Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/9AlOj5UsN_tov8yemRmTXbPaGKU.roa
File: 9AlOj5UsN_tov8yemRmTXbPaGKU.roa (raw, json)
Hash identifier: eyuyJjtm+U5nRZYtI4bmk64/6xJkQaoiYV9u/GKYAeY=
Subject key identifier: F4:09:4E:8F:95:2C:37:FB:68:BF:CC:9E:99:19:93:5D:B3:DA:18:A5
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 018570B078D03622EC854A1BD890A68CB196
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/9AlOj5UsN_tov8yemRmTXbPaGKU.roa
Signing time: Mon 02 Jan 2023 04:14:51 +0000
ROA not before: Mon 02 Jan 2023 04:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210272
IP address blocks: 5.102.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:78:d0:36:22:ec:85:4a:1b:d8:90:a6:8c:b1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Jan 2 04:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4094e8f952c37fb68bfcc9e9919935db3da18a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c2:42:40:26:d0:fe:10:3b:96:02:fc:8c:e8:
b8:99:0b:4e:cb:c6:4a:71:e4:ba:33:ad:0e:1c:4d:
d4:94:d5:c5:f3:0e:5d:35:ab:c4:fa:cf:70:98:a5:
50:cd:3f:71:25:4e:90:ac:99:58:0f:ca:d0:fb:0f:
d9:8b:df:88:f3:55:a6:b3:46:c0:f2:7b:76:cb:90:
4e:f1:ab:6d:fa:39:39:c7:78:ac:e9:6a:6d:98:8a:
97:53:e1:8c:8b:05:b2:5e:03:84:fa:44:5c:04:aa:
26:60:f6:f7:96:82:4b:5b:31:fc:70:df:6f:6b:be:
79:79:cf:a2:5c:fe:f4:8e:c5:95:79:3f:62:62:fd:
26:9d:f3:1f:b9:5f:28:5e:b1:71:01:f6:87:de:23:
8a:91:2b:be:2f:f0:0f:6a:bb:17:31:2a:0d:38:22:
26:a5:10:33:5c:04:7a:3e:84:8c:2f:24:ea:be:a4:
91:4f:18:f4:85:91:d2:46:9d:fb:49:77:73:04:f0:
6c:06:77:a4:29:9e:9c:3c:cb:e4:b0:2f:07:bb:0c:
3c:1e:7a:ad:c2:67:fa:5e:6d:da:ed:63:24:ed:af:
06:ff:52:7a:93:4d:a0:e3:18:f0:15:d0:d0:f8:1b:
c9:5f:e6:de:a2:83:05:82:2d:e8:91:6f:2b:fa:35:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:09:4E:8F:95:2C:37:FB:68:BF:CC:9E:99:19:93:5D:B3:DA:18:A5
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/9AlOj5UsN_tov8yemRmTXbPaGKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:6a:b0:a1:71:3c:9f:e3:c4:32:bb:7d:f1:eb:20:42:7f:ef:
67:ef:48:86:fb:44:4f:73:fd:de:35:5a:f2:b0:ec:fd:49:cc:
35:95:c0:7a:86:ca:9e:8f:1d:79:b1:68:cd:cf:58:a4:21:4a:
7d:83:fc:ab:7c:5c:c4:ef:61:56:3a:6e:73:6a:28:17:a3:99:
2d:91:62:b0:ab:7f:84:bf:cf:8d:04:e0:0a:8b:86:b3:31:e4:
06:6c:c8:b9:ee:10:8c:5b:7d:1a:a8:cf:af:44:e8:7c:eb:91:
72:b4:8c:c0:69:e9:9c:42:8a:e9:9c:81:93:61:e2:33:75:42:
0d:bb:32:27:6d:0a:a5:96:f1:2b:5a:c0:25:de:a5:48:8a:1a:
5a:85:8a:22:37:37:2b:4e:15:c8:72:42:88:64:4e:be:c9:a5:
de:c9:c3:59:f0:b2:2a:cc:d9:8d:61:de:f8:95:fd:3d:1f:44:
89:f8:ba:87:e2:e8:2d:98:97:a8:a8:0c:5e:00:70:a8:40:d5:
ed:70:cb:bd:d2:61:02:a8:35:78:ce:e8:26:e9:7c:9c:90:ba:
ad:72:69:6b:9c:19:6f:c2:db:a9:88:6c:1b:28:86:8a:9d:6e:
f9:ad:dc:70:b0:d3:72:f0:30:0b:1a:1b:47:f0:03:76:0c:83:
08:bc:56:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:34 2024 by rpki-client on console-fra.rpki-client.org