Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/9JNS34Qvq54GzuTN2O_8jQX5c_w.roa
File: 9JNS34Qvq54GzuTN2O_8jQX5c_w.roa (raw, json)
Hash identifier: wj2Yj1DbD74BspYFraphGojraHuKcIldwf1uOqlcAXc=
Subject key identifier: F4:93:52:DF:84:2F:AB:9E:06:CE:E4:CD:D8:EF:FC:8D:05:F9:73:FC
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 01856E0B148C61C2B558A57F90411D7A43C9
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/9JNS34Qvq54GzuTN2O_8jQX5c_w.roa
Signing time: Sun 01 Jan 2023 15:54:57 +0000
ROA not before: Sun 01 Jan 2023 15:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34977
IP address blocks: 5.23.12.0/24 maxlen: 24
5.23.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:14:8c:61:c2:b5:58:a5:7f:90:41:1d:7a:43:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 1 15:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f49352df842fab9e06cee4cdd8effc8d05f973fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:38:8f:36:b0:72:0e:79:a0:15:d7:b7:4e:
4e:f5:c8:1e:ed:37:d6:c8:08:bc:33:a7:f9:fc:d3:
48:c1:29:ec:7e:ef:91:ac:c4:bb:92:43:e0:7b:96:
88:df:e3:8c:99:11:56:27:b1:c7:7d:9c:d4:6b:ca:
fe:e9:e3:ad:83:24:2e:4e:3d:4b:d2:b2:21:9a:e7:
ec:b6:da:cc:96:a4:bb:3d:04:b8:b1:45:e1:f9:24:
d3:45:dd:1f:8b:cb:55:c8:94:40:9d:85:fe:0c:53:
ad:81:69:7f:f8:98:39:b1:86:09:69:55:8a:6a:fc:
ed:cb:50:5d:a6:40:17:f5:b4:97:b6:51:30:b3:d1:
c5:a0:95:ab:83:42:a1:cd:76:83:ae:15:75:cf:63:
d9:47:b4:bf:6b:b0:71:5f:57:07:c2:63:c9:b4:ba:
ee:d4:94:99:56:56:99:d5:9b:cc:f9:69:6e:68:e3:
46:c5:f7:30:91:0b:6a:85:8b:2f:e2:77:03:ce:bd:
4a:6a:be:4a:cf:15:4e:08:d2:7b:1f:12:3c:77:af:
88:b9:3e:8f:82:b5:3d:25:c2:83:75:05:82:f4:3f:
b2:25:d1:26:17:72:fb:76:46:1d:a9:23:ee:3f:59:
26:05:99:85:5f:ca:cc:d7:f6:aa:92:f5:8a:6d:07:
0a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:93:52:DF:84:2F:AB:9E:06:CE:E4:CD:D8:EF:FC:8D:05:F9:73:FC
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/9JNS34Qvq54GzuTN2O_8jQX5c_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.12.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:64:76:bd:b7:b5:01:85:f1:47:a3:93:42:d7:89:b4:da:4e:
a3:f6:5d:9b:a6:ea:44:db:e1:d4:9a:e0:a5:a4:93:d9:ed:7f:
85:c4:65:d6:09:14:96:e3:a8:18:3c:9c:a6:94:74:4d:de:a5:
d4:8b:3d:b7:d0:73:e9:3d:d3:94:6c:1b:1b:5d:ff:49:d0:36:
be:d0:c9:b6:ea:f8:82:3b:57:c5:3f:ad:36:89:08:eb:b1:53:
ab:40:c7:5a:91:97:7a:5b:57:b8:7a:e5:79:e4:3b:d0:3f:05:
98:ad:f3:77:69:f6:71:bc:ab:20:e7:06:a1:db:8d:20:3b:05:
1b:b4:1b:db:72:2f:1f:46:b1:b2:1e:ca:c3:87:09:ba:b1:76:
b0:40:5c:1f:72:0b:a9:16:1c:38:55:0d:8f:5b:ad:be:f7:ce:
79:c1:04:01:5b:0a:29:be:36:3d:f6:57:fb:a5:15:96:74:09:
0d:d4:34:f3:aa:89:44:4b:6e:b8:10:5a:a8:9e:1c:22:7f:a3:
ad:80:45:f1:97:80:f4:a9:d6:40:50:3f:a9:e7:cf:b9:39:a8:
d3:75:58:19:48:8b:27:17:c1:85:6b:3c:6f:e9:78:df:ab:06:
b6:05:a7:57:60:73:ff:4e:a4:ab:33:6d:9f:15:f4:ed:78:dc:
a7:57:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:19 2024 by rpki-client on console-ams.rpki-client.org