Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/re0f_VX-qpaVg7rQCHA6IOxwEqI.roa
File: re0f_VX-qpaVg7rQCHA6IOxwEqI.roa (raw, json)
Hash identifier: hK19DERnYUlQSJyWxQQUbMTITqhjrL929D9I4HE8QG0=
Subject key identifier: AD:ED:1F:FD:55:FE:AA:96:95:83:BA:D0:08:70:3A:20:EC:70:12:A2
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 01857015014EF4F927DF244700A343A9C7C6
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/re0f_VX-qpaVg7rQCHA6IOxwEqI.roa
Signing time: Mon 02 Jan 2023 01:25:02 +0000
ROA not before: Mon 02 Jan 2023 01:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198887
IP address blocks: 5.56.8.0/22 maxlen: 24
5.83.125.0/24 maxlen: 24
5.83.124.0/24 maxlen: 24
5.83.127.0/24 maxlen: 24
5.83.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 08:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:01:4e:f4:f9:27:df:24:47:00:a3:43:a9:c7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Jan 2 01:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aded1ffd55feaa969583bad008703a20ec7012a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:57:69:e7:a7:13:b0:31:54:60:e7:7a:39:
f8:1f:ba:53:33:4b:c3:a6:bf:9d:b8:16:45:7e:23:
30:5a:0b:25:95:37:5e:10:92:72:af:97:5a:5b:49:
1e:a8:67:94:75:98:ae:fe:9f:79:40:45:c1:46:2b:
8f:a9:61:ae:0c:6e:23:af:4f:d8:35:71:5d:10:51:
36:c3:fb:82:33:3c:f5:4e:1c:b4:a1:11:72:c4:6e:
43:1a:64:15:1f:5d:1b:30:8b:73:b0:1e:c0:b7:90:
40:f2:ea:38:1b:d4:37:c9:6c:4f:b0:6d:9f:37:c8:
43:d7:25:b9:89:8b:d6:93:3d:e8:9e:0d:c9:66:e3:
ad:73:df:70:ca:f7:aa:6d:55:d4:46:ad:77:de:07:
83:2e:4e:75:f3:bc:b0:6e:43:36:33:7e:ad:ea:1b:
f4:6b:cb:05:b6:30:e3:53:43:cc:90:69:87:0a:31:
98:66:e4:fb:7b:e2:e1:ad:f5:da:54:3d:49:41:95:
36:d0:a4:d2:26:cd:7c:4b:bc:6f:16:39:ea:bd:18:
0d:1c:56:4f:f1:e1:02:11:94:90:6e:50:d7:4c:32:
89:cb:9c:1e:b1:76:54:3b:4e:12:88:07:b4:e8:53:
76:d6:62:fc:32:b0:ed:3f:9d:77:f7:a5:50:29:67:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:ED:1F:FD:55:FE:AA:96:95:83:BA:D0:08:70:3A:20:EC:70:12:A2
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/re0f_VX-qpaVg7rQCHA6IOxwEqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.8.0/22
5.83.124.0/22
Signature Algorithm: sha256WithRSAEncryption
77:9d:30:12:48:c1:3e:03:fb:d9:69:03:db:7e:c2:78:7f:8a:
a2:55:9a:83:0b:48:02:f8:5d:ef:2c:59:da:28:74:86:a5:76:
fc:b6:8a:ea:87:a3:98:ce:5e:00:d8:ef:d0:41:a8:57:be:22:
0a:0b:48:25:05:a4:c8:93:4c:4d:d4:2b:9f:65:cb:2d:50:59:
df:b1:93:da:90:e6:32:99:9b:9b:02:12:24:c8:99:63:85:ba:
30:7b:d9:f2:b4:1f:b9:b4:86:0a:7a:b0:18:be:63:04:1c:7e:
9e:6c:f5:29:fa:e7:d8:78:2c:52:2c:9b:32:3c:cb:3e:56:9c:
c4:c9:63:b2:d2:8a:5b:c9:75:75:be:fe:d7:16:32:cb:86:0f:
63:7e:d8:b1:49:46:d5:3f:e8:14:16:d7:49:50:9d:8f:2a:d6:
ef:50:12:e1:b8:59:cc:1b:10:1d:03:8c:5b:a6:92:67:19:fd:
4c:81:2d:1a:d1:37:26:5f:b3:25:46:af:0f:72:d8:fc:39:35:
57:00:58:ce:1e:9a:5c:c4:ae:f5:2f:b0:97:9f:fb:b6:af:19:
e8:ee:72:7e:9c:3f:ba:5e:a5:41:56:dd:e9:d9:cd:97:38:a7:
48:06:cc:a6:3e:9d:ce:9f:c5:41:f6:b4:65:c9:8b:25:8a:f9:
11:2e:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:36 2024 by rpki-client on console-ams.rpki-client.org