Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/SaiYp7SzC-1_0RnZoMxsqELB7cc.roa
File: SaiYp7SzC-1_0RnZoMxsqELB7cc.roa (raw, json)
Hash identifier: D85/Oca8kb9auTe7oObSejeaVZJvsha32v1xsMYvEJs=
Subject key identifier: 49:A8:98:A7:B4:B3:0B:ED:7F:D1:19:D9:A0:CC:6C:A8:42:C1:ED:C7
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018DCD6CAEB1563AFE40DDFA9FCBF91B9752
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/SaiYp7SzC-1_0RnZoMxsqELB7cc.roa
Signing time: Wed 21 Feb 2024 20:47:48 +0000
ROA not before: Wed 21 Feb 2024 20:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 123.253.212.0/24 maxlen: 24
123.253.213.0/24 maxlen: 24
141.98.137.0/24 maxlen: 24
141.98.139.0/24 maxlen: 24
185.110.62.0/24 maxlen: 24
185.110.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 16:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cd:6c:ae:b1:56:3a:fe:40:dd:fa:9f:cb:f9:1b:97:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Feb 21 20:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49a898a7b4b30bed7fd119d9a0cc6ca842c1edc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:32:fb:dc:a8:49:d9:60:71:90:2d:8b:6a:
d8:06:74:5c:6a:de:b7:e4:f7:36:2a:2f:68:1e:db:
66:49:1d:25:30:37:1d:f1:53:76:be:8d:ae:ce:47:
e0:f7:34:52:5d:af:1b:39:b1:23:3c:ec:4d:4d:c3:
fb:04:7c:4f:fd:55:50:80:bb:ff:c6:c8:de:3e:43:
89:d5:f0:f6:a2:ac:7a:a8:ec:80:9e:1d:71:31:62:
3a:90:be:e2:1d:be:20:9a:ba:94:12:62:23:92:d5:
f4:27:2b:e6:c0:ab:ce:e9:43:2b:0d:49:dd:7d:43:
e6:a9:e6:88:72:87:d9:04:30:93:81:a6:5f:e1:b9:
56:98:05:42:81:6c:4a:66:74:8d:4a:51:5d:7e:0d:
b8:01:b4:ac:5b:5c:50:ee:63:09:66:8e:95:84:ae:
8c:a0:15:d8:2f:fa:2c:dc:6d:bc:4d:40:3a:08:16:
f3:ef:46:55:54:63:62:6c:93:c6:59:5e:08:6f:a5:
48:d0:48:04:38:41:b7:25:ec:4a:41:20:85:7a:d5:
48:03:be:48:03:91:a4:88:b0:ef:48:a5:5f:31:24:
5f:57:39:36:8c:ed:73:15:dd:74:aa:c6:77:25:d5:
4c:28:5e:7e:c5:6a:b0:3d:a6:67:f2:7f:19:f7:aa:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A8:98:A7:B4:B3:0B:ED:7F:D1:19:D9:A0:CC:6C:A8:42:C1:ED:C7
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/SaiYp7SzC-1_0RnZoMxsqELB7cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.253.212.0/23
141.98.137.0/24
141.98.139.0/24
185.110.62.0/23
Signature Algorithm: sha256WithRSAEncryption
95:27:a1:32:1a:8c:e9:09:8a:3f:89:42:d2:a0:0c:60:01:de:
58:5b:e4:e9:db:fa:0b:b7:a5:6e:dc:13:fe:ce:c7:ae:22:d6:
bf:80:55:2e:05:2c:6f:3f:f2:9a:86:c6:26:70:f3:1a:98:d3:
63:c7:af:99:a0:0f:ff:3c:15:72:8c:31:60:d0:1a:30:ba:39:
1d:98:a6:8d:9c:6a:d1:48:d2:77:a6:f5:d2:e4:25:1f:a7:f4:
5b:d2:cb:27:06:32:1d:23:8c:01:44:b0:62:b6:a6:c5:19:15:
e1:06:f4:be:50:86:db:59:20:b1:1f:ff:6d:c8:a2:56:6c:91:
b4:c5:9f:27:90:c9:7b:61:ab:44:0d:df:02:53:7a:59:dc:96:
f0:50:c3:f9:ae:95:29:2e:17:ba:54:7e:b7:73:e7:3f:dc:cc:
59:af:9a:b1:8b:ae:4d:dc:33:49:9a:56:7a:dd:1c:3b:aa:27:
99:21:fc:d0:2f:fc:74:f4:31:23:d4:9c:d2:47:4d:b8:d9:5a:
d1:67:43:ab:b3:02:00:d3:29:42:4c:70:92:9f:f1:04:64:e4:
7e:ea:6d:96:a6:f4:7d:8e:c9:96:37:76:b2:7f:6f:be:f6:15:
ab:64:5e:bd:cd:b9:f2:1e:e9:67:92:3b:94:f5:23:1b:c1:c5:
8c:31:78:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 19:20:37 2024 by rpki-client on console-ams.rpki-client.org