Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/H0HfvERH1YqaNAwOz-zAHgPnGaM.roa
File: H0HfvERH1YqaNAwOz-zAHgPnGaM.roa (raw, json)
Hash identifier: 7lr+wgqsyx6w4iXAikGQMrK4+1qTQ1+RgROcwhNW3ko=
Subject key identifier: 1F:41:DF:BC:44:47:D5:8A:9A:34:0C:0E:CF:EC:C0:1E:03:E7:19:A3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C3C1B1FD7972FD742DBF90C4CB136
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/H0HfvERH1YqaNAwOz-zAHgPnGaM.roa
Signing time: Mon 02 Jan 2023 05:55:05 +0000
ROA not before: Mon 02 Jan 2023 05:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209181
IP address blocks: 5.252.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:3c:1b:1f:d7:97:2f:d7:42:db:f9:0c:4c:b1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f41dfbc4447d58a9a340c0ecfecc01e03e719a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:62:1f:4b:7d:fe:4c:15:9d:fe:e4:ba:f1:8f:
ee:28:e2:99:bd:d9:7a:3f:62:09:06:8e:6f:6b:76:
d8:a5:ec:ed:a3:e6:d5:78:f7:cc:ba:66:59:9b:18:
79:bd:e0:f9:d5:90:14:86:a0:86:c3:ee:b0:eb:ef:
2a:eb:39:7b:43:81:70:c5:2d:d5:b1:51:ac:5a:30:
52:7c:ee:e8:7a:08:2f:cb:ce:95:cf:a5:e2:a2:08:
65:31:46:d0:14:96:4a:e7:ad:3a:23:21:c8:c1:03:
6a:38:59:d0:bf:4b:57:5a:53:42:96:27:3f:ae:f0:
d8:04:0c:12:91:4a:3a:1a:3c:78:3b:80:2e:0f:e1:
f8:49:d8:6e:12:8c:57:24:62:36:cd:87:90:8a:e2:
4f:22:14:35:9d:d2:c5:cd:5c:14:0f:65:c5:6c:b3:
b2:1e:7d:0a:17:79:d5:bb:6d:d6:d4:1c:49:85:b4:
1f:fc:e5:8d:29:20:3c:24:95:3e:d4:c7:3f:e5:bf:
b2:75:bf:62:1f:59:f8:15:a1:f2:74:ef:17:fb:bd:
9c:56:38:49:63:ae:37:06:23:29:16:4e:92:53:ef:
60:72:77:b3:89:6c:dd:4c:ff:40:0b:88:87:97:73:
e9:1f:bb:87:de:8a:be:1b:e5:73:f9:94:78:78:7a:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:41:DF:BC:44:47:D5:8A:9A:34:0C:0E:CF:EC:C0:1E:03:E7:19:A3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/H0HfvERH1YqaNAwOz-zAHgPnGaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.117.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7b:b0:92:8d:9b:a8:3c:50:ab:ab:5d:88:bd:82:11:4b:7f:
58:11:e7:42:42:af:76:45:d6:fe:b4:75:d1:66:b9:96:7b:72:
d7:52:fd:6e:93:5a:c7:8f:c6:be:48:58:22:cd:da:1f:10:d0:
ed:2d:bd:ea:fc:02:c0:dc:d4:5b:ac:9a:b9:df:ae:6a:2e:14:
72:08:4a:c8:cc:34:37:c9:08:a2:47:72:a0:2d:21:50:2d:1b:
46:51:42:4f:ce:9c:77:95:d3:42:0f:e7:a5:55:71:91:44:16:
21:f7:57:8c:06:fd:46:39:3b:83:2c:a2:19:97:c1:77:86:1b:
88:41:41:59:0d:58:87:9c:5c:be:02:1e:c5:21:d3:76:54:6e:
8d:bc:92:63:55:8b:b3:38:50:0a:ef:f2:6b:f2:ab:84:35:f0:
6e:22:5f:47:24:5d:e7:c1:0d:c8:49:9d:ea:86:5d:44:8d:7e:
ba:68:55:9e:55:2f:0a:98:bb:b8:76:57:ac:4a:23:17:a2:06:
e4:85:c8:af:4c:4d:06:4b:21:cc:1a:3e:36:9c:18:be:41:da:
da:90:32:18:55:d1:0a:b9:76:95:88:8b:f1:79:c8:c8:06:21:
5d:dc:13:86:68:d8:22:af:73:d1:5b:a0:98:5a:9c:9c:8d:9d:
78:d9:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:09 2024 by rpki-client on console-ams.rpki-client.org