Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/FfVJXm4cfuP-keT1X6SIlX7g7uU.roa
File: FfVJXm4cfuP-keT1X6SIlX7g7uU.roa (raw, json)
Hash identifier: GZTRIsV2ZY9RY5iXHr6yJcpvGX2Ail6+DHpcnc2O/6Q=
Subject key identifier: 15:F5:49:5E:6E:1C:7E:E3:FE:91:E4:F5:5F:A4:88:95:7E:E0:EE:E5
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 0185730CE44445E92F6CB5DCADAC62E59470
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/FfVJXm4cfuP-keT1X6SIlX7g7uU.roa
Signing time: Mon 02 Jan 2023 15:15:02 +0000
ROA not before: Mon 02 Jan 2023 15:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42745
IP address blocks: 5.252.32.0/24 maxlen: 24
5.252.34.0/24 maxlen: 24
5.252.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:e4:44:45:e9:2f:6c:b5:dc:ad:ac:62:e5:94:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Jan 2 15:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15f5495e6e1c7ee3fe91e4f55fa488957ee0eee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:64:ca:df:ce:75:1b:95:fd:bb:62:8f:f6:
f4:f1:8a:69:72:83:a3:48:52:f0:fe:f0:e9:62:be:
94:78:80:0a:cb:71:ed:6d:37:24:71:f6:6c:dc:62:
ef:b5:44:60:60:81:60:f0:06:3a:ed:de:81:d9:08:
71:12:b7:8d:4a:87:2f:bd:50:62:64:17:a0:42:92:
7e:a6:e2:77:00:3e:9f:2f:36:ca:7a:39:d1:ca:5c:
15:37:b8:89:a4:43:9e:d0:42:1c:a1:4f:09:9a:4c:
06:95:34:8f:64:dc:02:7c:55:93:f5:2b:fb:72:fa:
b7:4b:0f:a4:dc:e8:b7:0e:0e:5b:11:51:a8:32:5c:
33:5e:88:32:ba:89:47:05:50:1a:6b:bc:8a:66:8b:
6c:19:d4:1d:d7:dd:a7:d1:92:f6:e8:7b:25:bc:ac:
97:aa:8a:26:34:ce:e9:ec:43:22:7e:36:a1:e5:5d:
91:dd:49:e4:97:87:3d:77:3a:7f:6c:10:c2:79:b1:
3d:ad:86:36:19:f1:e6:32:c8:64:ef:5f:08:fe:b0:
db:3a:01:9c:1c:6b:d6:f2:ba:2b:8e:21:ee:76:2a:
16:cf:01:b6:6e:50:37:84:ca:1f:9a:bd:49:08:23:
05:4f:11:c9:65:4d:23:1b:92:e7:7a:8c:fc:f3:1b:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:49:5E:6E:1C:7E:E3:FE:91:E4:F5:5F:A4:88:95:7E:E0:EE:E5
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/FfVJXm4cfuP-keT1X6SIlX7g7uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.32.0/24
5.252.34.0/23
Signature Algorithm: sha256WithRSAEncryption
44:a3:4d:7d:60:55:17:ea:94:3b:2c:de:e4:db:c4:00:a8:0e:
bb:75:63:f1:e4:3b:19:6b:3c:18:2e:1c:e9:e5:d3:90:94:64:
1a:23:b8:47:bf:98:8f:3a:b2:7f:08:3a:7a:78:08:b7:5d:f9:
3a:c3:c5:9d:94:92:47:46:c2:f1:95:09:75:56:31:65:5d:cd:
d6:24:3d:bc:d3:0b:11:f4:fc:42:85:ba:4e:36:b8:f7:b2:73:
30:35:ee:37:8e:d6:ca:a7:78:35:dd:ed:7e:dc:3c:4f:20:ec:
ec:51:bd:53:e1:03:7c:c3:3d:87:ed:47:ba:03:8d:0d:64:ea:
65:47:58:e4:01:2a:5d:dc:6e:fc:bf:f6:15:8c:a8:f5:f8:60:
42:e3:38:6b:de:23:f6:9d:bc:76:be:d3:e4:7d:0b:74:03:ba:
5c:a9:31:e7:1f:63:31:15:95:06:59:4d:3d:df:d4:f9:ce:5b:
8b:7b:e9:8d:d8:6e:d1:ef:a8:49:16:10:ee:bd:ff:84:3f:3a:
12:f5:24:c7:12:11:5c:90:4d:53:d8:a4:12:6f:b8:40:59:c1:
23:d2:f0:76:e1:9a:fc:d1:3b:5d:92:d8:66:31:a6:ab:92:0a:
66:65:51:48:41:cd:40:ab:42:0b:b3:12:80:64:f3:af:b4:da:
aa:1a:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:25 2024 by rpki-client on console-ams.rpki-client.org