Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/XYxYLfHd0EYiIGqd1I6B7uDYXjI.roa
File: XYxYLfHd0EYiIGqd1I6B7uDYXjI.roa (raw, json)
Hash identifier: 9FBbpwPQYXWaFkwp2Hi/rQ0WrDAJTPTg5C+RMOTcBP0=
Subject key identifier: 5D:8C:58:2D:F1:DD:D0:46:22:20:6A:9D:D4:8E:81:EE:E0:D8:5E:32
Certificate issuer: /CN=24f410a4a0e72143884da8443be8296a81a29908
Certificate serial: 01856FC2A11B416DB00FD51F172FEA8A52BD
Authority key identifier: 24:F4:10:A4:A0:E7:21:43:88:4D:A8:44:3B:E8:29:6A:81:A2:99:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPQQpKDnIUOITahEO-gpaoGimQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/XYxYLfHd0EYiIGqd1I6B7uDYXjI.roa
Signing time: Sun 01 Jan 2023 23:55:04 +0000
ROA not before: Sun 01 Jan 2023 23:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210855
IP address blocks: 5.181.53.0/24 maxlen: 24
2a05:5f80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:a1:1b:41:6d:b0:0f:d5:1f:17:2f:ea:8a:52:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f410a4a0e72143884da8443be8296a81a29908
Validity
Not Before: Jan 1 23:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d8c582df1ddd04622206a9dd48e81eee0d85e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:c5:4c:fb:43:93:20:07:a1:96:f2:4f:13:
a4:bf:54:35:a0:36:74:78:79:ba:7d:f4:d5:f8:84:
e1:0a:79:c2:34:92:0c:c5:f1:88:5f:e2:df:2b:ab:
3a:f2:2a:2f:69:9c:0e:0a:e7:77:c3:50:f3:cb:3c:
98:e5:ad:c9:25:65:ea:e5:82:a0:d3:30:89:e4:a0:
5e:a4:fd:93:9f:b6:16:39:81:0c:81:21:36:c3:c5:
04:3d:c2:36:3a:46:50:98:55:b5:c0:29:94:0f:ad:
de:f9:c5:75:97:f8:3d:c8:ba:9c:76:63:30:96:d8:
ee:49:23:6e:58:e5:37:f2:76:33:14:7d:40:b1:7b:
4d:91:99:a1:09:37:3f:71:e0:fb:21:8e:69:b1:a9:
aa:12:15:49:ce:14:60:2e:bb:a4:8f:9c:e7:f2:8b:
f0:8f:91:c2:91:a2:68:4c:c1:60:46:97:8d:bf:47:
a0:1c:e6:eb:8e:bc:09:4e:69:41:84:df:2a:d5:cb:
6e:00:ae:ad:7d:e9:5b:e1:a4:4b:55:94:9e:32:71:
85:47:9e:75:28:5b:94:a6:fe:2b:c8:1f:79:b0:ed:
1b:12:40:47:8f:47:fd:f9:df:79:0c:4f:c9:3a:1f:
ca:af:98:a9:71:8b:b3:49:4f:31:b4:a5:2c:6a:ca:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8C:58:2D:F1:DD:D0:46:22:20:6A:9D:D4:8E:81:EE:E0:D8:5E:32
X509v3 Authority Key Identifier:
keyid:24:F4:10:A4:A0:E7:21:43:88:4D:A8:44:3B:E8:29:6A:81:A2:99:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPQQpKDnIUOITahEO-gpaoGimQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/XYxYLfHd0EYiIGqd1I6B7uDYXjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ceb681-05c1-4b17-b778-242e39609fe3/1/JPQQpKDnIUOITahEO-gpaoGimQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.53.0/24
IPv6:
2a05:5f80::/29
Signature Algorithm: sha256WithRSAEncryption
5b:08:bb:92:55:d9:7a:96:c4:b5:9d:5b:9d:08:ab:38:11:d0:
98:5d:89:91:92:c9:32:f3:81:17:6b:c1:d8:07:3f:a9:9b:0f:
7d:f5:61:17:4c:00:90:91:6b:b7:f8:fa:4a:70:88:a6:99:19:
5f:17:eb:0f:5a:7f:78:ba:37:32:5d:b9:b2:3c:e5:54:d9:41:
94:a5:2c:c4:31:55:f4:e6:43:3e:a5:77:10:8b:28:1b:14:07:
a7:d1:42:20:eb:c7:9f:d8:22:92:f7:b6:6c:3d:ac:d0:a2:35:
95:ae:06:a9:a0:83:d1:3c:47:e0:3e:77:36:96:71:dc:71:31:
45:15:e9:79:da:e9:5c:91:2e:16:a9:ad:c0:18:90:31:b4:c4:
92:f6:ac:4c:77:32:92:15:8f:38:0a:e9:2b:dd:46:32:6f:fe:
b8:45:c7:68:f1:95:a1:69:ac:91:06:60:87:68:7e:a4:86:9d:
4e:32:cc:e4:84:5b:12:99:b0:9b:2a:5c:62:42:bc:13:1d:54:
7c:1c:47:29:57:94:95:65:1f:87:dd:a9:5f:22:bd:e5:8a:d5:
f4:d3:30:24:38:85:fd:de:f1:9c:a8:0e:4d:64:9b:02:1a:61:
59:fe:95:27:05:c3:43:57:0e:0b:71:29:3b:26:b2:30:b7:d2:
9f:21:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:37 2024 by rpki-client on console-fra.rpki-client.org