:
5c:f5:90:5e:cc:56:ca:4b:27:21:ed:34:ce:28:0c:
1c:c6:67:ec:10:ca:55:7a:4a:ba:bf:57:06:a1:55:
87:2e:be:a1:8c:21:36:27:79:bd:6f:e6:ba:a5:1c:
67:65:21:23:8d:a4:0f:84:04:39:21:ac:35:22:72:
e4:cf:00:59:6e:19:a8:aa:13:e4:1d:90:26:21:fc:
7b:56:27:27:3b:7d:cf:3a:73:dc:ec:d4:7d:ef:90:
01:f4:65:be:0b:a6:f5:30:b7:58:8e:94:06:20:ab:
1b:91:3c:9f:26:41:83:34:9c:25:85:b6:ec:8d:34:
9b:75:8c:07:dc:10:8c:9e:57:25:c8:ba:e0:d7:64:
7d:53:53:e2:5e:29:5a:d0:33:6e:19:db:7c:db:f4:
c7:b6:49:9e:be:7c:30:6f:23:bc:07:35:39:b6:d8:
44:cc:95:3e:92:9b:7c:0a:b4:9e:54:20:e4:dc:52:
eb:10:26:27:16:9e:b6:4f:99:5e:38:eb:68:e8:9a:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:AB:FA:1A:09:7D:9B:9E:74:F2:5C:68:3C:1A:F6:E0:7A:4D:DF
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/5cyr-hoJfZuedPJcaDwa9uB6Td8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.51.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e4:cd:4e:33:20:c2:21:d7:63:ec:c5:ee:10:6c:bb:99:89:
c9:ea:11:f1:ef:de:4a:8d:55:f0:01:70:be:ca:ba:22:f0:52:
f7:18:99:3d:0a:bf:54:af:9f:65:cc:cc:51:b9:b0:3e:22:09:
0d:91:7c:ad:24:49:a8:f7:c7:46:a0:7d:8a:6b:ba:56:3b:33:
15:99:f4:f4:3d:77:05:c6:68:44:95:39:f9:d7:3f:9f:b6:81:
a9:b5:c4:60:4c:55:81:5f:b7:0b:ef:36:0f:a3:88:3d:60:95:
66:34:64:5e:f7:45:97:62:2c:1e:de:ef:3b:57:58:55:8f:b5:
08:5a:8c:9b:1a:ae:65:62:de:9a:ff:f6:79:75:1b:60:50:7e:
c2:13:d5:33:e6:60:bf:b5:c7:9f:fd:37:ea:16:23:90:ec:ad:
33:26:7a:4b:3b:2e:09:19:bd:87:00:3d:71:a7:c5:81:3e:59:
e0:dd:d2:d1:7d:84:2b:87:93:44:03:71:0a:72:aa:22:7c:0e:
fb:89:f5:8e:01:89:81:38:75:91:ca:81:9b:50:6d:78:60:a1:
3f:31:e6:c1:29:8e:38:d3:c9:2b:c5:d3:5f:39:0e:16:f8:1e:
0c:fc:46:54:1b:55:74:4c:6b:7b:c9:dc:47:55:7c:af:63:48:
9b:9a:8f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:02 2025 by rpki-client