Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eqQKh3gYH0Nzy5tqHGGPI-BNVNo.roa
File: eqQKh3gYH0Nzy5tqHGGPI-BNVNo.roa (raw, json)
Hash identifier: eD8PmIYQvLvSmHowW7ZO9weFigACdZU5SuAT3R2hvWs=
Subject key identifier: 7A:A4:0A:87:78:18:1F:43:73:CB:9B:6A:1C:61:8F:23:E0:4D:54:DA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187527075711A91F0A41349774B1B0DA301
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eqQKh3gYH0Nzy5tqHGGPI-BNVNo.roa
Signing time: Wed 05 Apr 2023 17:21:54 +0000
ROA not before: Wed 05 Apr 2023 17:21:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210654
IP address blocks: 212.192.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:70:75:71:1a:91:f0:a4:13:49:77:4b:1b:0d:a3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 5 17:21:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aa40a8778181f4373cb9b6a1c618f23e04d54da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:6d:3e:88:14:31:17:91:50:c8:dc:e2:9a:
ad:f0:66:20:45:5e:65:c6:7c:3f:a8:2a:8d:6c:f8:
6b:7a:22:21:ed:7e:9c:67:20:86:55:9f:9e:64:9f:
7d:e3:0e:43:7c:72:7a:85:10:7b:1c:9b:61:9a:ac:
c2:95:c2:7e:46:e4:bc:d6:e2:33:87:1a:c6:ee:8e:
8e:f0:32:0f:6d:56:e3:08:48:19:5b:a9:fa:f0:3f:
cb:83:1e:93:f0:f6:7c:2e:51:bf:49:7a:fb:0e:8b:
99:c3:e9:1a:94:93:57:40:fd:c6:df:21:6f:95:24:
40:9f:a9:a8:23:2c:08:64:a1:1b:f1:e3:f0:ba:cb:
4b:e3:c8:a2:e7:7c:8c:85:eb:85:0f:91:ae:57:0e:
3f:6a:c9:16:89:ab:ca:3f:10:25:a9:d7:4f:fb:34:
d8:c2:5a:c7:d7:ea:83:b4:e2:ca:0e:05:86:5d:2a:
52:19:82:97:2b:85:b2:9f:c6:07:78:1c:1c:b7:14:
7c:10:ee:17:8e:05:47:90:cc:e9:43:56:26:df:06:
31:e3:fc:90:d5:e2:b4:08:17:d6:42:58:d5:1c:51:
07:4f:e2:11:b6:8d:3e:13:26:77:6d:37:42:49:d7:
85:0e:2d:62:96:35:14:79:7b:2d:1c:3c:82:d6:bf:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A4:0A:87:78:18:1F:43:73:CB:9B:6A:1C:61:8F:23:E0:4D:54:DA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eqQKh3gYH0Nzy5tqHGGPI-BNVNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:45:8f:06:8f:5b:0d:8d:8e:1b:87:a9:8e:a3:9d:27:1a:e6:
73:99:47:1d:b1:2f:87:bd:a4:df:d8:6c:07:cb:d9:ad:62:be:
81:ff:81:2a:b7:cd:b6:a1:f1:4d:c2:51:26:86:75:68:e1:64:
13:74:54:ce:fd:0c:53:53:3a:0b:04:a2:b7:0c:3e:0a:a7:70:
02:00:87:6a:24:a6:41:ed:57:c6:60:69:df:bc:65:dc:e7:14:
e4:10:be:c3:48:90:b3:56:df:15:d3:95:03:df:f8:ea:4e:e7:
76:8d:48:25:35:f2:f6:da:e5:35:40:b7:a6:52:98:6c:ba:c8:
fb:7e:1c:68:d6:e7:dd:5d:c9:c5:c5:f4:c8:2e:4d:fd:3c:f4:
c1:74:31:40:c7:c1:b7:37:68:bd:02:21:39:0b:d0:ec:a9:83:
87:4d:f2:6d:b6:14:8e:cf:93:b2:53:85:db:c2:21:04:31:df:
05:de:0f:79:ee:fc:a7:ba:2d:f0:40:44:ff:53:0e:04:37:0e:
fb:9f:fd:31:31:52:e9:f6:df:2d:b7:1d:d5:b6:9d:45:99:fd:
3a:1b:30:ba:c8:e7:00:b2:cd:ef:d8:80:1b:42:4f:b0:94:36:
fc:a6:9d:b7:f0:9c:4c:de:d2:6a:00:57:43:1c:0c:e0:d1:73:
f6:4c:91:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-ams.rpki-client.org