Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/BkpnYhQMthzg-HYlZ6xgHRx7p-c.roa
File: BkpnYhQMthzg-HYlZ6xgHRx7p-c.roa (raw, json)
Hash identifier: sCP6A9/5FXFV2BAjesgZKvSxYhwLanKTOVNTN2i9j+c=
Subject key identifier: 06:4A:67:62:14:0C:B6:1C:E0:F8:76:25:67:AC:60:1D:1C:7B:A7:E7
Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial: 018A26E3D46DDFB8D07765641C3D22D56CC5
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/BkpnYhQMthzg-HYlZ6xgHRx7p-c.roa
Signing time: Thu 24 Aug 2023 09:32:59 +0000
ROA not before: Thu 24 Aug 2023 09:32:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 5.252.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:26:e3:d4:6d:df:b8:d0:77:65:64:1c:3d:22:d5:6c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
Validity
Not Before: Aug 24 09:32:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=064a6762140cb61ce0f8762567ac601d1c7ba7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:92:10:48:a2:59:43:9c:fe:f6:87:f1:bc:57:
6b:b7:bc:b6:63:18:c0:2d:c8:a4:f2:67:88:65:32:
79:5f:29:b5:32:b4:ea:9b:9f:52:8d:66:c5:a5:66:
4f:ad:5b:3f:c0:98:da:5c:df:d9:b2:a1:c5:ba:79:
3e:28:6e:51:80:16:df:80:ad:11:d0:a2:33:87:65:
35:1a:67:60:60:59:54:82:b0:50:8f:1a:0f:f1:f2:
67:ce:27:11:46:a6:b5:aa:0d:cd:1b:16:11:56:4a:
9f:b0:ad:ab:8a:79:bb:58:4c:d0:f5:e1:82:00:84:
a5:66:b8:93:4f:c8:f0:13:5a:da:1e:8b:ba:25:04:
01:1c:06:af:1c:d1:43:94:be:e3:6e:50:c8:20:97:
56:7a:11:8d:80:98:94:22:8d:c4:d6:3e:c5:ba:8b:
e5:a3:3c:02:9e:fc:9e:03:cb:12:82:8f:15:0c:1b:
1b:ff:34:cf:8c:a1:db:01:ad:f1:22:7d:77:3e:cb:
1c:ee:2e:25:81:58:b4:48:ff:1c:eb:c1:a4:fd:db:
72:e9:7e:f3:e9:fb:b1:0e:62:73:1f:fd:da:be:ec:
23:49:38:ca:07:c5:5d:98:e9:80:31:50:2b:67:96:
fc:cb:8b:bf:c0:a6:59:2c:44:e2:f3:dc:e5:2b:a9:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4A:67:62:14:0C:B6:1C:E0:F8:76:25:67:AC:60:1D:1C:7B:A7:E7
X509v3 Authority Key Identifier:
keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/BkpnYhQMthzg-HYlZ6xgHRx7p-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.152.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:79:a1:36:09:34:a8:31:d1:a5:8a:54:f5:75:9e:93:ef:a8:
95:5b:a4:89:c1:af:2d:70:06:9c:51:76:03:dd:52:4f:d3:92:
d3:0b:de:26:6e:49:2c:b8:2f:e0:a0:42:76:24:ef:9b:92:c8:
eb:7f:42:6c:70:17:25:4c:4c:0e:11:4a:24:d8:ab:9f:68:54:
64:56:5a:c8:a8:54:cd:b4:d3:90:28:b2:0a:7e:2f:a8:b4:96:
3f:65:87:93:15:0e:5e:6c:18:a9:7e:2b:45:bc:c7:76:fe:2c:
35:89:98:7f:e3:a8:a7:78:e0:de:16:c7:44:50:e4:f5:1e:49:
a8:2b:d5:21:24:ba:b3:ca:c9:da:5a:c1:b5:31:ff:e0:d0:2c:
05:79:9b:27:c2:44:ec:b4:8c:1a:7f:48:9a:b5:1f:e6:44:e4:
70:93:7c:a9:e7:34:6d:01:f4:1d:4d:87:8f:00:22:74:28:d5:
75:4c:7d:58:f1:7d:ae:38:99:e3:6d:22:7f:bb:37:c5:f4:65:
1e:bc:15:fb:b5:26:a2:ab:6d:15:09:09:33:54:58:ba:28:64:
bd:c6:3e:5c:17:be:20:10:5f:90:68:22:db:b8:04:5e:a8:3a:
f6:eb:42:b0:94:d9:5b:1e:06:db:32:1a:c2:78:2b:27:0c:de:
76:9b:b8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:32 2024 by rpki-client on console-ams.rpki-client.org