Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/5pr5U2660rAVDa-bJhgtbUCmJsU.roa
File: 5pr5U2660rAVDa-bJhgtbUCmJsU.roa (raw, json)
Hash identifier: 08tfie5sm8sYzk/ulkdWcqFle5rULlwg80Id2CUDfT0=
Subject key identifier: E6:9A:F9:53:6E:BA:D2:B0:15:0D:AF:9B:26:18:2D:6D:40:A6:26:C5
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 018CF3CD8D7301EA4B7A380F8881ADB6304B
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/5pr5U2660rAVDa-bJhgtbUCmJsU.roa
Signing time: Wed 10 Jan 2024 14:36:23 +0000
ROA not before: Wed 10 Jan 2024 14:36:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 128.65.166.0/24 maxlen: 24
128.65.167.0/24 maxlen: 24
128.65.169.0/24 maxlen: 24
128.65.170.0/24 maxlen: 24
128.65.171.0/24 maxlen: 24
128.65.172.0/24 maxlen: 24
128.65.173.0/24 maxlen: 24
128.65.174.0/24 maxlen: 24
128.65.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 16:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:cd:8d:73:01:ea:4b:7a:38:0f:88:81:ad:b6:30:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Jan 10 14:36:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e69af9536ebad2b0150daf9b26182d6d40a626c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:6b:b7:0f:7d:33:f7:e6:3d:e7:ae:7d:e5:
ea:b1:c3:db:fb:40:4e:00:09:8d:3c:ae:46:88:05:
f7:33:95:78:79:e2:ab:08:5f:4e:2e:6f:ff:6f:a8:
5c:02:1b:98:8f:84:6b:68:c4:36:29:82:22:a1:a4:
ef:93:b2:59:3d:b3:55:97:61:9c:19:e4:41:d1:6c:
72:08:f9:0d:29:da:74:9d:f3:fe:be:d6:72:97:cf:
8a:b4:a7:9b:3c:ea:ee:b6:84:6f:9d:c6:70:dd:b3:
43:de:bb:76:c8:2f:34:4b:9f:43:aa:13:92:17:46:
61:11:d3:46:00:0d:a2:ae:df:71:05:cc:20:c1:bc:
05:0b:71:5a:1e:db:62:ae:af:8a:35:80:27:7f:4a:
e0:05:79:97:36:ab:1b:57:5d:f2:a3:1a:a2:b0:a7:
25:67:8f:d4:15:43:1f:ec:36:e5:3c:09:13:76:f7:
5e:a9:0a:91:35:f2:4e:1b:f5:2f:6e:99:ab:21:21:
92:f9:a4:65:bd:11:0a:39:db:b2:ee:49:cc:0f:5e:
b2:b0:94:f8:c3:83:9d:44:9e:bb:ff:f3:59:11:3d:
05:84:8f:5e:33:78:ec:85:bf:26:a5:6e:d2:f5:3e:
af:d0:bc:ed:79:52:a3:ce:8c:be:22:a2:2b:a9:c0:
c2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9A:F9:53:6E:BA:D2:B0:15:0D:AF:9B:26:18:2D:6D:40:A6:26:C5
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/5pr5U2660rAVDa-bJhgtbUCmJsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.166.0/23
128.65.169.0-128.65.175.255
Signature Algorithm: sha256WithRSAEncryption
2b:31:c2:6b:8e:03:c5:04:d6:6f:49:85:b1:f1:65:45:cf:aa:
a3:49:29:b8:bc:5f:6f:2f:91:87:e2:0d:64:8e:61:88:b9:8d:
e4:3b:60:f8:96:af:a9:24:86:34:6a:25:c3:2d:0e:1a:b3:9f:
f9:0e:fc:5e:4a:b7:2d:66:1d:fd:d2:b6:4b:3b:25:54:d1:f6:
5b:30:86:c5:6b:f4:af:11:2c:19:f4:8e:ee:6d:13:c5:7c:ad:
8c:aa:b8:97:8c:d4:03:3a:b6:d3:bb:42:1a:ba:66:18:be:38:
21:6d:ab:5a:d1:36:1f:9d:27:56:9b:36:d1:42:1c:1b:76:88:
39:42:2f:4d:6d:a7:20:17:95:e0:9a:08:45:db:cf:62:eb:91:
3f:a5:91:ce:7a:7c:69:e2:59:22:30:ad:22:b3:36:a0:6f:84:
0a:82:d8:76:55:41:5c:0a:d4:8d:72:ec:7b:30:20:aa:e3:de:
fe:c8:96:9d:1f:ea:49:d2:12:e2:d7:1a:60:84:c1:80:1f:27:
2a:f6:1e:43:7a:91:42:ea:eb:38:25:c3:5c:b8:7a:24:6d:a1:
21:f1:c0:5e:e9:47:1e:cd:36:77:0c:3e:58:28:e3:92:70:b9:
d0:c2:92:d7:b9:01:f5:0f:0a:43:4b:ff:29:74:c2:1f:07:33:
3d:4c:d7:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org