Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ao63rFJmGWp3sLdq9-zE9_VJnsU.roa
File: ao63rFJmGWp3sLdq9-zE9_VJnsU.roa (raw, json)
Hash identifier: Pc4zTCuFZZJv4oWl/C2xwWyDadAt0ypzLV5Vsk2dwNc=
Subject key identifier: 6A:8E:B7:AC:52:66:19:6A:77:B0:B7:6A:F7:EC:C4:F7:F5:49:9E:C5
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018D922D8F100A6F95D0E8829BE082CD484F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ao63rFJmGWp3sLdq9-zE9_VJnsU.roa
Signing time: Sat 10 Feb 2024 08:41:15 +0000
ROA not before: Sat 10 Feb 2024 08:41:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 5.182.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 08:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:92:2d:8f:10:0a:6f:95:d0:e8:82:9b:e0:82:cd:48:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 10 08:41:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a8eb7ac5266196a77b0b76af7ecc4f7f5499ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:7c:ba:08:b8:39:b7:92:c5:57:15:27:27:
45:3e:6c:83:11:45:0c:f6:14:17:e1:c6:e6:85:db:
5a:05:f7:fa:aa:18:77:ee:82:31:67:f3:0c:69:5f:
5a:87:3c:d7:b9:28:4e:d3:3a:37:38:a2:2b:f0:6d:
dc:b1:65:41:ca:f1:21:d0:6b:0d:24:c2:6e:47:b5:
87:ba:67:46:a2:7d:a4:09:34:9f:40:c1:0d:4a:07:
1c:17:6d:dc:14:be:ff:4c:b5:bd:c8:72:27:4b:20:
7e:64:a0:4e:30:7f:94:a4:6a:f4:73:01:3d:92:64:
d0:cf:9d:f7:e1:40:81:3a:6b:b0:d3:d1:a7:fd:3d:
0a:c6:fc:b5:2e:12:87:a8:60:9a:4c:0d:04:68:07:
f7:25:38:72:e7:1b:fa:22:98:b8:ae:3b:42:2b:62:
ab:78:cf:a6:84:cb:11:b0:93:c7:c6:c0:77:69:55:
05:b5:f1:3d:18:08:80:9e:f9:c9:9a:19:09:f9:31:
84:2f:5a:77:c2:20:0c:46:44:ec:6c:86:df:20:a1:
d6:6c:01:17:a7:b9:f0:0c:38:8a:01:7d:90:8d:55:
e5:b1:de:e3:f2:dc:47:4b:73:d4:c8:6c:73:0b:b0:
8c:bf:d4:24:6f:02:b3:5f:ba:c6:4e:a9:60:a2:2f:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8E:B7:AC:52:66:19:6A:77:B0:B7:6A:F7:EC:C4:F7:F5:49:9E:C5
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ao63rFJmGWp3sLdq9-zE9_VJnsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e9:c8:d2:b4:49:bf:ac:9a:ac:73:5c:ba:12:a4:b8:99:2f:
c7:85:3b:ae:d4:73:f8:25:85:c1:37:24:b8:a4:a9:51:61:b7:
b8:44:51:bc:9d:b9:92:7b:1c:b3:7e:a2:df:56:3a:84:ac:9c:
3b:e9:e7:0c:0b:8e:fd:dd:64:2b:33:1f:c9:23:17:93:6f:2b:
90:04:46:ad:8d:50:7b:f4:33:b7:26:55:44:92:4b:8b:30:06:
a0:c8:9a:5b:b6:d9:50:93:bb:d7:87:20:e3:c6:78:b4:99:2b:
56:bf:7b:3b:aa:1a:66:af:0e:f5:c5:9c:b3:3e:aa:63:ed:86:
38:11:30:ab:36:65:0a:5b:54:e4:de:e7:53:79:72:89:59:f1:
32:52:a4:5f:44:ea:bf:d3:2f:a7:47:42:29:47:e0:89:7c:e2:
90:1b:d7:dc:58:64:e1:31:dc:64:fb:1f:f1:b7:ff:9d:79:0f:
2e:b3:66:6d:2f:3d:4d:2a:4f:9a:bd:02:f6:da:91:bf:d2:32:
e8:c8:53:20:ce:c5:4f:7c:1a:6d:32:03:71:e8:a3:d7:a6:31:
3d:cc:55:31:f2:45:48:de:aa:c3:f2:f9:db:b7:76:1d:58:66:
14:3a:80:bb:82:bd:b0:42:d4:ca:a8:c5:4a:d7:aa:23:99:fa:
52:82:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 11:11:58 2024 by rpki-client on console-fra.rpki-client.org