Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/peY47YhRLkZYKVlxh63O8HIWJAU.roa
File: peY47YhRLkZYKVlxh63O8HIWJAU.roa (raw, json)
Hash identifier: g5u3qTXq2+LjjCMr1WC66rd2B2bKwE9O5BzxDWeQimU=
Subject key identifier: A5:E6:38:ED:88:51:2E:46:58:29:59:71:87:AD:CE:F0:72:16:24:05
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018570FBCA31F7506EB8315C00B88C94A992
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/peY47YhRLkZYKVlxh63O8HIWJAU.roa
Signing time: Mon 02 Jan 2023 05:37:07 +0000
ROA not before: Mon 02 Jan 2023 05:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207439
IP address blocks: 5.1.67.0/24 maxlen: 24
5.1.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 11:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ca:31:f7:50:6e:b8:31:5c:00:b8:8c:94:a9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 2 05:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5e638ed88512e465829597187adcef072162405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:74:0e:2c:48:a8:10:0f:fc:b6:98:4f:34:
87:3f:0e:15:54:d3:a5:75:47:24:b8:54:39:f3:9e:
b7:86:cf:ac:d1:25:5a:8e:01:99:23:f2:89:cc:71:
c6:e4:01:fd:dc:64:8c:65:5e:46:1f:bf:f7:9c:26:
25:20:1a:ce:6d:8e:ed:5b:54:f0:69:fd:5f:be:52:
7b:fc:d8:fc:c3:7b:8d:0d:cf:f3:23:b8:d8:55:b7:
d7:36:99:6a:2b:bc:66:53:15:26:95:e6:57:af:5d:
f0:06:bf:4a:90:9d:d4:59:44:b2:e4:5f:f5:86:dc:
fd:73:91:a5:ef:b3:09:64:c0:6b:b4:11:b6:61:20:
37:31:9b:70:64:8a:f9:b0:aa:2d:88:ec:4e:1f:51:
2e:e0:2a:36:56:15:ad:38:53:88:30:a4:8a:ca:de:
26:c9:82:79:3b:4e:8f:27:e4:0e:9f:79:b0:27:90:
0c:cd:23:5c:20:34:a2:33:7b:47:d6:4d:77:a9:9f:
d7:0f:a7:5c:21:aa:fd:89:17:ae:62:d4:ce:d9:48:
3f:51:31:38:f8:cf:94:7a:53:19:e5:e1:cb:47:35:
81:ca:26:f6:a5:e8:6d:11:3d:5d:09:ff:06:37:8b:
62:2f:f5:0f:ab:c6:31:7a:fa:03:29:16:7b:8f:62:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E6:38:ED:88:51:2E:46:58:29:59:71:87:AD:CE:F0:72:16:24:05
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/peY47YhRLkZYKVlxh63O8HIWJAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.67.0/24
5.1.85.0/24
Signature Algorithm: sha256WithRSAEncryption
48:76:21:57:71:9d:0b:89:3f:72:e7:7a:ff:85:14:c1:22:32:
94:25:26:6d:55:4c:d6:ed:5e:5b:2d:ac:4f:db:0f:62:ec:25:
f8:f5:b0:61:98:12:c1:83:bc:0f:a4:72:d1:da:33:cb:56:89:
8d:8f:ef:0b:fa:10:f8:a6:14:38:7e:eb:27:3a:4a:8e:99:8a:
9e:2d:7b:5e:95:49:88:ca:5d:36:9a:72:7d:be:96:73:d3:fd:
c9:e8:39:ba:31:f7:bd:05:a1:df:04:36:6d:57:e0:30:8f:91:
92:fa:a6:b7:21:f7:6d:e8:f4:91:ee:7c:8f:b5:b6:d5:a2:cc:
5e:bd:c5:92:6c:0b:ce:c9:dd:d2:a8:7e:25:2e:2f:cc:ab:a5:
3b:fe:79:32:96:b6:9d:0b:7b:ec:ff:bf:36:1f:2a:2e:1f:ed:
0d:61:58:4d:bb:16:91:96:d7:7c:f6:22:dd:7c:39:ca:23:a1:
02:c6:c3:78:6c:8d:5c:7e:20:8f:e2:c6:91:a5:42:53:8f:93:
54:07:d9:bc:0b:98:5b:14:26:f7:ff:89:af:98:c5:75:d6:86:
7b:a3:db:1c:5e:95:62:10:d3:e9:5a:04:1b:dc:9a:22:ea:34:
33:d0:05:6e:7b:1c:f4:da:64:19:bb:cc:d9:93:28:37:ee:c1:
8b:e6:4d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:31 2024 by rpki-client on console-ams.rpki-client.org