Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/uAHgiEEORbKKMfN23HJHM0DeGBs.roa
File: uAHgiEEORbKKMfN23HJHM0DeGBs.roa (raw, json)
Hash identifier: whJbL1j34yhiI4JqjRsiEonOqAo9rt5mbt9o61bPgvY=
Subject key identifier: B8:01:E0:88:41:0E:45:B2:8A:31:F3:76:DC:72:47:33:40:DE:18:1B
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 01856B80F393D97F2C7CF21649708E003AFF
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/uAHgiEEORbKKMfN23HJHM0DeGBs.roa
Signing time: Sun 01 Jan 2023 04:04:51 +0000
ROA not before: Sun 01 Jan 2023 04:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47123
IP address blocks: 5.253.251.0/24 maxlen: 24
5.253.248.0/24 maxlen: 24
5.253.249.0/24 maxlen: 24
5.253.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:80:f3:93:d9:7f:2c:7c:f2:16:49:70:8e:00:3a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Jan 1 04:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b801e088410e45b28a31f376dc72473340de181b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:a1:d8:a3:6a:cf:60:29:91:6f:09:a7:e6:
6f:eb:da:c7:14:6c:ec:9f:4e:39:6f:7a:33:ca:18:
d5:86:ea:47:54:5e:7b:af:60:12:0e:79:b7:3c:28:
89:43:69:ab:a5:f6:ac:d8:7c:77:38:c8:32:8f:3a:
2b:f3:40:dc:46:f0:70:c2:02:b2:94:e6:fd:69:85:
bf:62:1e:be:04:37:35:8a:43:1d:82:3d:4e:03:db:
45:2c:97:0f:bd:f3:b6:7c:71:75:69:b1:1b:fe:cd:
16:49:ff:e9:5d:4d:02:d7:c7:dd:99:24:04:3b:02:
b2:8f:2c:59:b9:50:c3:24:ef:78:69:4f:33:10:0e:
09:b5:c0:cd:88:8f:93:25:88:7f:a7:76:83:c2:34:
d0:8e:2e:8a:8a:c6:ed:bf:fb:a0:59:10:c5:63:48:
03:c3:78:c5:d8:7c:5d:a2:0f:c3:7e:04:e7:5f:80:
a4:fc:bd:a9:ca:5c:bb:bb:5b:c1:3c:61:d9:2f:cd:
0e:d8:98:9b:c2:dd:59:08:5a:58:dd:e4:7a:66:4d:
3a:d8:06:fa:56:14:69:45:6c:d0:07:63:ea:34:49:
c9:da:5b:5d:16:e3:c7:fe:1b:a9:8e:68:3b:59:20:
5d:11:00:c6:1e:9a:9a:a1:13:f4:76:e9:67:48:47:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:01:E0:88:41:0E:45:B2:8A:31:F3:76:DC:72:47:33:40:DE:18:1B
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/uAHgiEEORbKKMfN23HJHM0DeGBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.248.0/22
Signature Algorithm: sha256WithRSAEncryption
78:17:87:9d:bc:24:73:92:b1:d3:4e:c5:f2:1b:d6:9c:e4:c1:
ad:02:bf:12:69:34:2d:af:23:93:2e:af:19:31:df:53:c5:53:
df:48:83:b9:a2:fd:f6:40:2a:be:4e:32:96:68:ee:5c:f1:6a:
b1:6e:22:54:10:2c:5c:9f:6a:89:50:2e:9f:56:92:f3:b4:8e:
2d:93:20:90:bb:4d:ef:6e:7a:cb:65:0a:af:c3:d8:cc:f3:a8:
86:2b:fe:da:bd:d8:f0:53:c0:e3:47:e6:7c:42:8c:d4:b7:76:
c5:11:1e:af:a4:c6:6c:03:b6:aa:cc:7b:4e:89:e0:e3:e0:44:
56:7c:2e:69:88:0f:ab:92:ec:13:11:ad:22:37:7b:ac:a2:93:
71:d3:eb:a3:7e:3e:99:b7:e3:b9:00:a6:63:69:7a:b2:b9:f5:
45:1d:b3:4b:92:49:9d:29:68:0e:4e:f0:2e:15:ec:4b:d8:e4:
58:ee:9f:4a:e4:15:d2:eb:87:f7:38:b4:02:e8:61:4f:70:e5:
29:54:e8:7e:70:02:71:f3:a4:c5:12:cc:93:d5:2c:91:b6:a8:
7a:fd:e3:45:14:c6:06:81:92:aa:05:ed:a0:0a:83:93:8c:0f:
39:5e:33:39:d7:e8:36:97:35:9d:2e:94:20:43:d0:8f:15:6f:
4a:c0:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:25 2024 by rpki-client on console-ams.rpki-client.org