Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/JNawQ2kcqCVLir_iFksgOud1H_M.roa
File: JNawQ2kcqCVLir_iFksgOud1H_M.roa (raw, json)
Hash identifier: IzANrq9lH5yW5k5aoJC/M5Er1Ra0NqrQEH6K14AFa8E=
Subject key identifier: 24:D6:B0:43:69:1C:A8:25:4B:8A:BF:E2:16:4B:20:3A:E7:75:1F:F3
Certificate issuer: /CN=919eed6f0c370234c9262b1f7b4138a60717bfb1
Certificate serial: 01857270F54B451B8ED8647A3A56E1E93EC7
Authority key identifier: 91:9E:ED:6F:0C:37:02:34:C9:26:2B:1F:7B:41:38:A6:07:17:BF:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZ7tbww3AjTJJisfe0E4pgcXv7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/JNawQ2kcqCVLir_iFksgOud1H_M.roa
Signing time: Mon 02 Jan 2023 12:24:43 +0000
ROA not before: Mon 02 Jan 2023 12:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200752
IP address blocks: 5.133.96.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 09:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:70:f5:4b:45:1b:8e:d8:64:7a:3a:56:e1:e9:3e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919eed6f0c370234c9262b1f7b4138a60717bfb1
Validity
Not Before: Jan 2 12:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24d6b043691ca8254b8abfe2164b203ae7751ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:9e:2e:b2:d9:ca:9e:69:74:57:fe:b9:6e:
94:e8:f9:bd:bf:b4:73:f8:e7:70:3e:ec:0e:11:24:
6e:e0:0b:ba:d6:32:f8:9f:fe:5a:80:af:c3:7b:3b:
91:5a:fc:59:74:9c:7a:d3:08:d7:25:9d:e7:b8:ba:
c5:14:cd:84:cb:29:0a:b0:b0:d0:ea:53:ea:a5:80:
6b:c4:65:f8:3c:19:f9:3a:37:79:21:ba:a7:02:09:
0d:6b:a4:3f:db:a0:ad:60:d7:d5:35:06:43:85:1b:
39:6f:e8:e9:32:68:03:9b:fc:d4:c3:1e:2a:c4:86:
52:e2:9a:a6:a9:8e:6a:0a:c9:6a:7d:8b:81:e0:09:
4d:6d:de:74:47:28:a7:59:10:96:54:d4:cd:18:10:
92:3b:6b:b8:ba:cc:9e:0d:20:c9:03:f2:48:bd:3e:
48:af:26:6e:94:ca:3d:96:41:d0:0a:87:e0:26:9f:
76:f2:ab:c9:51:5e:79:19:91:b1:f3:14:b8:8b:cb:
e2:98:18:25:56:ac:d4:8e:78:c2:8b:1a:4f:70:0a:
76:3a:07:a8:ca:17:93:7d:fd:9b:5c:af:cd:2c:ea:
3e:b4:cc:3f:2f:f9:05:6b:27:25:85:f5:9e:c4:3a:
c2:2e:32:03:ca:60:63:be:fa:42:b8:44:f4:28:c2:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D6:B0:43:69:1C:A8:25:4B:8A:BF:E2:16:4B:20:3A:E7:75:1F:F3
X509v3 Authority Key Identifier:
keyid:91:9E:ED:6F:0C:37:02:34:C9:26:2B:1F:7B:41:38:A6:07:17:BF:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZ7tbww3AjTJJisfe0E4pgcXv7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/JNawQ2kcqCVLir_iFksgOud1H_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.96.0/22
Signature Algorithm: sha256WithRSAEncryption
32:c4:93:06:d0:a0:cf:f4:9a:cb:a2:ed:4a:02:8f:4c:84:b6:
65:68:64:06:7a:77:65:a9:a1:00:d0:d0:d0:b2:d6:01:44:b9:
e1:d5:ff:93:6c:09:3e:2c:c1:8a:07:5c:3d:89:40:83:0b:78:
96:1b:7c:d3:1a:14:c1:bb:53:aa:a2:5c:40:04:b3:42:61:be:
d3:75:0f:77:70:50:87:94:9e:4a:36:c6:8c:86:4e:f3:b4:6f:
82:dc:6c:44:c7:bb:1f:11:75:82:68:54:13:34:ac:e8:bb:cb:
45:3f:35:16:13:fe:ee:36:c2:93:52:e9:73:d3:6e:d4:be:f8:
19:30:c0:84:e2:ed:95:3d:55:ec:c0:31:94:3d:3d:69:8b:df:
31:d3:b7:bb:9c:68:6d:0c:c0:b9:84:78:95:10:ca:a4:6c:b4:
89:4e:b4:7b:3b:c5:76:82:14:d5:5b:cb:59:42:89:6c:23:f0:
95:d5:7d:74:fb:b3:af:5d:34:6f:98:f7:39:20:d2:37:68:04:
78:f2:da:be:fe:e2:3f:f0:ff:4d:a6:1a:d3:c1:a0:68:93:1e:
3a:33:cf:16:51:38:9f:4a:a5:35:ad:1c:b8:fc:a2:e9:2f:99:
98:b5:4f:74:57:b4:18:aa:59:0b:8d:d0:3a:82:49:37:00:19:
06:74:2a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:40 2024 by rpki-client on console-ams.rpki-client.org