Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/8_UBLMFbin1OTHX8UnEvE_i2dO0.roa
File: 8_UBLMFbin1OTHX8UnEvE_i2dO0.roa (raw, json)
Hash identifier: dkLyiwtJ1i+vl3VdsgCdZgXjtTn1wt2IQZrbfxGWzUc=
Subject key identifier: F3:F5:01:2C:C1:5B:8A:7D:4E:4C:75:FC:52:71:2F:13:F8:B6:74:ED
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 018DCFF79F15FA7D343AE6E2C5D47E95DC4D
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/8_UBLMFbin1OTHX8UnEvE_i2dO0.roa
Signing time: Thu 22 Feb 2024 08:38:48 +0000
ROA not before: Thu 22 Feb 2024 08:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204963
IP address blocks: 5.255.84.0/24 maxlen: 24
5.255.89.0/24 maxlen: 24
2a00:1ca8:89::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Apr 2024 11:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cf:f7:9f:15:fa:7d:34:3a:e6:e2:c5:d4:7e:95:dc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Feb 22 08:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3f5012cc15b8a7d4e4c75fc52712f13f8b674ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:ba:ed:9c:01:a5:68:bc:26:54:d1:4b:0f:
8a:31:f2:6a:54:f3:91:61:e6:44:df:e4:3e:19:77:
1e:a9:f1:43:36:3d:b3:94:81:99:ba:ea:b3:a8:88:
ee:3e:73:95:8a:91:85:e1:44:1b:aa:a6:f2:0e:55:
78:49:81:c8:cb:9e:bb:03:f7:59:db:6d:b5:96:e3:
da:bc:d9:87:98:36:9b:11:66:1f:88:e2:2e:58:43:
cb:bb:a1:fe:7a:40:93:60:18:c5:64:f6:ad:eb:f1:
b1:9b:c1:2b:13:85:bf:07:cd:39:bc:5f:8a:9c:c5:
22:6f:8c:65:6d:51:e5:c4:4e:08:7d:7e:43:82:0b:
b9:d5:1e:2f:00:da:64:65:f4:c1:a8:61:2d:2d:6c:
5b:3e:75:94:f8:14:59:89:ab:e1:98:12:e0:bb:15:
ba:1d:dc:71:3e:b5:65:1d:fe:ea:7e:05:57:3d:1f:
43:90:d9:3e:b1:42:cd:e6:a9:4e:d8:e3:20:81:33:
79:76:04:d1:90:fc:04:c4:2c:a6:14:73:0b:a6:29:
4c:aa:34:ad:47:da:b7:07:1d:98:ec:bf:e9:15:55:
9e:9d:23:2e:1e:6e:20:46:2f:9d:d7:6b:09:10:8d:
27:3b:aa:df:dd:40:6c:fd:d4:bb:3d:18:a3:8d:3d:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F5:01:2C:C1:5B:8A:7D:4E:4C:75:FC:52:71:2F:13:F8:B6:74:ED
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/8_UBLMFbin1OTHX8UnEvE_i2dO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.84.0/24
5.255.89.0/24
IPv6:
2a00:1ca8:89::/48
Signature Algorithm: sha256WithRSAEncryption
63:fe:a2:f2:60:31:2a:d2:87:ac:ef:71:f5:29:8a:4c:f3:cf:
2d:9b:90:f5:72:04:5e:c4:31:c3:ff:cd:82:bc:e4:07:32:56:
d8:f0:12:8a:ae:4f:c3:a9:f8:65:80:a5:a0:ae:a0:f6:ed:1a:
f3:4e:59:82:91:04:32:16:cc:03:df:30:47:42:d2:d0:e2:a9:
ab:cb:9b:50:c4:e0:8b:02:c4:31:62:b7:11:26:bc:4b:0d:79:
e5:72:82:1d:a1:31:4a:36:81:d1:11:fb:99:93:df:19:ca:b1:
b8:4a:20:5e:2c:70:a0:48:de:7f:30:ed:7d:9e:c1:59:e9:e6:
34:1e:47:88:cb:ac:ba:48:c5:ba:b5:76:40:34:d7:ee:2e:1b:
19:14:99:a1:27:2b:23:58:0d:aa:15:4b:bd:12:8f:86:6c:0f:
94:8c:cd:00:49:39:7c:24:d3:5c:87:70:60:14:37:c3:f9:5d:
6e:13:aa:d5:ca:c8:fb:66:05:38:fd:2a:87:5c:db:ab:2e:26:
46:30:a7:f9:df:8f:13:41:03:f1:ad:14:36:dc:0f:8e:71:7d:
66:7a:80:0b:7d:1d:df:1d:f5:2d:6a:7d:c5:64:25:1c:eb:36:
73:dc:ec:e6:90:c9:28:48:f7:2b:4a:8f:6f:9b:6d:73:1a:20:
7b:d0:0e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:48 2024 by rpki-client on console-fra.rpki-client.org