Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/p9JI8lUgH273JjZmij1qFAadDGM.roa
File: p9JI8lUgH273JjZmij1qFAadDGM.roa (raw, json)
Hash identifier: BjMSI15FYN2YqkB5g8Udm6PrlIruhN2PymiDLNcsYuA=
Subject key identifier: A7:D2:48:F2:55:20:1F:6E:F7:26:36:66:8A:3D:6A:14:06:9D:0C:63
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01877B5468550115D39A525B68EBB34AAB0A
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/p9JI8lUgH273JjZmij1qFAadDGM.roa
Signing time: Thu 13 Apr 2023 15:55:41 +0000
ROA not before: Thu 13 Apr 2023 15:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198920
IP address blocks: 5.252.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:54:68:55:01:15:d3:9a:52:5b:68:eb:b3:4a:ab:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Apr 13 15:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7d248f255201f6ef72636668a3d6a14069d0c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bf:4a:ff:7f:c2:4a:17:da:5d:a1:5c:1b:d6:
ad:94:63:3d:6c:3a:fa:c7:60:a2:e2:1c:4e:fd:0b:
35:62:7a:17:2c:37:fd:b2:b1:6c:e9:30:b3:0a:b3:
60:e6:d0:28:f6:39:de:a0:62:87:5f:7b:2a:08:0c:
cd:d8:1b:b2:46:88:cb:71:95:92:d5:da:6e:9c:4f:
b2:b2:fc:f9:02:1d:66:fc:aa:ff:11:46:db:be:d7:
90:0c:ec:aa:7d:b0:82:63:24:83:00:59:ca:4d:a9:
ab:2c:20:f7:2e:4c:b3:bb:e2:4d:bf:d7:98:ae:65:
ab:b4:20:4c:1e:3d:e7:7a:2b:2c:6d:41:b3:e0:b7:
b5:eb:71:ae:29:aa:f9:62:4d:60:95:76:a5:e8:10:
d2:26:e3:2d:7e:2a:ca:61:f3:67:af:e4:43:3a:14:
b3:a7:cd:0b:3b:a8:84:5b:fa:fd:d7:4c:f4:25:f5:
31:43:f4:b0:51:39:ea:d4:11:3b:11:71:b6:d2:d1:
6d:85:9c:75:5d:bc:67:73:c1:ae:e8:9f:db:8a:ef:
8e:45:62:64:6a:ec:55:2e:cf:3a:6e:14:91:89:35:
96:a4:2d:f5:7e:b7:23:9a:8e:e3:31:60:ac:48:4c:
c8:07:81:f3:68:1f:43:62:b5:35:b2:a3:bf:52:6a:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D2:48:F2:55:20:1F:6E:F7:26:36:66:8A:3D:6A:14:06:9D:0C:63
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/p9JI8lUgH273JjZmij1qFAadDGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.119.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2e:f4:da:0e:f3:72:20:bd:4c:4f:8f:25:b9:db:fe:3d:39:
15:1a:10:fd:3e:fc:24:40:ae:d8:fb:ca:35:bd:25:aa:64:fa:
9c:ea:fc:f0:b6:eb:34:00:83:ca:6d:88:89:50:ab:7f:5e:d0:
f2:ce:fd:f7:8e:27:ea:61:b3:45:85:78:85:ef:43:d5:46:63:
c6:2b:ae:a5:37:fc:53:a1:fc:00:48:fa:d4:46:da:24:e0:5c:
a8:1e:e7:c1:43:d9:bb:9b:45:fe:06:18:b1:83:c2:ea:74:4a:
36:55:0a:9c:76:a2:e9:8d:2b:82:2f:4e:2f:80:09:0a:fe:19:
7e:67:5c:86:a8:3a:00:bb:09:e9:09:c9:af:9b:0f:ed:8c:e2:
0a:e4:a7:0b:a2:2c:3f:9f:15:ba:bc:08:2b:cd:ad:7a:20:13:
23:dd:f9:b3:e2:48:18:e9:05:38:89:56:17:7e:eb:ec:55:d7:
fc:dc:5e:03:fb:be:13:87:25:7e:e5:a1:a9:f2:65:ae:80:7e:
7a:37:bb:e8:3b:e9:d1:7b:5c:07:73:1d:c4:c2:b3:06:8f:b5:
25:dc:7a:61:36:9e:57:fa:0f:83:56:56:07:51:be:3f:d1:f6:
9d:f6:34:61:f4:fc:09:5b:4c:f9:28:73:a5:6b:04:98:16:b7:
aa:c9:d5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org