Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/KrbNEp99kMZJjlAs9p-3mnpG354.roa
File: KrbNEp99kMZJjlAs9p-3mnpG354.roa (raw, json)
Hash identifier: oHsxWfFCNQ6eflRGseYk/0DBL7GUIn/NJZRDTI1lCf8=
Subject key identifier: 2A:B6:CD:12:9F:7D:90:C6:49:8E:50:2C:F6:9F:B7:9A:7A:46:DF:9E
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 018C20A34C3ACE32BC6D5F09D15A23A57794
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/KrbNEp99kMZJjlAs9p-3mnpG354.roa
Signing time: Thu 30 Nov 2023 14:30:21 +0000
ROA not before: Thu 30 Nov 2023 14:30:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133480
IP address blocks: 5.62.23.0/24 maxlen: 24
5.62.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:a3:4c:3a:ce:32:bc:6d:5f:09:d1:5a:23:a5:77:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Nov 30 14:30:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ab6cd129f7d90c6498e502cf69fb79a7a46df9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:69:9f:1b:81:7b:43:f8:c0:f7:16:6a:6f:29:
bd:aa:32:4c:6a:97:9d:08:b2:d2:31:15:50:c9:78:
09:33:d3:91:95:07:9d:b7:9c:8d:7a:00:e7:35:37:
1d:2a:a2:d9:a1:9c:9d:0f:97:ae:ba:6e:29:3f:6f:
7e:77:f4:3a:0d:f5:85:94:e5:b2:5b:18:f2:38:8c:
f6:0b:e7:d7:01:af:20:78:ca:1a:e3:23:0d:41:26:
7b:da:d4:43:b1:c3:e6:1c:23:97:5b:28:0a:e4:07:
7b:66:53:eb:fe:18:75:ff:a8:63:82:94:b7:5a:bb:
4c:2e:05:4b:0c:c0:4c:47:85:b0:2f:51:51:6a:8a:
31:bf:fe:49:1e:35:48:5e:f0:a9:fc:b8:29:8e:d3:
3b:aa:04:b8:ba:a0:84:f0:af:1f:01:68:7a:a6:c2:
07:b6:ef:d2:e4:c2:e6:67:08:d7:df:a8:32:fd:86:
6c:f3:83:64:6d:96:40:ed:0e:cf:bb:0f:82:fd:e8:
d5:74:bb:1b:bf:9b:82:86:49:f0:6c:7c:71:9f:75:
17:07:0a:79:ca:f1:8e:a9:40:ab:f3:59:0c:c2:31:
53:68:7f:21:c9:05:9b:c0:7e:f4:a7:2a:44:8b:8f:
9d:62:04:a9:ea:56:11:f6:13:1e:ac:4b:ac:0e:a7:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B6:CD:12:9F:7D:90:C6:49:8E:50:2C:F6:9F:B7:9A:7A:46:DF:9E
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/KrbNEp99kMZJjlAs9p-3mnpG354.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.22.0/23
Signature Algorithm: sha256WithRSAEncryption
75:5f:22:a7:34:3f:bd:81:07:62:d1:88:fa:cc:a9:c2:91:29:
51:bf:ef:a7:b1:b3:56:92:5b:aa:7d:be:d7:16:d8:cf:b2:0a:
7e:aa:40:db:32:f0:64:9a:e4:27:8c:65:7e:04:a7:d5:5d:d2:
40:c7:a5:7c:46:c7:dc:ab:7f:ef:15:a5:7c:5e:e2:f0:f5:9b:
73:eb:26:bc:d9:f3:2b:44:cc:b5:08:5f:34:95:8b:8e:28:3c:
fb:cb:32:d1:82:30:21:85:f0:51:1f:c5:d8:1f:2f:94:29:d7:
f9:05:15:88:54:05:38:cc:ce:68:28:df:57:f6:20:30:e9:d7:
5e:eb:b4:96:f6:22:1b:22:99:d9:0a:b7:96:a0:85:bd:dd:3f:
40:10:fa:66:c2:ec:c2:d4:d6:60:8a:09:53:d9:2f:4f:35:99:
1b:ec:71:20:7b:b7:b0:b2:95:4a:e2:e2:99:88:d9:81:ff:22:
75:36:8b:25:ee:02:84:e7:2b:ba:3f:bc:9f:c6:41:4c:4f:8e:
f4:c2:37:a7:b2:3e:c8:5c:37:d7:d1:f6:33:02:bf:cc:be:b3:
af:32:e6:d7:9f:32:89:65:19:3c:b1:48:11:00:92:bc:00:b6:
46:d6:a1:5f:a3:ad:0f:e4:d8:38:06:41:40:6c:c4:cc:42:db:
e6:16:4f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:21 2024 by rpki-client on console-fra.rpki-client.org