Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/9ZguDskQQnF-jY2s86QMnpBuVAM.roa
File: 9ZguDskQQnF-jY2s86QMnpBuVAM.roa (raw, json)
Hash identifier: Ba/ZuXrjYXW2iHsIXZwjyXxO+iQKwoeBP95Gr5w/JiQ=
Subject key identifier: F5:98:2E:0E:C9:10:42:71:7E:8D:8D:AC:F3:A4:0C:9E:90:6E:54:03
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01856E6FAB14BB6C85CD9198FC1A67ED04DA
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/9ZguDskQQnF-jY2s86QMnpBuVAM.roa
Signing time: Sun 01 Jan 2023 17:44:50 +0000
ROA not before: Sun 01 Jan 2023 17:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50083
IP address blocks: 5.59.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:ab:14:bb:6c:85:cd:91:98:fc:1a:67:ed:04:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 17:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5982e0ec91042717e8d8dacf3a40c9e906e5403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:55:a6:53:33:32:84:a9:a6:b5:f2:c0:bc:
20:b6:32:36:2d:31:20:be:93:93:4b:b0:0f:de:a1:
44:b0:27:e8:2f:c8:c1:66:0d:9b:dc:16:26:aa:fa:
60:07:c4:36:79:0c:e6:48:3b:fb:b0:9a:f1:e9:85:
18:fc:b6:25:dc:20:0a:31:7f:6a:b2:07:ed:9f:a9:
46:8c:bf:92:53:a8:2a:c9:77:9e:19:4e:4b:3b:54:
ff:4f:33:4d:f3:ef:00:3d:10:c4:ec:12:8d:4a:0e:
6a:86:7f:b2:9c:72:40:01:80:e4:41:62:e2:9e:ea:
79:25:60:a0:fa:55:bd:9f:6f:83:d0:26:09:3c:92:
74:fb:b1:a8:aa:f2:13:7a:81:05:e1:f2:42:cf:ac:
bd:ac:02:e3:00:a6:93:eb:a7:ed:1a:80:38:de:b8:
fb:34:d9:84:67:42:4e:c9:58:c5:cb:2a:50:87:8e:
ec:25:dc:b9:d0:2d:9d:df:28:c8:37:fd:9b:10:1c:
be:b5:5f:68:21:ec:d5:8b:b4:c7:e4:64:0c:52:b8:
c5:c5:e5:30:9f:5d:56:88:ab:86:98:59:57:18:1d:
a3:9c:74:0d:26:e6:dc:19:6c:fd:20:4e:e5:a3:c4:
7d:0b:a6:dd:ee:ed:6a:e3:1f:db:ec:0a:27:bd:24:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:98:2E:0E:C9:10:42:71:7E:8D:8D:AC:F3:A4:0C:9E:90:6E:54:03
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/9ZguDskQQnF-jY2s86QMnpBuVAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:66:e0:61:fe:dd:14:ec:d5:ff:2c:ad:ce:b1:af:f4:47:44:
a7:13:1d:0a:9d:9d:06:89:cf:f8:48:3b:7c:df:a0:88:23:46:
24:29:5e:5b:7a:44:c1:b2:07:66:87:50:53:02:53:11:cb:e5:
9b:06:ff:9c:b1:5a:b4:51:52:a7:79:ca:f1:bd:02:d3:cf:c5:
5e:94:9d:03:ff:ce:86:2b:1e:71:3e:a4:da:6a:8e:8c:1a:f7:
e2:f0:d2:40:99:89:3c:81:21:fe:1c:f5:81:1e:5b:bc:7a:f7:
20:cb:c7:d5:6c:dd:33:8d:cb:08:6c:bb:7d:94:15:df:24:12:
7e:4d:d4:03:fc:96:d9:c6:f3:b7:d7:fe:fc:63:d4:3a:2c:b5:
e4:43:24:c9:64:3c:eb:ab:88:14:c0:fa:71:a7:06:b5:c6:7a:
11:01:3b:5e:2b:1c:2e:fd:b5:53:ba:1b:b7:2c:7f:39:58:90:
52:78:b9:21:51:41:bd:28:7b:23:1d:9f:7c:d9:d8:97:ed:80:
c1:01:4d:4f:58:42:31:3b:a7:44:3c:43:c0:c2:7a:b9:b9:a2:
68:68:7b:b0:47:3c:46:b8:8c:ca:17:d0:74:08:39:f2:06:bc:
54:9c:cc:9e:fa:df:56:36:93:dc:21:f3:e9:06:3d:0c:55:af:
35:b5:f5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org