Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/5PCTZ3OOPaCk8_PsqJCjOF0OCZA.roa
File: 5PCTZ3OOPaCk8_PsqJCjOF0OCZA.roa (raw, json)
Hash identifier: IQZIuyxlTs9UQEDVwNnxgx9z4gybxdp/J5tpxv/Z/NE=
Subject key identifier: E4:F0:93:67:73:8E:3D:A0:A4:F3:F3:EC:A8:90:A3:38:5D:0E:09:90
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 0190564803D413E0DB9BF1478C5F950F5E05
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/5PCTZ3OOPaCk8_PsqJCjOF0OCZA.roa
Signing time: Wed 26 Jun 2024 20:41:18 +0000
ROA not before: Wed 26 Jun 2024 20:41:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35372
IP address blocks: 109.95.65.0/24 maxlen: 24
109.95.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 10:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:56:48:03:d4:13:e0:db:9b:f1:47:8c:5f:95:0f:5e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jun 26 20:41:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4f09367738e3da0a4f3f3eca890a3385d0e0990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:57:09:e9:d9:c7:ee:85:58:05:4e:b6:f0:
66:43:ac:e9:88:60:01:55:c9:7b:c1:c3:5d:df:d7:
8b:24:e0:04:ba:0e:f6:bd:a6:51:ff:c9:60:02:92:
28:a5:d5:20:73:8b:fe:a7:03:11:f9:b7:16:ae:dd:
da:2c:73:97:ae:cd:ef:d2:18:2e:79:7f:b6:c7:6f:
f9:03:0b:10:33:3d:dd:a4:c1:0e:40:7b:28:43:d1:
a6:1a:88:dc:25:2d:64:f0:be:1f:6e:be:d9:d6:41:
03:c1:76:57:62:2f:ff:97:64:07:4f:b4:73:9d:26:
9b:c5:9f:75:7c:cb:dd:f4:5c:94:60:aa:29:97:31:
14:45:2f:16:03:4f:4d:30:4e:86:d4:e0:40:c6:2c:
98:13:64:36:97:59:ff:da:47:df:22:78:e8:09:0f:
09:d7:5e:75:74:26:f0:99:e0:be:a8:69:ef:7e:11:
6b:a4:aa:14:67:dc:ae:c7:2d:02:43:ef:fe:ee:69:
3a:a9:27:4e:8b:d8:cb:b1:1d:62:52:f8:d0:bc:0b:
7d:bd:bb:38:e1:05:4b:f9:b8:0c:d2:bb:10:2a:e9:
08:d0:41:73:4c:33:fe:44:7a:df:b3:9a:ac:4a:a9:
f0:79:ec:81:4c:88:20:d5:7d:9d:9e:d8:a3:08:54:
06:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F0:93:67:73:8E:3D:A0:A4:F3:F3:EC:A8:90:A3:38:5D:0E:09:90
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/5PCTZ3OOPaCk8_PsqJCjOF0OCZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.65.0/24
109.95.68.0/24
Signature Algorithm: sha256WithRSAEncryption
66:59:d1:2d:34:82:41:d1:05:2c:ad:f8:69:bb:b6:51:c3:d4:
28:81:0e:6b:01:a2:88:3f:1e:5d:b6:19:5d:34:85:ea:3a:98:
da:47:28:4a:e9:47:13:f1:41:10:15:6d:c0:40:59:b9:ad:bb:
31:67:9a:21:17:6d:f0:57:20:00:bc:4f:f5:d1:3b:6f:c8:34:
37:d3:32:8e:6c:a8:fd:35:66:15:1d:94:cb:5e:1b:a8:9b:a5:
1d:e7:bf:3d:3b:3b:9c:51:5c:53:f7:6b:5c:ef:bd:fa:c1:ad:
2b:18:bb:17:66:ac:a5:6c:94:2f:01:1c:14:51:21:72:b3:9e:
40:79:c7:9b:44:a1:f1:d2:62:22:1a:5d:cc:e5:00:19:22:0e:
28:7b:83:93:d4:e7:c0:a1:23:2f:b8:48:9b:5f:19:aa:62:e9:
fe:bc:e2:7b:b9:50:c8:bb:df:1e:3a:3c:99:51:b0:41:77:a5:
ea:26:fb:2c:3d:09:bf:df:03:13:dd:f7:c5:89:80:30:0d:6b:
5d:3c:04:15:84:3e:67:dc:33:5d:a7:4d:42:b4:1c:e7:18:9c:
d0:f5:7c:c1:4f:7a:6b:98:e9:f7:ff:4f:42:4a:02:f4:f0:dc:
52:3d:8c:ef:9a:b4:cc:c9:81:28:b4:37:b7:b4:79:0a:2c:4a:
c9:21:80:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 12:31:33 2024 by rpki-client on console-ams.rpki-client.org