Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/dx3OI13wTFevSItBtXCt70-Di94.roa
File: dx3OI13wTFevSItBtXCt70-Di94.roa (raw, json)
Hash identifier: g7CqDatwg3nKPA9Hfe5WyWI/ZtL2FpP+67G0rDCdEsc=
Subject key identifier: 77:1D:CE:23:5D:F0:4C:57:AF:48:8B:41:B5:70:AD:EF:4F:83:8B:DE
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 01856F14A6D9AF0F1E0693ABC310103F42DF
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/dx3OI13wTFevSItBtXCt70-Di94.roa
Signing time: Sun 01 Jan 2023 20:45:02 +0000
ROA not before: Sun 01 Jan 2023 20:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200436
IP address blocks: 5.42.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:a6:d9:af:0f:1e:06:93:ab:c3:10:10:3f:42:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jan 1 20:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=771dce235df04c57af488b41b570adef4f838bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:ff:6d:a4:bf:71:95:77:1c:1a:59:70:4f:
38:21:f4:a2:b2:51:d0:30:67:8e:9f:53:07:b2:9d:
58:4b:cc:a3:07:c7:15:f4:0e:2f:99:f4:53:29:ea:
40:d1:14:d7:7e:63:5c:6d:18:9a:08:5e:83:a4:3a:
88:58:ae:cc:6d:2b:72:c9:fe:ec:fc:f0:a2:ef:64:
a2:e5:72:b5:98:83:0f:b1:4e:a1:fd:08:9d:f2:1d:
a9:2e:b0:c0:71:dc:25:e6:1d:c9:d2:b7:d5:9f:07:
f9:56:7e:15:f1:fb:b5:6a:49:d0:96:3e:d1:b5:e7:
11:9e:49:6e:40:5f:6a:ec:b7:22:34:1d:ec:45:26:
e0:3a:9e:db:c4:7c:40:86:9b:5c:b4:16:e1:e4:b0:
f9:9b:b4:b1:a5:85:02:99:68:f9:89:35:4a:e2:9d:
cd:a3:c8:1d:03:0b:37:36:f8:16:8e:c5:2d:f5:95:
4e:ca:da:4c:18:3f:bb:08:0a:21:82:93:f5:d6:17:
26:64:0c:09:e0:f2:49:89:47:0d:cb:bd:11:e6:97:
9a:b5:df:76:c5:af:cb:9e:6e:99:52:23:26:62:9b:
58:9b:70:50:25:65:61:f5:f0:70:6b:44:ab:6f:92:
e2:86:50:3b:88:07:b0:7a:7a:0c:a9:51:d6:51:ab:
fc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1D:CE:23:5D:F0:4C:57:AF:48:8B:41:B5:70:AD:EF:4F:83:8B:DE
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/dx3OI13wTFevSItBtXCt70-Di94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.223.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8b:67:eb:11:44:36:ea:82:fc:96:c3:5d:4b:0e:6a:8f:df:
63:95:dd:83:44:a7:18:8c:69:b3:d4:f9:96:0d:97:23:60:68:
c0:33:ac:54:59:60:b4:62:a5:31:12:a9:26:e8:66:01:3b:b4:
e3:98:50:1a:6f:e8:e4:51:bc:3b:f5:bb:90:a7:20:cd:22:05:
81:d7:41:30:fc:fd:4c:56:16:b8:c5:ef:b1:28:c3:43:ca:8c:
6c:79:51:19:bc:c9:72:15:21:ff:b5:49:8c:a7:82:27:eb:65:
e4:e6:6b:b8:37:6f:0a:81:3c:c5:0f:32:35:e5:1f:6d:fb:20:
84:b7:fe:c5:22:2b:a7:41:65:74:10:50:f1:5e:e2:8e:0d:d2:
7c:b6:59:95:a8:8f:77:f1:89:f8:85:8c:f0:41:cc:b5:db:cc:
56:db:8b:3a:30:f5:af:c0:c4:4c:8d:f6:c2:d8:1c:24:3d:c4:
1f:4f:56:be:93:e7:19:df:83:54:ca:75:93:52:bb:46:a8:41:
55:05:d4:e6:6d:55:05:cf:0d:6a:ce:8f:18:aa:b4:61:ab:43:
e2:19:bd:1b:f6:e1:b0:78:fd:43:f9:10:0d:a6:5d:38:4b:f2:
75:1d:05:fa:d1:35:ec:f6:0b:95:8c:77:43:45:0d:ef:16:9f:
70:ce:0f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:10 2024 by rpki-client on console-ams.rpki-client.org