Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/ttp34Izt9oub8_ENKDRXejuqcH4.roa
File: ttp34Izt9oub8_ENKDRXejuqcH4.roa (raw, json)
Hash identifier: uigdOE9PwQLAqJoLA3bvGNlSb6wZpx+GFjBI5n60ksk=
Subject key identifier: B6:DA:77:E0:8C:ED:F6:8B:9B:F3:F1:0D:28:34:57:7A:3B:AA:70:7E
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 018C44969B28FDEF95A5B2961D97A207D068
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/ttp34Izt9oub8_ENKDRXejuqcH4.roa
Signing time: Thu 07 Dec 2023 14:02:49 +0000
ROA not before: Thu 07 Dec 2023 14:02:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202441
IP address blocks: 5.154.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 06:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:96:9b:28:fd:ef:95:a5:b2:96:1d:97:a2:07:d0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Dec 7 14:02:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6da77e08cedf68b9bf3f10d2834577a3baa707e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:f2:20:41:7e:b9:69:8a:71:53:73:44:7f:
24:8f:40:a7:b6:99:0e:a3:d9:97:99:d0:a4:f3:15:
c3:a0:74:15:6e:ab:41:f0:0d:53:a7:53:17:03:c9:
30:a4:43:dd:2a:4e:e4:f4:a1:40:b0:6c:c0:42:77:
18:35:c7:84:89:51:0a:04:3d:17:32:ff:48:69:3a:
5a:ed:88:b7:31:b6:c3:f5:3d:2e:b3:4e:85:48:27:
fa:0d:06:2e:5b:7d:9a:a3:af:3b:80:38:72:7c:28:
b5:c3:7b:64:a3:b2:b3:3f:6d:ff:bd:6b:39:2a:c7:
e2:7f:5b:21:61:3a:8e:cf:1e:d1:dc:a0:df:cf:55:
02:54:8d:ab:ce:ab:39:22:c4:b1:84:e2:48:35:ca:
5f:b9:3e:74:66:ec:6e:91:21:11:6f:85:44:cf:0c:
fc:09:0a:b0:b1:f7:eb:85:d0:1c:14:f2:30:74:dd:
85:99:0e:f8:af:f5:2f:99:7d:53:6a:7f:09:8c:16:
5c:d9:ea:9d:a0:44:18:e5:9d:df:a4:45:57:e1:25:
59:a2:b5:f7:73:1a:4a:e0:43:48:af:20:94:e0:cb:
4e:5f:c8:05:e0:81:b1:44:91:2a:ce:03:72:b7:0e:
83:66:28:02:30:9a:a0:b8:ba:0f:ed:00:7b:70:c1:
52:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DA:77:E0:8C:ED:F6:8B:9B:F3:F1:0D:28:34:57:7A:3B:AA:70:7E
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/ttp34Izt9oub8_ENKDRXejuqcH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f3:74:1a:cd:c1:84:f4:33:2f:03:4f:f6:e0:25:ce:82:f0:
01:a4:d9:8c:a4:41:72:92:9b:80:d5:2d:f4:2f:60:ba:16:e1:
c5:52:96:bc:27:6a:da:34:43:80:bc:e6:ee:46:55:2c:1e:6e:
6b:06:8e:27:68:df:1e:14:68:d4:52:7f:c2:85:a0:7b:f2:d3:
0d:50:79:0c:03:f8:4e:9d:36:87:fd:4d:0d:79:db:38:b7:42:
d4:8a:4a:9c:cc:8e:4c:04:32:03:6f:2f:40:cd:3d:49:bf:ee:
2e:cf:6a:83:82:a9:c0:16:26:f4:1b:4e:a9:b3:f9:3b:46:86:
a4:82:83:b1:9e:b5:b2:9b:fd:1b:49:71:a6:48:dc:89:30:2e:
8a:bb:81:73:aa:b2:d0:2d:f3:97:a8:32:1c:3d:51:96:49:c0:
79:8d:a1:a8:a2:37:f0:57:ac:7c:41:37:d5:9e:f5:2a:54:af:
33:b7:bd:55:e1:d2:fd:1f:31:a7:db:69:dd:11:7e:cc:6e:5e:
56:36:fd:b6:3f:cf:04:4c:61:f2:31:25:dc:cd:bb:be:c9:4d:
58:d2:c8:54:8d:3d:85:f0:74:cc:fb:9f:f5:b8:a0:00:87:23:
fb:84:4d:e2:18:a0:4a:f9:bf:44:2d:a3:0c:b8:33:72:dd:e2:
73:59:c8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:02 2024 by rpki-client on console-ams.rpki-client.org