Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/0B2b8HheGLKmTaBd9SWiCsJ_5Kw.roa
File: 0B2b8HheGLKmTaBd9SWiCsJ_5Kw.roa (raw, json)
Hash identifier: SYUxxdnZLqXljKOpDlOQ+hwmoEBefvAH2PFjynpZt6Y=
Subject key identifier: D0:1D:9B:F0:78:5E:18:B2:A6:4D:A0:5D:F5:25:A2:0A:C2:7F:E4:AC
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 018C5DEF338CD1B600A6AF9F10987D59DBA6
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/0B2b8HheGLKmTaBd9SWiCsJ_5Kw.roa
Signing time: Tue 12 Dec 2023 12:10:06 +0000
ROA not before: Tue 12 Dec 2023 12:10:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215927
IP address blocks: 5.252.11.0/24 maxlen: 24
5.252.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:ef:33:8c:d1:b6:00:a6:af:9f:10:98:7d:59:db:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Dec 12 12:10:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d01d9bf0785e18b2a64da05df525a20ac27fe4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:87:74:5e:10:35:29:66:3f:37:93:4a:b0:
a7:87:77:05:65:67:2b:f1:d1:5b:6e:e2:1a:45:7a:
c0:36:60:89:ae:6b:ef:ac:06:3c:dc:23:7d:4b:51:
2a:ea:13:b3:d2:31:1f:be:c5:77:b2:e5:a7:60:9c:
dc:dc:4e:65:00:8c:4f:9d:0f:c0:76:82:8c:b1:29:
e0:58:5a:85:5c:06:cc:5b:e1:a7:a3:df:36:9c:dc:
cd:ab:a9:ad:d3:64:04:ae:3c:69:1c:b1:f3:3c:23:
b3:81:44:ae:fa:98:1e:9b:3a:d3:98:b6:c4:89:14:
81:a6:06:df:07:d5:04:09:34:ac:b5:76:38:5e:9a:
ca:6a:36:89:9e:b5:10:f9:5f:7a:b2:f2:5f:b8:3b:
b1:28:30:db:3b:af:0e:d8:f4:59:b3:f7:e2:dc:f0:
9d:f9:73:54:de:81:58:80:9b:f3:8e:d0:94:29:e4:
fc:60:58:55:18:4f:16:fc:61:94:55:1b:8a:4d:ec:
54:d7:36:e3:56:f8:78:c4:97:46:3e:4a:f1:3e:46:
2d:dc:e3:96:a0:d6:87:3f:68:dc:bf:e6:f1:0c:d7:
36:88:50:50:cf:42:2f:2d:bb:7c:76:1f:a6:d9:9a:
a0:ba:60:96:64:90:e7:a5:b1:81:ee:39:bc:45:64:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1D:9B:F0:78:5E:18:B2:A6:4D:A0:5D:F5:25:A2:0A:C2:7F:E4:AC
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/0B2b8HheGLKmTaBd9SWiCsJ_5Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.10.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:4e:20:5a:8b:cd:0b:6a:77:1c:94:ea:49:5c:89:a2:97:03:
6f:2d:83:69:96:3f:cd:bc:5a:ab:68:38:44:80:d1:8b:ac:58:
cf:14:c7:55:52:30:14:06:b2:cf:4b:dc:3a:2f:2b:53:f5:88:
f6:e8:0f:21:f9:0d:a7:6a:4c:c5:2b:54:d0:26:9e:7a:91:53:
54:20:3a:34:3c:f6:da:be:bc:d5:e0:0f:36:fa:d9:06:10:f3:
e0:1a:ec:67:bf:ea:e6:1b:74:d9:25:22:d4:7b:97:d7:81:b9:
b6:e4:86:e3:a9:41:66:26:e8:4b:b4:db:35:9c:05:3a:42:19:
eb:48:b7:71:1c:58:39:0e:46:c6:0b:92:64:21:04:40:a9:0b:
b9:c6:65:08:39:5d:a4:24:a6:60:dc:8d:07:b4:cb:70:a4:9f:
ca:a9:9f:a9:f2:9b:99:55:6a:1a:4f:ac:06:01:d7:80:6b:06:
99:9a:91:e6:86:e5:0a:d3:1b:86:b1:a0:0f:ad:e1:7f:ef:87:
d6:0b:f7:17:38:cf:ba:fd:98:cb:e4:26:76:a1:a4:94:4d:b9:
f6:c6:2c:d7:ac:00:ff:83:3a:89:a5:aa:40:36:d8:fa:89:a9:
b3:89:51:45:af:13:f0:2d:c2:46:11:04:b4:9f:f3:38:0f:ab:
e4:ca:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net