Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/XqTaNmrVtTs3q1BOIqD9LN-pyVc.roa
File: XqTaNmrVtTs3q1BOIqD9LN-pyVc.roa (raw, json)
Hash identifier: VOOVXcTV1UsAZllrCR/XwdW3klfTEXsB7MjeUrBFRs8=
Subject key identifier: 5E:A4:DA:36:6A:D5:B5:3B:37:AB:50:4E:22:A0:FD:2C:DF:A9:C9:57
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018570674D21768F4BCC76EA17631C803ADD
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/XqTaNmrVtTs3q1BOIqD9LN-pyVc.roa
Signing time: Mon 02 Jan 2023 02:54:56 +0000
ROA not before: Mon 02 Jan 2023 02:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 5.182.120.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:4d:21:76:8f:4b:cc:76:ea:17:63:1c:80:3a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 2 02:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ea4da366ad5b53b37ab504e22a0fd2cdfa9c957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:38:f6:78:8d:82:48:7e:45:ce:c5:fe:f7:
29:d9:e4:4a:39:81:8e:39:af:23:dd:8f:c2:bf:91:
89:b9:c6:d0:02:39:28:39:0a:05:73:94:03:3d:4f:
ce:4b:d0:09:d1:e5:42:9a:a7:19:5d:3b:bd:72:69:
9a:eb:d5:88:d7:b0:7c:36:24:37:56:4d:32:6a:9a:
43:5d:20:00:59:cd:93:ea:e9:e1:3a:f9:6b:f7:41:
cd:47:df:5f:5d:a4:74:6e:a2:15:05:b7:59:18:7f:
fa:43:6e:d0:88:d4:54:39:10:b7:c5:93:46:d8:30:
0c:a9:0b:31:4a:cd:57:29:30:62:11:7f:c1:15:3e:
db:d6:11:52:e7:a4:35:c5:a9:5e:ec:e4:82:20:35:
f6:87:0c:58:da:a2:d8:6e:ac:be:7b:f1:9c:4d:0a:
49:90:d2:55:c1:0b:a3:6e:04:fc:65:68:9d:50:bf:
38:85:46:8b:3b:51:48:cb:96:03:64:8b:88:9e:90:
a4:72:12:00:93:16:0c:ac:b3:f9:ef:0e:fe:f2:fc:
e4:9e:46:07:8a:4f:a6:fd:56:df:10:a6:6e:da:3d:
ad:d7:8d:0f:d4:c2:c7:c3:ea:44:ec:af:06:11:70:
e5:d9:76:79:5f:82:82:52:84:e0:69:1c:4e:9c:67:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A4:DA:36:6A:D5:B5:3B:37:AB:50:4E:22:A0:FD:2C:DF:A9:C9:57
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/XqTaNmrVtTs3q1BOIqD9LN-pyVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:22:38:f9:06:ad:e7:37:d1:de:2d:72:69:e0:0f:57:29:77:
64:4c:1c:c1:84:fb:86:99:89:f2:a3:59:50:68:60:a5:5f:bc:
c0:80:f0:df:c8:72:76:18:c9:c6:05:4c:21:21:f3:24:af:90:
91:9b:0a:3e:36:62:2e:0e:1b:be:92:44:2d:7f:5e:2d:d8:0a:
b2:bd:f7:9c:66:58:50:f1:45:be:49:79:8f:f6:76:74:85:c1:
38:c6:f6:f1:2d:9a:26:15:f3:c8:c3:94:87:23:47:e0:db:b2:
29:bd:3c:22:34:c5:7e:c6:0c:06:2a:df:4a:7d:b9:84:92:bf:
30:1e:79:54:d6:cb:b5:50:1e:ba:bb:bd:cb:b9:dc:c6:1f:d0:
ab:0b:70:74:5a:6c:86:6a:70:46:ae:91:52:cc:0c:12:58:93:
1f:c0:95:04:46:ad:66:85:16:15:ab:9e:5e:03:88:11:65:97:
05:9d:26:a2:98:97:a1:84:69:ce:28:9d:4c:56:a3:8e:8c:90:
6b:51:d8:f2:03:46:c8:24:9f:1b:12:ed:a2:71:9d:b5:0d:09:
08:8d:03:11:f1:f3:71:1a:5f:22:fd:52:98:4e:4c:e6:db:18:
19:f1:f9:fd:48:25:bd:08:9b:82:75:ec:96:51:fa:04:77:7b:
05:21:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 18:37:34 2023 by rpki-client on console-fra.rpki-client.org