Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/__c-nUp4_E3Vn25MHLz-UUDaAzU.roa
File: __c-nUp4_E3Vn25MHLz-UUDaAzU.roa (raw, json)
Hash identifier: uqT6tutQSG9GFoxBxtKSDlzYM+ggxxFTe1dwHot72uI=
Subject key identifier: FF:F7:3E:9D:4A:78:FC:4D:D5:9F:6E:4C:1C:BC:FE:51:40:DA:03:35
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018FABE99330DA42C67FAB4CA78911C4A145
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/__c-nUp4_E3Vn25MHLz-UUDaAzU.roa
Signing time: Fri 24 May 2024 18:42:42 +0000
ROA not before: Fri 24 May 2024 18:42:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 5.253.45.0/24 maxlen: 24
45.9.6.0/24 maxlen: 24
45.66.152.0/24 maxlen: 24
45.66.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 09:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ab:e9:93:30:da:42:c6:7f:ab:4c:a7:89:11:c4:a1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 24 18:42:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fff73e9d4a78fc4dd59f6e4c1cbcfe5140da0335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:12:de:9b:42:13:2b:c3:ab:53:b2:44:56:
a7:94:47:6b:39:56:49:fb:f0:38:1a:24:b4:d4:97:
43:52:93:7c:21:55:a0:b3:82:68:d5:e9:05:48:d9:
1c:f7:9f:2d:65:e6:24:2d:8e:ef:fe:1b:8a:48:c0:
53:27:a1:42:9b:ba:73:e0:f2:16:ba:3e:f2:14:4c:
ad:c0:33:7b:5e:73:32:fc:ed:dc:63:13:e5:56:f3:
7f:15:5a:39:2f:ab:bd:67:f0:de:09:ab:cd:b7:1c:
c4:39:27:45:92:14:61:ab:b8:10:9c:ae:3f:09:c5:
18:54:6b:8e:1b:23:3a:64:ec:c7:ac:31:7c:b8:42:
61:1d:e3:36:cf:38:2e:a6:4a:b1:49:4b:ef:97:1f:
98:f0:e1:3c:38:0f:40:3f:0d:45:99:3a:34:ee:ac:
78:17:52:df:b3:8f:82:92:36:47:32:a4:9e:c5:d7:
41:72:94:c3:a4:ca:ad:d5:a2:2e:a2:34:69:4c:cd:
fd:08:43:42:f6:2a:f1:82:fa:2f:2d:85:70:a1:f5:
91:22:55:82:4f:6b:25:a6:37:33:aa:7d:0b:4d:3b:
c4:c3:5f:c1:41:cb:2f:4d:20:c0:d7:d5:0b:24:f4:
67:b4:75:b8:1d:ec:7e:2b:fd:1d:9d:c9:3f:46:a5:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F7:3E:9D:4A:78:FC:4D:D5:9F:6E:4C:1C:BC:FE:51:40:DA:03:35
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/__c-nUp4_E3Vn25MHLz-UUDaAzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.45.0/24
45.9.6.0/24
45.66.152.0/24
45.66.154.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:71:52:c4:95:82:9a:d9:ce:15:35:a3:e8:fd:05:33:8f:93:
2e:7a:85:e8:0c:27:50:44:ed:8e:7c:8a:d5:8e:a1:95:1f:a4:
28:b0:a0:84:1c:72:c7:21:58:21:3f:81:7a:3f:b2:00:5a:e1:
56:cd:3d:45:c7:e4:ec:96:04:0d:78:52:b3:9c:c5:9f:93:17:
3f:3d:07:a2:3c:e6:4a:07:df:0c:e5:6a:f1:a9:96:64:1a:b3:
44:56:cb:ee:65:c1:19:1e:63:7b:39:f4:50:51:c4:f5:b7:8c:
13:58:44:e1:c8:45:d6:da:94:82:29:a1:91:ab:23:70:e7:e5:
a6:8d:3c:ff:09:92:f3:aa:de:3d:06:19:f5:5d:fb:86:9c:19:
ba:68:6e:a3:60:6d:f2:5c:96:1c:e2:a1:ca:3e:5b:77:58:63:
8f:92:ac:39:1a:a5:ae:c9:12:7e:82:19:28:4e:1f:2e:04:71:
90:74:d5:8f:6b:5d:2c:35:4b:bd:c1:54:03:a4:0a:4c:f4:f8:
84:cd:d8:e4:d7:d5:59:99:e6:5b:5d:6a:90:bc:61:73:8c:a6:
39:b4:37:3c:5f:07:db:b3:51:dc:43:df:84:08:35:48:cd:fd:
7e:31:e4:60:73:d1:c4:7c:4c:38:c7:f9:97:95:9b:52:38:a9:
86:93:8a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:32:29 2024 by rpki-client on console-fra.rpki-client.org