Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/XEztr8DjnGQ3OJbNhx5E3Ex5WMc.roa
File: XEztr8DjnGQ3OJbNhx5E3Ex5WMc.roa (raw, json)
Hash identifier: rrOD8GIafI1GHaO0rDQOWyI+70D5jlD7uqxn4jz+Mqk=
Subject key identifier: 5C:4C:ED:AF:C0:E3:9C:64:37:38:96:CD:87:1E:44:DC:4C:79:58:C7
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64AE91AFBF9E7857CCE00AFA831B12B
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/XEztr8DjnGQ3OJbNhx5E3Ex5WMc.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205948
IP address blocks: 5.1.77.0/24 maxlen: 32
5.1.78.0/24 maxlen: 32
5.1.73.0/24 maxlen: 32
5.1.82.0/24 maxlen: 24
5.1.80.0/24 maxlen: 24
5.1.86.0/24 maxlen: 24
5.1.89.0/24 maxlen: 24
2a07:6fc0:452::/48 maxlen: 48
2a07:6fc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 Feb 2024 11:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e9:1a:fb:f9:e7:85:7c:ce:00:af:a8:31:b1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c4cedafc0e39c64373896cd871e44dc4c7958c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:57:47:15:4f:87:c9:a6:9e:06:b6:6c:c6:
55:a5:9e:22:57:48:fd:a2:d2:87:9b:52:ca:78:0b:
ca:9f:64:cc:95:cf:49:9a:42:f5:c5:0b:8a:8a:86:
ed:e9:86:3a:91:cd:c2:d8:29:12:59:40:3a:38:76:
a7:5d:8f:ce:38:de:48:d3:15:93:f6:f8:a6:41:bf:
11:44:e0:6a:5f:84:87:da:cc:3b:b3:a6:d2:ea:46:
2d:a0:22:85:c5:66:6b:23:d8:04:2f:14:f0:b1:d3:
5e:74:b0:59:bf:ad:1f:80:19:09:40:15:97:1d:ec:
26:1e:71:31:bd:50:35:cd:8f:0d:81:24:fe:d4:8e:
21:1d:27:db:2b:86:ce:43:79:40:b1:ad:5a:da:ff:
4d:e3:03:a9:a9:e4:c2:08:90:da:4e:1d:cd:90:85:
15:13:f2:64:28:ed:8a:28:27:26:d6:2c:8e:6d:9d:
17:3a:77:59:8e:af:66:d5:30:2b:b4:c4:43:c3:f1:
02:f5:f5:42:a1:ff:31:07:7b:48:19:0b:0c:9c:4c:
89:80:de:3b:32:93:26:8e:51:84:7c:1c:aa:aa:82:
91:52:b2:37:94:24:cf:c6:5d:6b:46:01:c5:dc:f4:
3a:7c:d1:b7:c4:64:44:ef:21:67:57:8e:a9:0d:c0:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4C:ED:AF:C0:E3:9C:64:37:38:96:CD:87:1E:44:DC:4C:79:58:C7
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/XEztr8DjnGQ3OJbNhx5E3Ex5WMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.73.0/24
5.1.77.0-5.1.78.255
5.1.80.0/24
5.1.82.0/24
5.1.86.0/24
5.1.89.0/24
IPv6:
2a07:6fc0::/48
2a07:6fc0:452::/48
Signature Algorithm: sha256WithRSAEncryption
35:4c:23:de:bb:d7:00:0d:5d:67:9e:66:93:89:bd:bf:f3:81:
2a:ad:37:72:38:fa:c4:b2:45:b7:0a:3c:7f:da:bc:52:34:d5:
b4:9c:1e:1a:f4:2e:83:17:ae:4d:06:c0:4a:18:df:57:91:62:
20:7a:b4:e2:d2:c1:a8:7b:2d:50:6a:ca:44:67:78:1f:62:71:
36:96:21:e9:d8:90:0f:92:99:07:34:0f:c3:84:d7:29:70:4a:
c3:87:82:8f:38:5c:bb:5b:a3:00:cf:cc:58:57:2d:e4:bc:2a:
4d:0c:c1:1a:34:7f:07:8e:bf:59:cc:31:c1:09:2c:78:bd:35:
1b:6b:69:fd:26:ee:b4:be:55:d8:f9:91:ec:86:ef:19:af:ca:
f4:dd:46:9e:6d:88:ac:8e:1a:bb:4c:79:8f:0f:9f:64:51:21:
49:0c:27:53:3a:8f:ce:a6:85:6f:c2:96:86:fd:de:f4:67:28:
a6:43:44:5f:33:ef:dd:fc:64:00:82:99:3b:49:e5:b0:7c:70:
15:b6:1e:07:2d:af:3d:3c:ab:d5:8c:f0:a4:85:b9:d6:40:32:
8d:a3:32:66:c1:e1:e0:3c:1c:9a:68:6d:54:a7:a3:1c:c9:67:
3a:fe:4c:21:6d:4b:bc:07:85:e0:f4:61:da:9c:39:c5:3e:cb:
fd:28:9a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 15:29:07 2024 by rpki-client on console-ams.rpki-client.org