Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/TusT13xvtGxjMTf5JFASWxHjy7Y.roa
File: TusT13xvtGxjMTf5JFASWxHjy7Y.roa (raw, json)
Hash identifier: s151kR/uZLDAzjfNzkjrnxy/129eGzWlF2uPxJzPimY=
Subject key identifier: 4E:EB:13:D7:7C:6F:B4:6C:63:31:37:F9:24:50:12:5B:11:E3:CB:B6
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 01856D0AD3FCD499E75991809FE0D4909A34
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/TusT13xvtGxjMTf5JFASWxHjy7Y.roa
Signing time: Sun 01 Jan 2023 11:15:04 +0000
ROA not before: Sun 01 Jan 2023 11:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36351
IP address blocks: 5.62.35.0/24 maxlen: 24
5.62.34.0/24 maxlen: 24
5.62.33.0/24 maxlen: 24
5.62.21.0/24 maxlen: 24
5.62.23.0/24 maxlen: 24
5.62.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:d3:fc:d4:99:e7:59:91:80:9f:e0:d4:90:9a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Jan 1 11:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eeb13d77c6fb46c633137f92450125b11e3cbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:da:28:b7:ce:29:b7:1c:85:80:f2:f5:7b:b6:
e6:26:86:3a:15:e9:a2:25:f8:81:ed:3a:94:f6:23:
4f:d4:28:c3:08:5d:1c:88:36:1a:25:2c:2c:0d:23:
37:56:d2:05:44:67:ba:01:db:e3:9e:92:58:31:de:
ec:3f:97:85:21:9c:da:f1:1a:f6:a5:31:72:d5:14:
94:42:3c:15:eb:e8:08:71:5d:39:f5:99:c1:db:65:
45:9f:66:c9:66:d0:e3:dc:74:50:f3:03:e7:3c:41:
a8:12:17:5e:de:64:52:90:0f:2b:db:03:50:d4:90:
a0:13:d4:cb:cb:ee:22:e8:8f:54:41:b1:c7:d9:52:
e3:6b:57:dd:55:4d:e7:5e:06:d7:09:51:a0:2e:a2:
eb:76:cf:df:c7:62:04:09:2a:68:f4:5c:cf:05:0a:
c7:72:d7:77:9b:64:c3:11:26:44:72:eb:cc:58:53:
8b:5e:e6:2d:c0:7a:1a:b5:b7:d8:a7:08:31:e8:37:
01:eb:a8:fc:6e:17:de:46:c2:da:16:a9:1c:a2:ac:
8e:b7:e0:83:e7:2e:23:e9:8a:19:11:34:19:25:85:
d3:42:71:18:18:78:c5:44:23:0c:4e:ba:84:72:09:
2c:8c:20:80:b0:c1:9d:7c:02:97:11:8f:b6:ed:ca:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EB:13:D7:7C:6F:B4:6C:63:31:37:F9:24:50:12:5B:11:E3:CB:B6
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/TusT13xvtGxjMTf5JFASWxHjy7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.21.0-5.62.23.255
5.62.33.0-5.62.35.255
Signature Algorithm: sha256WithRSAEncryption
3d:0f:8b:86:06:41:22:b0:6c:48:d8:16:05:c6:85:2b:eb:24:
04:f9:df:f3:7f:1f:cb:a8:40:13:34:fd:10:e8:8b:e9:e9:4d:
5e:7c:a5:bb:27:fe:1c:20:ab:87:b7:ac:5d:59:fb:e7:96:4f:
7c:bf:74:be:42:c3:44:7c:40:59:bc:8b:c8:3e:b5:c7:b6:3b:
b7:3d:d4:cb:85:06:7e:07:a4:00:03:46:68:0e:aa:7c:e8:c7:
6b:bb:e5:45:92:fb:88:3f:d5:b0:59:eb:94:40:b6:6e:f2:5a:
0e:52:92:1a:17:90:35:42:d2:7c:15:61:15:45:77:83:dd:fa:
68:ec:a6:6f:de:81:19:53:cd:37:be:df:ea:84:11:f2:f3:92:
d4:19:25:15:d9:ec:79:10:9f:b7:6f:57:7a:61:ff:76:cf:58:
b2:d2:f7:f0:89:25:6f:e8:e1:36:d1:fb:63:cd:cc:32:b5:37:
69:df:ac:35:dc:e0:20:2a:c7:a8:f1:2b:00:76:9a:b4:d5:5f:
0b:65:4d:5c:bd:59:2b:e4:50:c7:eb:0f:c2:a0:0f:39:f1:d1:
d8:5f:e9:ae:8c:74:ef:78:da:70:b8:59:c4:5e:37:56:34:08:
cb:c9:4b:65:b3:bc:2b:ac:e0:32:bd:7e:7a:28:a4:53:02:1d:
b7:6d:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:49 2023 by rpki-client on console-fra.rpki-client.org