Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/m87dHh2Yg3HqoobF3KNg9q3gKOA.roa
File: m87dHh2Yg3HqoobF3KNg9q3gKOA.roa (raw, json)
Hash identifier: HJEvmWq7+eEN5PN8NcamVjsGYPFp3Yf7FimNj9pHe04=
Subject key identifier: 9B:CE:DD:1E:1D:98:83:71:EA:A2:86:C5:DC:A3:60:F6:AD:E0:28:E0
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 0188D5F9E63A0BEBDEA9616AC176F1773467
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/m87dHh2Yg3HqoobF3KNg9q3gKOA.roa
Signing time: Mon 19 Jun 2023 23:25:04 +0000
ROA not before: Mon 19 Jun 2023 23:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8330
IP address blocks: 5.57.88.0/21 maxlen: 21
193.203.5.0/24 maxlen: 24
2001:7f8:17::/48 maxlen: 48
2a00:eb20:abcd::/48 maxlen: 48
2a00:eb20::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d5:f9:e6:3a:0b:eb:de:a9:61:6a:c1:76:f1:77:34:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Jun 19 23:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bcedd1e1d988371eaa286c5dca360f6ade028e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:9d:4d:25:3d:0f:67:db:de:65:fe:2a:35:
b2:d9:9c:84:0b:61:c2:9c:99:cf:a5:23:be:fa:f8:
af:57:20:4e:a6:2f:73:95:a7:eb:ea:64:d7:81:04:
51:7a:c8:e3:fe:67:0c:b7:44:1d:a2:89:b3:0b:3f:
e7:13:ae:f8:71:e3:9b:a3:f9:8d:f2:53:73:69:ef:
a5:b7:04:43:f4:4c:05:73:9a:da:58:a4:3e:7d:42:
d2:f8:43:3d:12:15:d3:0e:a7:20:b2:4c:94:cc:cd:
57:1e:37:1a:42:8c:64:f4:3b:43:a3:0e:e6:35:7b:
f6:e6:51:02:41:d3:75:0f:96:00:a5:9b:3b:91:dd:
c2:3e:36:16:bb:dd:36:74:f9:cf:e2:24:f8:8f:94:
a4:1f:b4:91:e1:5f:cc:17:3f:c4:d4:8e:de:16:cc:
0d:6a:76:89:11:4d:c1:af:1d:37:4c:38:4a:c2:ed:
ee:0d:53:13:0a:86:34:06:cc:f2:8f:d0:74:2e:8d:
6b:5b:95:97:0f:24:9f:2c:58:8a:83:44:9c:22:af:
61:fd:e9:6a:28:93:b1:f8:95:6d:43:d6:00:91:70:
89:30:10:ee:61:72:e7:a1:23:6a:c7:db:c2:33:86:
cb:1f:43:ec:7e:1a:2f:d3:66:d7:bb:57:ad:db:8a:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CE:DD:1E:1D:98:83:71:EA:A2:86:C5:DC:A3:60:F6:AD:E0:28:E0
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/m87dHh2Yg3HqoobF3KNg9q3gKOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.88.0/21
193.203.5.0/24
IPv6:
2001:7f8:17::/48
2a00:eb20::/32
Signature Algorithm: sha256WithRSAEncryption
7d:9e:4d:66:df:52:e3:c4:b8:ea:5d:ee:68:7a:8a:a2:b6:66:
e8:e6:d1:8b:2a:82:0e:6c:2b:98:ee:9e:60:93:fa:45:c5:8e:
b1:5b:ef:8e:d4:33:1a:78:32:f8:e4:9b:35:30:21:1b:58:19:
d6:b2:9d:ac:34:d3:d6:ec:a1:cd:b9:a6:d2:45:1d:d9:4f:8f:
ab:01:de:55:69:9e:e4:ef:ae:47:8a:dc:12:83:53:1f:32:e1:
88:8b:e7:8d:12:e6:ca:a2:58:94:dd:63:65:06:28:0f:6d:b8:
e8:c4:a7:e4:3d:27:5c:2c:3d:d8:a7:03:55:12:88:57:05:9e:
2a:db:50:e5:eb:77:00:a8:e1:81:26:4c:d0:10:fd:31:2d:f1:
70:a3:0f:a2:e3:58:d7:e6:3b:10:af:8e:e8:79:b6:16:be:ab:
94:9c:ec:a0:88:1a:03:c7:c6:8b:a8:fd:90:b5:a3:b7:9a:a6:
26:f0:dd:25:9c:37:37:57:ec:27:38:44:d1:46:35:46:78:6f:
74:09:06:9c:be:82:e4:74:70:55:d0:60:e5:3f:ca:54:3b:a2:
ad:5f:a6:28:62:b7:8a:79:2c:be:14:6f:f1:f9:29:ab:e4:bc:
56:d7:65:ba:a1:c7:d1:7d:7a:70:9b:d7:fb:f1:11:0b:00:fe:
f2:46:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:05 2023 by rpki-client on console-ams.rpki-client.org