Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/741TWy9ej9M0LGW8fqR6ISxxvuc.roa
File: 741TWy9ej9M0LGW8fqR6ISxxvuc.roa (raw, json)
Hash identifier: g9fB28OCWrG/LppzyfESXRt1IgVnwj9RIvBJtkjxLE4=
Subject key identifier: EF:8D:53:5B:2F:5E:8F:D3:34:2C:65:BC:7E:A4:7A:21:2C:71:BE:E7
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 01856E2F8C0EC8E133B41B6D0F9D9B059BA7
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/741TWy9ej9M0LGW8fqR6ISxxvuc.roa
Signing time: Sun 01 Jan 2023 16:34:47 +0000
ROA not before: Sun 01 Jan 2023 16:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 5.181.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:8c:0e:c8:e1:33:b4:1b:6d:0f:9d:9b:05:9b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Jan 1 16:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef8d535b2f5e8fd3342c65bc7ea47a212c71bee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:97:47:2d:e4:7e:86:1d:77:ca:f2:42:0f:76:
21:ba:26:aa:c6:b5:c8:98:6a:cd:db:f4:8c:25:61:
44:17:ea:b9:f3:c3:81:95:89:e7:32:de:94:06:73:
52:5f:76:00:55:a2:2a:94:1d:6e:a8:30:fa:c6:8e:
92:96:23:4c:50:7c:41:8d:e2:fa:ca:b4:2f:aa:05:
8c:c6:1b:af:2f:88:94:4e:57:eb:11:15:46:40:1c:
45:44:03:fa:d4:02:67:a8:1a:f2:2d:1e:1c:76:9f:
00:85:5a:21:3c:e5:7e:41:11:ff:21:64:3b:19:9c:
a8:87:29:57:9e:d9:7b:8b:f0:55:09:bd:3f:23:94:
83:52:18:15:0b:36:f9:d3:9e:03:5f:5a:b6:6a:e9:
cb:62:b2:d7:79:36:4a:db:d1:69:df:8c:8f:25:38:
cd:5c:c0:51:ab:f9:6b:13:b9:04:30:f1:67:4c:4f:
b8:cc:5f:1f:ca:ee:da:51:5b:e9:f3:c0:ad:f3:51:
f5:ea:6b:78:9c:fa:89:28:ca:7a:de:b0:8d:78:b4:
ad:bb:3b:ca:d8:59:e4:b5:f7:04:f7:0e:cd:c1:b8:
51:70:04:ce:69:38:2d:d0:e5:88:0a:01:9e:71:c4:
57:9c:e0:08:89:e7:98:55:f2:0a:0e:0b:6f:55:48:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8D:53:5B:2F:5E:8F:D3:34:2C:65:BC:7E:A4:7A:21:2C:71:BE:E7
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/741TWy9ej9M0LGW8fqR6ISxxvuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:85:85:c5:cd:85:f2:f5:50:ad:62:23:d6:75:d0:97:9a:7f:
87:77:f2:57:0c:51:f0:45:ea:5e:10:9d:42:28:f3:d9:8d:16:
a8:5d:bd:ae:9a:7f:31:5f:87:72:e3:e5:c2:b9:d7:f8:c8:24:
25:0f:3a:3f:0c:0d:5a:5d:58:84:0f:25:ca:3c:33:30:57:bb:
d4:f4:65:57:27:56:5b:ec:31:17:b1:0e:12:4a:53:92:2f:13:
de:77:f3:46:dc:2f:78:1d:7a:85:ba:2a:66:56:78:e9:17:2c:
11:ed:53:31:71:03:77:61:92:a4:10:49:fc:22:87:4c:b5:cc:
31:56:2a:78:4b:b3:af:06:56:8c:32:ce:9c:c2:ae:5f:6f:08:
2d:ed:aa:8d:cf:b0:41:71:cb:03:32:81:9d:01:21:84:7e:08:
02:91:c5:ea:cd:85:86:cb:51:b8:e8:17:4c:b5:d3:2e:15:b3:
87:5f:eb:32:f9:b7:64:ed:3d:05:9e:1d:fd:58:b1:f2:a9:f9:
db:36:d8:0b:fe:e8:08:ea:04:7b:25:88:51:12:6b:28:39:8d:
cc:89:bd:ed:46:70:b1:23:6b:53:48:c7:b5:78:aa:50:c2:35:
fc:16:75:cc:67:75:50:58:0c:ab:4d:1e:4a:8a:e7:89:14:4f:
c4:d3:7e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:28 2024 by rpki-client on console-ams.rpki-client.org