Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xrkwa5sTskhCWRmbTaUSC_zp5n0.roa
File: Xrkwa5sTskhCWRmbTaUSC_zp5n0.roa (raw, json)
Hash identifier: 7Eb9w96R4oD5fzzeZlM+lSH15UhWr3Nfj9AI4TQk930=
Subject key identifier: 5E:B9:30:6B:9B:13:B2:48:42:59:19:9B:4D:A5:12:0B:FC:E9:E6:7D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186109CBB6CF0DBF6AE82745B37C2E5DE22
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xrkwa5sTskhCWRmbTaUSC_zp5n0.roa
Signing time: Thu 02 Feb 2023 05:32:32 +0000
ROA not before: Thu 02 Feb 2023 05:32:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50321
IP address blocks: 212.192.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:10:9c:bb:6c:f0:db:f6:ae:82:74:5b:37:c2:e5:de:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 2 05:32:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5eb9306b9b13b2484259199b4da5120bfce9e67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b3:dd:72:18:d8:24:c0:29:11:0a:32:1b:e7:
5e:41:83:72:2c:67:33:c1:26:4c:ae:d8:eb:c0:0b:
39:55:36:73:de:9a:bd:f9:bc:27:fe:73:d2:35:55:
eb:0a:3c:3e:c5:2d:6c:34:20:de:18:39:5a:36:6f:
c8:e1:8d:ff:a0:96:89:93:4e:d5:87:ee:c8:cd:b7:
8d:0b:1f:36:d6:ce:fa:54:5b:4f:5b:98:38:84:f7:
a1:1c:5f:3a:41:4c:2f:49:c9:ab:4e:0e:53:a5:48:
ff:d1:60:9f:6f:3e:ff:aa:29:b2:82:20:f7:42:5b:
36:c4:62:a4:11:27:63:25:fe:a8:fc:85:72:4d:2e:
05:09:0c:59:32:f4:e6:09:41:62:07:ec:a6:b0:96:
82:fc:4d:b1:e4:0c:b8:9a:15:77:0c:6b:ea:7e:7b:
73:0b:39:9f:cc:cc:1d:18:fa:3b:3e:03:1d:13:be:
40:fd:d0:a6:18:67:04:d0:51:ac:b9:ef:f0:5d:5c:
30:5d:cf:32:b2:64:72:ac:c5:31:3b:e7:a7:c5:52:
48:b0:83:1c:68:06:2b:a0:fe:9a:33:7b:47:e3:e2:
6e:b1:04:53:f4:53:7a:4a:20:ae:0e:f5:7c:53:c3:
ff:b2:2d:7f:38:b2:b8:59:e4:54:09:19:97:af:29:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B9:30:6B:9B:13:B2:48:42:59:19:9B:4D:A5:12:0B:FC:E9:E6:7D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xrkwa5sTskhCWRmbTaUSC_zp5n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:dc:3e:a3:25:f9:fd:bc:03:84:e5:70:4c:30:42:d0:ff:31:
2d:e0:d9:61:27:a0:5e:6f:bd:6d:86:c7:97:cc:34:d8:7c:05:
82:4c:b4:8e:07:04:89:b9:20:9c:e3:80:60:d0:df:9e:61:91:
81:67:f6:d4:d2:84:d1:b2:b6:19:c2:fd:8d:08:20:73:ee:ca:
0e:9c:31:34:c1:95:7c:a5:87:dc:08:10:8f:ed:7b:c3:da:7f:
7a:0c:29:a3:8b:7d:8f:9f:0d:66:ad:4d:3c:6e:59:34:5d:c4:
ba:d7:e1:33:3f:3d:eb:b6:fa:c6:06:82:4e:e8:19:c3:c7:e8:
6e:92:27:0d:a9:00:83:d9:c7:26:92:76:fe:b0:4d:b7:72:3f:
6c:3a:03:05:d0:ba:81:59:04:ec:5b:fe:92:16:4d:5f:a4:54:
b9:04:ea:9a:1d:8e:e5:13:92:31:b9:5e:7c:8a:69:f9:c6:fc:
99:e7:fd:e0:20:af:a0:e7:c6:3c:ac:fa:82:3f:99:96:d0:22:
7a:50:81:f9:e4:12:19:99:c9:e4:04:bd:02:27:30:24:cc:05:
49:c6:37:c5:a3:f0:92:02:00:22:b0:92:fd:84:35:cd:5d:ae:
f8:07:1e:89:cf:cf:e1:ad:ef:a0:95:d7:3b:0d:41:4b:5b:5b:
25:9e:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-ams.rpki-client.org