Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/ngGO5EBzmIjM0xVjoMhobmSuznc.roa
File: ngGO5EBzmIjM0xVjoMhobmSuznc.roa (raw, json)
Hash identifier: R38RweL+EYc9nArR9hj/IjK9u9QL7kSZwlkDsKeuoEE=
Subject key identifier: 9E:01:8E:E4:40:73:98:88:CC:D3:15:63:A0:C8:68:6E:64:AE:CE:77
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 01933E744F2D7B83F70AD9D042D475AB76AB
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/ngGO5EBzmIjM0xVjoMhobmSuznc.roa
Signing time: Mon 18 Nov 2024 08:47:10 +0000
ROA not before: Mon 18 Nov 2024 08:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205020
IP address blocks: 5.11.28.0/22 maxlen: 22
5.11.28.0/24 maxlen: 24
5.11.30.0/23 maxlen: 23
5.11.30.0/24 maxlen: 24
80.251.0.0/20 maxlen: 20
85.31.64.0/19 maxlen: 19
85.31.75.0/24 maxlen: 24
85.31.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 19 Nov 2024 07:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:74:4f:2d:7b:83:f7:0a:d9:d0:42:d4:75:ab:76:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Nov 18 08:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e018ee440739888ccd31563a0c8686e64aece77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:17:82:94:1b:58:e4:cf:4c:21:3c:29:b4:
97:5d:b9:be:eb:b2:ef:fd:08:b2:52:7b:56:32:31:
82:ef:9b:5b:79:9d:b7:ac:7e:3f:92:32:9c:bf:ae:
76:67:bc:8e:9a:66:da:7f:45:3c:a5:d3:ff:54:b1:
3b:b6:cb:da:1a:35:ba:fd:70:c5:31:32:c4:7a:5a:
b4:9a:77:b0:16:81:fc:ed:20:36:7f:76:af:d3:1c:
2a:dd:c0:e0:32:15:a0:ac:e7:50:e2:8c:5a:7a:82:
c3:ab:48:f3:40:a0:1b:7a:76:a1:03:3a:d4:c0:c2:
a1:8f:cb:03:ae:f0:6b:0e:86:86:bc:5a:f4:be:b0:
94:2a:f0:55:99:e8:84:f1:25:e3:3e:3c:62:36:13:
64:83:ca:1e:46:63:bc:e4:af:ec:83:13:7f:35:97:
15:f5:6f:b4:9a:6d:d6:bc:f2:50:85:0b:07:03:47:
34:78:71:d3:48:2f:af:9f:75:fa:e2:ce:24:0f:42:
6a:30:2d:f6:4b:ce:7e:e6:e6:e4:99:a4:75:2f:1a:
a8:ad:f7:46:e2:35:3d:cb:29:f0:09:bc:b2:78:2d:
56:69:cc:0d:ed:be:af:bd:b0:9c:3a:c4:ec:e0:38:
f3:c0:8e:38:a9:d7:0d:78:49:68:4c:44:43:f0:bd:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:01:8E:E4:40:73:98:88:CC:D3:15:63:A0:C8:68:6E:64:AE:CE:77
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/ngGO5EBzmIjM0xVjoMhobmSuznc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.28.0/22
80.251.0.0/20
85.31.64.0/19
Signature Algorithm: sha256WithRSAEncryption
47:20:f8:f0:9d:7b:9f:36:b7:87:75:7c:2d:a2:be:e3:1b:63:
6b:f6:08:61:ce:18:6f:8b:e9:1c:62:ed:51:72:cc:1f:61:80:
6e:23:fc:ac:5c:63:1d:1a:b5:97:bf:e0:e0:7a:73:4a:16:f9:
72:26:69:f9:3e:1f:d2:70:c9:92:e0:d1:1a:27:1a:6a:b6:25:
7b:df:dc:3b:89:d3:a5:4e:26:8e:30:2a:66:c5:6a:0a:b8:5f:
b1:5e:9a:ae:fb:95:56:49:28:5f:17:73:55:ab:76:7e:39:7f:
ed:be:e8:1d:8b:13:90:f8:64:a1:eb:29:3a:9b:ca:d1:63:d8:
6e:97:a7:95:2e:c7:65:31:37:d2:da:66:54:84:06:32:d7:f0:
cc:8d:a6:20:2a:bd:bc:0b:f0:41:66:fd:7c:5c:12:6e:5e:79:
53:49:8b:40:e5:34:b2:f2:fd:9a:18:1d:63:89:cc:fc:86:cb:
3e:9b:13:ce:93:5e:4d:35:1c:c0:a4:fb:c8:7c:34:c4:a3:4d:
9d:a7:6d:84:09:33:56:3f:23:70:a0:6c:9f:60:de:c6:05:8f:
bd:a0:dd:e5:02:92:8c:22:06:d8:97:0b:1d:21:3a:6c:72:5d:
63:75:5a:f5:07:0a:42:55:24:67:f2:ae:93:24:09:68:74:63:
e3:87:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:35:27 2024 by rpki-client on console-ams.rpki-client.org