Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/NeSTZ6e6cYh0ES86D9bszi0BDuo.roa
File: NeSTZ6e6cYh0ES86D9bszi0BDuo.roa (raw, json)
Hash identifier: AM3a6MDJgWx+TZ1Yu3binv6f2OGJpD0DuthhL8rzj+w=
Subject key identifier: 35:E4:93:67:A7:BA:71:88:74:11:2F:3A:0F:D6:EC:CE:2D:01:0E:EA
Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial: 018CC64ADF07976617B8ADC7425E26C244A4
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/NeSTZ6e6cYh0ES86D9bszi0BDuo.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59499
IP address blocks: 5.159.8.0/22 maxlen: 22
5.159.8.0/21 maxlen: 21
5.159.12.0/22 maxlen: 22
185.141.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:df:07:97:66:17:b8:ad:c7:42:5e:26:c2:44:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35e49367a7ba718874112f3a0fd6ecce2d010eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:f2:8c:07:1b:2f:57:17:dd:b9:89:76:f2:
b9:48:38:5a:1b:68:53:76:b2:63:28:dc:b7:f9:04:
ba:df:41:cd:ca:eb:10:20:9d:ab:71:ab:89:d3:bf:
75:1d:cd:57:bf:5f:62:98:e5:c6:18:f6:74:68:4f:
aa:f0:ba:80:14:c1:b6:da:97:16:b8:87:db:7d:c4:
ff:98:19:c5:ec:b6:cb:2a:44:64:93:09:0a:fe:db:
7d:38:d9:a7:c7:9d:30:3f:c5:b6:d4:9b:6b:c7:bf:
01:9b:02:31:28:ec:be:8f:a1:d5:3d:2d:ad:ae:0a:
ac:f4:94:be:c3:83:a8:26:98:83:26:08:ab:e9:6b:
4b:36:86:f0:1b:ba:3b:4c:36:14:14:51:85:b5:9d:
bb:7b:b2:79:22:11:91:af:a6:23:37:a4:d2:56:d9:
f5:19:3b:1a:f4:22:41:2c:67:71:a0:fe:c1:47:4b:
68:05:bc:98:c2:ea:60:07:ea:c8:e5:4e:e5:13:02:
2d:4e:22:0e:da:23:9b:35:db:75:09:2c:ee:ca:84:
2d:fd:a5:5c:82:23:83:8a:1e:bc:00:6b:1c:d7:23:
f2:f2:f2:09:46:9d:d0:5a:b9:97:5e:aa:b5:ff:4a:
74:ea:42:26:78:db:ad:0a:45:e5:17:7b:48:60:e6:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E4:93:67:A7:BA:71:88:74:11:2F:3A:0F:D6:EC:CE:2D:01:0E:EA
X509v3 Authority Key Identifier:
keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/NeSTZ6e6cYh0ES86D9bszi0BDuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.8.0/21
185.141.16.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:4b:65:b2:b5:64:07:9f:d3:7c:0f:99:9f:70:74:e8:bf:a6:
63:56:69:08:f9:bd:34:fb:38:c5:56:b9:fd:b6:4f:c5:b2:68:
2b:25:6c:a6:bc:69:29:6f:4a:59:d6:b6:df:34:e2:53:74:50:
37:c6:59:c6:75:53:ac:86:36:02:d2:93:c5:e9:2e:e5:c0:41:
94:fb:20:fc:4e:c8:ac:29:80:81:bf:67:b7:f7:63:63:97:f6:
1b:fb:21:a2:cf:e6:ac:9e:44:fe:de:27:98:a1:f0:f6:f0:cf:
b2:a4:c0:c1:2f:ac:88:c6:b5:34:12:9b:11:79:47:5a:ae:27:
ae:5b:54:df:14:ee:6e:c4:02:47:77:1b:9a:66:17:ab:64:56:
6d:2a:e9:0c:6e:c7:6e:dc:4b:f6:05:c0:d8:d6:7d:48:4b:43:
80:b4:95:59:6c:85:25:b5:72:ee:47:fd:92:f8:39:ad:8a:cf:
11:03:1e:e0:95:6f:46:e3:c0:d0:e4:3a:95:af:80:4f:62:15:
08:2a:70:77:51:68:32:54:46:7e:be:ed:ca:f0:1b:f4:72:da:
3a:63:ca:66:9e:4a:82:23:4c:1a:41:9b:6a:f6:72:4c:f4:81:
6d:ae:c6:61:84:69:87:5d:27:96:1a:24:ef:8e:03:53:60:54:
ea:87:ec:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:13 2025 by rpki-client