Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/ERKJN7XqGAwLtI2xG5oWu5PDsWk.roa
File: ERKJN7XqGAwLtI2xG5oWu5PDsWk.roa (raw, json)
Hash identifier: Uxfgcq1yUzJFSVgMFO6diiZR5J5CgqvonkP172LfyLM=
Subject key identifier: 11:12:89:37:B5:EA:18:0C:0B:B4:8D:B1:1B:9A:16:BB:93:C3:B1:69
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018570674FE1204C1E07100DFB208218CD6B
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/ERKJN7XqGAwLtI2xG5oWu5PDsWk.roa
Signing time: Mon 02 Jan 2023 02:54:56 +0000
ROA not before: Mon 02 Jan 2023 02:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11426
IP address blocks: 5.182.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 15 Feb 2023 20:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:4f:e1:20:4c:1e:07:10:0d:fb:20:82:18:cd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 2 02:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11128937b5ea180c0bb48db11b9a16bb93c3b169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4b:6b:42:02:53:36:5e:5a:fc:80:f0:f2:5a:
58:26:85:31:08:b3:5f:e8:42:40:cb:65:a9:b8:7f:
a6:95:09:6d:08:59:2c:66:32:a7:4b:49:d6:ec:f6:
cb:cd:ba:44:14:79:e9:c2:92:aa:f7:df:10:cd:1d:
35:ec:98:74:6d:45:7d:53:34:48:72:2f:68:4e:f4:
01:3b:a8:e7:50:b7:f9:eb:99:9f:c8:62:a2:00:9f:
df:91:20:01:66:d9:be:b0:5a:e3:97:49:0e:4d:88:
f0:b9:1c:32:5f:97:96:79:7f:d9:65:62:ea:6e:06:
7e:8d:1d:40:4b:39:bf:61:5c:7c:d1:7b:27:aa:b9:
8c:0c:ad:0d:8c:1a:3a:bf:06:5b:91:25:1c:4f:7e:
24:0e:56:0a:fb:de:c3:0b:b3:77:7a:5a:f8:28:08:
64:ca:7a:8b:91:84:12:6b:91:1a:01:f8:a9:d0:d5:
c9:9d:e9:c6:29:0c:af:da:4b:11:83:80:70:6f:8c:
c2:b5:78:3b:f5:14:1f:06:cd:79:75:f2:d6:fd:e4:
9a:19:de:3f:4c:e7:a3:cd:15:97:06:6e:7b:a4:e1:
b0:11:ae:1c:fe:f0:94:61:62:e9:a8:71:b7:82:8e:
ae:82:1a:f6:4b:bc:a7:a4:f7:63:f9:d7:e1:d6:66:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:12:89:37:B5:EA:18:0C:0B:B4:8D:B1:1B:9A:16:BB:93:C3:B1:69
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/ERKJN7XqGAwLtI2xG5oWu5PDsWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:d3:0d:c1:ae:62:30:05:bc:9b:90:9e:69:bd:18:96:fb:1a:
69:98:d3:47:fc:be:ad:0d:4a:dd:b7:a9:7a:33:46:ac:f1:87:
9c:9d:a0:bf:b2:81:a5:03:37:60:9e:9f:86:77:6b:d5:51:dd:
1d:1e:3a:f5:04:06:1a:fc:de:32:12:fb:fc:0e:9b:79:10:7e:
10:86:86:c2:a2:0d:14:ef:91:68:9b:9c:06:44:fa:87:e6:63:
c0:3f:e1:70:cc:2a:d7:58:0d:42:74:d1:03:9a:5f:83:55:ff:
81:b5:b9:07:2e:fa:23:a1:2f:01:65:3c:58:c7:93:f9:b7:29:
2a:d6:a5:f6:fb:6e:49:27:59:b7:e9:d6:88:73:9e:e9:20:f9:
70:02:46:ca:ff:d5:a2:b5:1e:a1:8d:00:ab:b6:1c:73:fe:a3:
0d:21:52:17:d6:ef:ad:4f:23:cd:b8:d0:1a:56:2d:0c:72:e7:
71:05:1a:fa:90:9a:87:52:37:2d:03:47:9d:9c:bd:39:79:76:
73:8d:50:61:23:f8:1b:25:b8:94:fc:60:9d:31:18:21:db:c8:
35:9c:94:b2:5c:2c:62:15:ec:62:a7:01:6a:21:4e:a3:34:4b:
c9:96:b5:66:d6:df:69:a2:6c:16:9c:87:42:7f:e0:df:95:3c:
af:f6:49:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:15 2024 by rpki-client on console-ams.rpki-client.org