Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/1k4V_TLfpp_x__41-bPqO9-hOIE.roa
File: 1k4V_TLfpp_x__41-bPqO9-hOIE.roa (raw, json)
Hash identifier: Q+8rFAKD2/uNC1EBbaPqvykTa5rJqdR1L9itqCXMnQc=
Subject key identifier: D6:4E:15:FD:32:DF:A6:9F:F1:FF:FE:35:F9:B3:EA:3B:DF:A1:38:81
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 018CC7945E1BAE5DF7F8A5D1E620D834E2F5
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/1k4V_TLfpp_x__41-bPqO9-hOIE.roa
Signing time: Tue 02 Jan 2024 00:30:38 +0000
ROA not before: Tue 02 Jan 2024 00:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204958
IP address blocks: 5.59.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 10:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:5e:1b:ae:5d:f7:f8:a5:d1:e6:20:d8:34:e2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 2 00:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d64e15fd32dfa69ff1fffe35f9b3ea3bdfa13881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:bf:1a:aa:98:59:c3:49:d7:8d:54:c3:0d:
d5:bc:d5:cc:fa:81:f0:1c:7a:99:46:94:c2:45:11:
d8:48:85:c1:88:a2:8e:c9:f0:03:44:b7:bc:f2:e3:
2c:4e:25:14:5d:ce:74:fd:a2:f0:2e:7f:38:53:42:
89:9e:6e:ba:d5:58:7f:b4:ee:9a:ef:a3:37:90:1b:
30:4c:6b:7f:de:e3:6a:e1:f5:64:b6:c2:e7:88:14:
c1:51:4b:a2:8a:42:76:1c:de:9e:f2:cc:73:1e:eb:
69:6b:57:f2:1a:2b:c6:c9:de:3c:dd:56:28:8a:ec:
2a:31:8a:a5:df:f0:3f:7b:de:4c:16:ce:f3:a9:1c:
3f:6d:44:41:5d:c8:4e:fd:f7:65:b5:21:2c:96:ed:
67:79:51:08:53:db:03:6f:3a:90:85:f8:1a:3a:f7:
9a:81:ec:86:5e:37:0c:f3:57:c5:e6:51:fa:49:7b:
16:92:9b:50:51:b9:33:f0:eb:a1:67:a1:4e:8d:6f:
e9:e7:fc:ee:7e:f7:2b:c3:a9:29:69:41:90:db:62:
5a:be:d6:42:aa:a4:82:f4:06:b5:b8:77:c5:ca:b5:
c0:01:d8:c4:aa:07:e8:2d:04:22:9b:26:0b:c5:97:
41:a4:61:5f:79:c0:62:7d:87:28:a3:05:f1:3f:66:
9d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4E:15:FD:32:DF:A6:9F:F1:FF:FE:35:F9:B3:EA:3B:DF:A1:38:81
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/1k4V_TLfpp_x__41-bPqO9-hOIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.55.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ed:32:06:0c:0b:9d:0c:cb:77:c0:0c:bb:0c:5a:b3:02:2c:
1c:c3:48:ff:5d:c5:35:d9:bb:af:cd:2e:80:94:86:06:98:f3:
e1:9d:c9:a7:f0:76:a0:ba:11:b8:50:87:58:3f:13:00:9e:fc:
8c:5a:b6:82:8d:95:a1:94:4a:5d:f3:56:0a:55:d8:0c:a8:a1:
72:c5:9f:e9:91:95:e7:4b:5f:a9:fd:d1:a7:93:64:1f:1d:a2:
9b:79:28:eb:f6:9b:62:75:82:46:49:6d:a2:86:aa:b6:79:0f:
85:99:e2:5f:c4:0b:13:11:28:54:12:5c:76:6f:cd:09:de:b9:
57:b7:ea:d8:cc:74:25:c1:14:6a:bd:1b:25:d1:df:73:74:c1:
5c:9a:5a:79:ae:14:b4:48:f4:c9:05:00:f6:70:c0:80:ca:e8:
db:8a:62:07:74:64:04:48:43:dc:3e:fd:d2:2b:86:0d:ef:10:
44:0a:bd:fe:65:cc:68:d9:e0:23:8a:4f:0a:d3:97:0e:96:86:
1d:65:ee:ad:7c:7a:80:ef:c6:97:19:65:a2:8d:31:1c:18:db:
56:93:d1:66:a6:69:82:cd:47:a9:87:a2:39:ab:80:54:84:ed:
36:18:bb:36:55:d5:f2:28:0c:02:40:23:4b:bf:ba:1d:df:3b:
a1:62:11:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:21 2025 by rpki-client