Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/7tuE4uZ1gfcYyc8I9YrKC8Cv4Q8.roa
File: 7tuE4uZ1gfcYyc8I9YrKC8Cv4Q8.roa (raw, json)
Hash identifier: 3dRgsQO4aHEldBZNa1skXPRrM2SgPHU7oNY8MJE7i5o=
Subject key identifier: EE:DB:84:E2:E6:75:81:F7:18:C9:CF:08:F5:8A:CA:0B:C0:AF:E1:0F
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 0185730CE53E93986A5BCE25FEB952C17E8B
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/7tuE4uZ1gfcYyc8I9YrKC8Cv4Q8.roa
Signing time: Mon 02 Jan 2023 15:15:02 +0000
ROA not before: Mon 02 Jan 2023 15:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59796
IP address blocks: 5.252.32.0/24 maxlen: 24
5.252.35.0/24 maxlen: 24
5.252.33.0/24 maxlen: 24
5.252.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 08:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:e5:3e:93:98:6a:5b:ce:25:fe:b9:52:c1:7e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Jan 2 15:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eedb84e2e67581f718c9cf08f58aca0bc0afe10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:01:fa:bc:c2:b5:f0:b7:64:ba:76:63:21:
22:6c:40:9e:21:9f:84:94:12:c0:08:5e:ba:10:a5:
56:94:9a:ee:2c:2d:97:e6:16:78:d3:c5:95:77:d5:
3e:bd:1a:92:07:61:ed:bf:ca:f1:13:4d:fd:80:22:
b3:9a:12:7a:5b:47:e9:d4:0d:61:f7:bd:4b:f5:e1:
e1:93:5a:ee:37:43:51:1d:6b:87:9a:9d:0b:67:0b:
ee:aa:b3:94:32:2b:a8:0b:2e:9c:a4:10:c7:a6:55:
98:93:5f:54:a6:25:de:5d:01:82:fd:a2:29:8e:1c:
cf:c4:ff:04:c6:19:08:b9:93:f0:45:34:30:e4:df:
70:37:8c:0e:8c:20:46:69:70:7a:dd:25:eb:65:52:
8e:2d:e9:31:79:f6:2e:b6:d7:3a:f7:25:58:c5:3e:
5f:5e:bb:a4:93:a1:71:75:e7:d8:b7:03:59:a3:bd:
01:15:e9:f6:90:46:6d:b4:05:d6:de:7a:31:36:51:
a5:3d:3e:c5:cb:b3:b7:3f:b3:fa:95:5d:e5:47:a7:
10:39:30:16:18:91:9b:14:be:00:f4:e3:be:c0:5c:
46:69:2c:e6:e8:a5:25:17:e9:be:5b:41:21:02:48:
8c:1c:64:33:4d:9f:55:ef:13:3a:2b:e8:3b:91:15:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DB:84:E2:E6:75:81:F7:18:C9:CF:08:F5:8A:CA:0B:C0:AF:E1:0F
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/7tuE4uZ1gfcYyc8I9YrKC8Cv4Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.32.0/22
Signature Algorithm: sha256WithRSAEncryption
74:f5:5c:ab:ff:1f:f2:93:44:b7:9f:98:8c:34:51:af:5d:b0:
af:85:db:ab:d2:67:42:47:bc:21:98:9a:3a:25:63:97:26:f5:
99:8c:3e:6a:d2:02:f7:af:68:1d:b8:d4:74:5b:78:48:58:a3:
cd:c3:9c:fe:0c:cf:4b:db:5f:f3:24:03:01:59:1b:a7:ed:bb:
22:10:1c:43:33:83:60:39:39:03:41:54:09:2a:21:41:fe:e2:
91:07:69:6d:69:9e:d8:8d:7b:a0:37:51:16:33:c5:a5:dd:d0:
82:fa:ce:67:66:8d:d3:f0:7a:4e:cd:3a:de:88:00:4f:4d:64:
fe:0e:61:63:14:2c:fe:eb:9e:22:dc:bb:af:d8:86:3a:12:91:
80:b1:61:b6:e2:4e:74:c2:e5:d8:e7:29:1e:86:d4:7b:d9:0a:
7b:6d:3d:9a:a3:cd:aa:46:8f:79:8e:02:e4:25:7f:d3:8b:b3:
51:a6:6c:e4:3a:9e:d8:29:b0:02:7c:c5:c3:95:8e:aa:ef:0c:
6b:93:3d:64:a6:d0:5a:3f:61:fd:29:1e:02:46:6d:13:0f:b1:
46:69:52:0b:73:28:46:e9:d4:48:72:d4:db:a3:4b:ff:1c:0e:
b1:4d:80:38:dd:24:4d:48:47:aa:0b:15:8d:2b:b3:99:a9:5d:
e1:3b:c1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:47 2024 by rpki-client on console-fra.rpki-client.org