Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/m5Qah9ZgYaL-d57mgyByT7Un_x4.roa
File: m5Qah9ZgYaL-d57mgyByT7Un_x4.roa (raw, json)
Hash identifier: a3CQB1IH4MBCRZTiSCClQ3DYK/tq7sxgcMbhzTOtGVw=
Subject key identifier: 9B:94:1A:87:D6:60:61:A2:FE:77:9E:E6:83:20:72:4F:B5:27:FF:1E
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF97FDACFF3CC83D3C56D87379DEB1D
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/m5Qah9ZgYaL-d57mgyByT7Un_x4.roa
Signing time: Mon 02 Jan 2023 00:55:00 +0000
ROA not before: Mon 02 Jan 2023 00:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198003
IP address blocks: 82.103.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:7f:da:cf:f3:cc:83:d3:c5:6d:87:37:9d:eb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b941a87d66061a2fe779ee68320724fb527ff1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:b7:a6:81:dd:db:db:6c:6b:94:e1:70:23:
c1:6d:28:b4:01:75:85:3f:91:3d:d6:2f:05:90:51:
d2:bb:27:32:aa:40:78:5b:72:34:7e:84:ae:bc:38:
e2:62:87:5f:e6:62:d2:2f:47:1d:8d:e6:6f:f4:da:
f3:07:a1:17:49:c7:ad:04:85:0f:77:88:6f:c7:dd:
1c:7d:0b:09:66:3b:04:20:06:cb:7e:f4:08:a2:6a:
a7:cf:de:93:75:ce:1a:05:2a:af:cd:e3:45:5f:32:
5a:ac:b5:1c:14:8c:99:6a:a3:a7:0e:52:20:86:65:
47:e5:78:c8:79:9f:d8:35:16:cb:9e:01:fb:10:8e:
7e:58:4b:fc:61:75:04:83:e0:48:52:d1:ee:4e:1c:
6f:3c:f8:0d:4d:f3:39:cb:b9:5a:fe:55:79:55:ff:
7b:a3:74:ba:9e:95:2a:0b:e7:e6:b4:d8:9e:e3:58:
71:0b:45:0a:33:2a:34:51:29:74:93:b3:a0:2a:98:
73:a4:23:f1:55:87:45:f8:d5:e6:5b:ad:26:02:d0:
e9:52:b1:c9:1f:b8:08:05:55:ee:36:56:9c:1d:6a:
fb:e8:1f:17:3a:e1:22:25:bd:32:26:fc:8e:7f:9d:
e2:17:3f:54:44:62:24:54:42:f9:27:1f:e1:e9:15:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:94:1A:87:D6:60:61:A2:FE:77:9E:E6:83:20:72:4F:B5:27:FF:1E
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/m5Qah9ZgYaL-d57mgyByT7Un_x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.125.0/24
Signature Algorithm: sha256WithRSAEncryption
93:dd:f0:4b:45:d8:7a:11:b3:5c:01:c3:9e:49:fc:ac:13:6c:
51:df:07:54:9a:c6:97:b3:3b:2e:1b:f9:9c:d4:57:95:c6:fc:
f4:69:98:5a:4a:af:df:02:d2:52:c5:17:e5:f9:9f:20:45:56:
c6:37:28:11:d1:ba:77:fb:67:df:2e:aa:61:7b:91:94:be:4f:
89:e4:fa:09:03:16:b7:5f:1a:e8:48:e0:0f:17:85:ec:21:11:
e0:fb:9a:2f:e6:da:97:fd:1f:67:18:ca:be:70:ad:4e:71:fb:
25:2e:82:42:73:33:c8:f5:bf:7d:9c:51:5a:cd:6c:a3:2a:c2:
ba:81:36:11:bf:b2:78:bf:7b:3b:0b:d6:0e:e9:b2:43:ed:72:
09:eb:30:58:d9:b3:51:b5:fb:0f:dc:bf:27:a6:2a:49:43:ab:
05:e8:c3:32:f2:12:d4:42:13:45:f3:82:bc:70:ff:26:e9:41:
5f:ad:45:6a:a5:95:67:db:6b:ca:09:ad:c5:99:16:2b:a5:a2:
35:1a:85:85:57:e5:13:aa:db:67:63:36:d8:21:8f:9f:ea:71:
0e:e3:be:f6:be:1b:fe:fc:b2:72:bb:f3:97:cc:39:2f:c0:2c:
87:0f:e8:b4:91:f5:35:7d:6a:0e:db:91:c5:13:07:df:54:27:
34:d1:b5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org