Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/12TpACTAmD5BEiiLXhLGyAiNPS0.roa
File: 12TpACTAmD5BEiiLXhLGyAiNPS0.roa (raw, json)
Hash identifier: PCV0SNE6rVDz120ycxNh+GjeSFnob/NDNyP4Gf0CTRU=
Subject key identifier: D7:64:E9:00:24:C0:98:3E:41:12:28:8B:5E:12:C6:C8:08:8D:3D:2D
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01857082B22856ACF688F2EDA8C4FA660FB6
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/12TpACTAmD5BEiiLXhLGyAiNPS0.roa
Signing time: Mon 02 Jan 2023 03:24:51 +0000
ROA not before: Mon 02 Jan 2023 03:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205888
IP address blocks: 5.40.168.0/24 maxlen: 24
62.175.210.0/24 maxlen: 24
5.40.0.0/24 maxlen: 24
89.140.57.0/24 maxlen: 24
5.40.225.0/24 maxlen: 24
5.40.122.0/24 maxlen: 24
95.39.64.0/24 maxlen: 24
5.40.133.0/24 maxlen: 24
5.40.155.0/24 maxlen: 24
5.40.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:b2:28:56:ac:f6:88:f2:ed:a8:c4:fa:66:0f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 2 03:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d764e90024c0983e4112288b5e12c6c8088d3d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:39:9e:49:e1:7d:ff:50:d4:40:1e:12:6d:
b6:a0:9c:d9:40:19:2d:0a:31:c3:fc:db:4d:07:03:
6b:c2:cb:d9:e8:f2:79:cc:91:c0:94:29:16:bb:e5:
24:be:bd:d6:61:23:cf:17:ad:87:d7:f7:11:5f:ac:
a6:28:03:5d:25:13:cd:e2:13:1c:4b:29:16:62:07:
40:07:9f:9a:a3:cb:5e:bb:0b:73:ed:40:1d:10:9b:
0f:14:1d:61:d8:e9:01:eb:13:f8:75:be:5c:3f:7d:
10:a8:82:01:f7:17:0c:fd:4e:28:6d:ab:d2:b0:8a:
7d:80:1b:15:cf:0d:15:33:35:75:80:4c:ad:0d:d9:
4c:47:46:af:79:a6:fa:29:c5:eb:cd:7e:af:2d:c6:
0e:4b:58:20:4b:7e:34:f6:dd:fe:96:75:2f:65:bb:
b4:58:7a:96:d9:6d:c2:e3:79:36:2d:0b:88:66:61:
6e:5d:aa:87:84:d6:fe:64:63:1d:8d:1b:94:39:ed:
d2:ac:a7:43:96:68:4b:77:87:d3:3b:7c:04:b7:a9:
12:c9:ac:11:37:38:56:8f:8a:2c:10:13:f0:07:e5:
f1:06:9c:eb:69:13:37:ba:e5:47:65:a2:f1:d2:1c:
47:ac:60:19:fc:9f:1d:a2:6f:44:16:97:8a:eb:10:
a6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:64:E9:00:24:C0:98:3E:41:12:28:8B:5E:12:C6:C8:08:8D:3D:2D
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/12TpACTAmD5BEiiLXhLGyAiNPS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.40.0.0/24
5.40.122.0/24
5.40.133.0/24
5.40.155.0/24
5.40.157.0/24
5.40.168.0/24
5.40.225.0/24
62.175.210.0/24
89.140.57.0/24
95.39.64.0/24
Signature Algorithm: sha256WithRSAEncryption
25:60:71:a7:da:5d:32:57:b4:0f:a1:c0:75:90:6d:94:39:2c:
e7:dc:2c:ff:0b:7b:6a:bc:68:c3:d0:e9:5d:b3:31:51:9c:37:
d0:7d:59:9b:5a:44:b0:98:29:dd:e7:7c:7a:19:b7:25:d4:c6:
d9:9c:15:44:1c:56:7d:9f:0a:c0:24:c8:a9:76:bc:ec:e5:dd:
0a:28:b7:e8:ae:ff:60:0d:32:fc:7f:1d:98:28:a8:41:09:1f:
4b:f4:70:4f:ff:db:b3:f6:fd:11:6b:96:e4:02:6d:42:ad:66:
3b:5a:82:47:fb:40:0c:10:cb:f1:42:40:61:2d:54:9d:9f:51:
9f:19:7d:3b:ba:2d:d4:c6:4b:7f:6b:87:67:f5:4d:da:95:43:
f8:6d:83:05:4a:27:2d:9e:78:74:2f:eb:dc:dd:c2:40:f2:19:
2c:f5:e9:64:c7:7a:64:e3:e0:b5:6a:32:19:87:0c:90:5f:6a:
be:e4:2b:f7:bb:88:cd:d7:75:c0:71:e0:7d:d8:38:0d:16:14:
e2:ca:57:ff:f6:d3:1b:d6:cf:4e:b7:0a:34:51:b7:ad:f6:2e:
f9:63:34:4f:e1:46:60:52:70:33:66:9e:23:57:77:76:2e:4d:
46:c9:de:f4:22:a6:b1:be:e5:5c:ae:79:19:97:5d:19:4d:c1:
6c:d4:7b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:28:02 2024 by rpki-client on console-fra.rpki-client.org