Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/jRrRFFlGWzHGorDJqVAHzqKbZlE.roa
File: jRrRFFlGWzHGorDJqVAHzqKbZlE.roa (raw, json)
Hash identifier: k5CW/xG/npgPBLrAMvlEjOmrjAMEBe8g7zzF2Y/+FoQ=
Subject key identifier: 8D:1A:D1:14:59:46:5B:31:C6:A2:B0:C9:A9:50:07:CE:A2:9B:66:51
Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial: 018CC64B2FBB660BE479C322E71152393335
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/jRrRFFlGWzHGorDJqVAHzqKbZlE.roa
Signing time: Mon 01 Jan 2024 18:31:05 +0000
ROA not before: Mon 01 Jan 2024 18:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206264
IP address blocks: 5.252.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 07:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:2f:bb:66:0b:e4:79:c3:22:e7:11:52:39:33:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
Validity
Not Before: Jan 1 18:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d1ad11459465b31c6a2b0c9a95007cea29b6651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:b0:2e:6c:60:c7:24:eb:2c:a4:d8:9d:4e:
a4:98:e8:a2:d3:d0:73:30:8c:d6:a7:19:15:ef:76:
10:a6:73:4b:49:09:36:fc:84:91:2a:50:e4:87:94:
b0:9b:cd:14:3d:ee:1d:a9:66:be:2b:6a:ec:e7:92:
61:02:ba:1e:a1:e2:83:9d:83:f6:3a:23:97:80:ea:
08:4e:69:24:66:5e:19:b9:4a:73:08:5e:6f:1f:e6:
3b:9d:92:57:8b:6c:f9:25:22:a7:32:44:f3:1c:a5:
20:87:8a:cb:a9:4b:d1:c7:c4:c8:69:f0:8d:78:21:
19:99:d9:f3:a4:17:5e:61:e8:2e:ab:c3:50:8e:c4:
3e:92:64:48:ce:28:d6:a9:77:da:0a:f5:19:45:0a:
c3:c9:bc:13:e3:3a:f6:44:bb:fa:1c:e1:46:62:fe:
0d:8e:05:89:09:f8:1f:a4:78:dd:5c:77:98:d0:7b:
9d:02:10:aa:4c:5a:0c:3e:4a:b8:30:3f:ea:23:1d:
8e:d3:dd:69:6e:51:76:3f:34:19:e1:24:67:94:b6:
c1:09:8c:ed:0f:c8:af:b8:ca:bb:29:3b:96:c6:ad:
22:67:47:72:2e:f8:4d:1f:2c:09:a7:7e:33:60:59:
5f:59:a5:fd:43:b1:f4:5f:35:cd:d6:68:ce:d8:cb:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1A:D1:14:59:46:5B:31:C6:A2:B0:C9:A9:50:07:CE:A2:9B:66:51
X509v3 Authority Key Identifier:
keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/jRrRFFlGWzHGorDJqVAHzqKbZlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.155.0/24
Signature Algorithm: sha256WithRSAEncryption
82:01:2b:3b:67:48:49:8a:b0:24:57:7c:f8:47:54:ab:c1:5d:
41:57:51:64:81:0e:0f:3f:43:87:8c:25:57:3e:5e:18:c1:53:
92:5c:f6:d1:a9:0e:41:25:b0:59:89:db:d2:2c:e0:18:8b:a1:
60:e5:43:0f:40:cf:dd:20:7d:af:07:27:62:80:d3:1c:2d:bf:
75:d8:77:a9:51:ea:3a:29:86:a1:35:b2:a9:63:e9:da:b8:98:
94:f0:d0:39:f7:ed:4e:57:56:46:22:75:2e:f7:02:e2:e1:7d:
c5:da:68:34:2b:6f:5b:45:0c:06:52:d4:5f:2b:ed:c9:f3:80:
a9:c8:ce:30:2f:09:c2:e6:1c:c7:29:55:e0:91:56:7a:38:a5:
f0:f4:52:f3:ae:5e:f5:7f:b4:44:dc:ed:56:93:0c:17:c8:17:
8f:85:90:d2:62:0b:03:c4:6f:a0:52:bb:23:8e:42:e1:4f:18:
65:14:e7:16:4c:32:15:b1:bb:07:37:cd:62:9a:f8:f9:33:e1:
cd:b9:4b:42:4f:ab:e4:6f:88:f7:8e:4d:89:4e:f1:8b:9e:2e:
ce:30:10:05:5e:a3:e7:67:65:f6:9a:c7:11:e8:d2:c4:d7:b9:
a1:4b:34:77:33:47:0a:d1:a8:a8:d3:39:bd:bf:97:f8:2e:ed:
18:5c:a4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:17 2024 by rpki-client on console-fra.rpki-client.org