Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DWofT3izsb0tFuZh4XLJnxVub-Q.roa
File: DWofT3izsb0tFuZh4XLJnxVub-Q.roa (raw, json)
Hash identifier: Fh1+Pnh3hQXu9pKUvTxmuKe2uJm54r8lQWS/BnB7T/A=
Subject key identifier: 0D:6A:1F:4F:78:B3:B1:BD:2D:16:E6:61:E1:72:C9:9F:15:6E:6F:E4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01857328409518A1911C71A8FC915E50EBA1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DWofT3izsb0tFuZh4XLJnxVub-Q.roa
Signing time: Mon 02 Jan 2023 15:44:55 +0000
ROA not before: Mon 02 Jan 2023 15:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57565
IP address blocks: 5.230.206.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:40:95:18:a1:91:1c:71:a8:fc:91:5e:50:eb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 15:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d6a1f4f78b3b1bd2d16e661e172c99f156e6fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:10:7a:52:b9:5c:ab:0f:68:d6:7b:4c:f6:46:
82:fd:8a:0c:87:ee:ac:60:e0:6b:c6:65:25:cc:1f:
78:0b:57:1c:59:14:6c:ea:a0:cc:0f:3d:30:0e:6c:
4a:f3:ff:50:95:c3:00:23:62:0e:80:c4:c6:b6:b2:
58:23:61:cf:61:78:11:40:21:64:08:fb:12:4c:96:
73:69:0a:a4:43:b2:57:00:1c:e2:1e:f7:d9:c8:7d:
d2:bb:d8:a3:27:d2:2a:68:9f:73:76:79:25:22:b2:
42:5b:1d:14:f8:92:24:28:2f:d8:20:fc:75:dc:4d:
a0:31:de:43:3e:01:6d:e1:d6:8d:da:cc:6d:46:53:
6d:b7:15:6b:10:27:05:c6:ef:88:9a:08:f9:57:cb:
27:6c:74:ed:76:aa:14:a9:38:d9:17:fe:47:ee:06:
76:fd:7e:fb:d2:1f:3c:1f:78:f8:2f:d3:15:e5:7f:
0d:78:da:b3:7b:bc:96:85:7e:db:c9:6a:fd:66:8e:
6e:bd:5a:fd:30:65:30:b5:04:dd:9e:1e:81:80:f9:
e7:45:96:22:a6:14:88:6b:a7:70:dd:9e:1e:e3:a1:
2f:d2:db:15:3c:3d:a3:97:ad:db:6b:d3:9f:29:b0:
41:b2:56:ae:d8:6c:e1:d4:62:2b:6d:6d:ab:14:64:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6A:1F:4F:78:B3:B1:BD:2D:16:E6:61:E1:72:C9:9F:15:6E:6F:E4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DWofT3izsb0tFuZh4XLJnxVub-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
Signature Algorithm: sha256WithRSAEncryption
79:86:96:24:67:22:15:11:a6:2a:39:5d:c6:18:97:c3:83:61:
cc:ef:19:aa:1c:ae:8b:0e:e4:8e:f5:b1:e2:3d:86:bd:80:85:
e0:ea:88:07:15:60:38:aa:7b:95:1f:2f:74:6c:b9:fc:c4:65:
03:ab:a1:96:41:21:52:27:00:75:02:b7:95:e4:26:ed:d9:56:
cb:af:b4:8e:9a:2d:85:d0:e7:eb:c6:17:07:53:79:2b:96:d5:
db:ee:8a:b2:0b:6b:ee:51:f8:6a:ac:17:55:7e:53:49:f9:21:
a8:28:49:6c:d3:9d:98:43:36:7b:2f:c1:c3:30:0d:cf:e5:8a:
ec:ce:64:dc:d7:4a:ed:52:ce:b1:b0:ee:c4:4b:ab:3a:88:0a:
63:8d:9f:f5:ff:bc:b0:cf:6b:39:58:7d:16:c7:e1:f1:9b:a0:
06:81:67:70:3a:72:94:a5:0a:df:57:98:89:df:46:40:8c:78:
f5:df:e0:a1:70:a6:58:a4:23:fb:67:5d:6c:b7:8a:b8:66:49:
e9:2a:2c:e2:af:8c:fc:16:a8:78:2d:2e:07:29:00:9e:4c:fb:
3a:16:d4:e5:32:0a:37:e2:c8:d3:b5:c5:aa:06:ab:5f:8f:37:
70:2a:f8:70:55:75:9e:b5:68:94:43:ec:de:e4:40:c9:18:e2:
cc:b6:61:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org