Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Detvo6TIHiDJwbu_atJOt9C1cUg.roa
File: Detvo6TIHiDJwbu_atJOt9C1cUg.roa (raw, json)
Hash identifier: p5KxuRrWg1ngYqyDwG2Bkrz/iqvaIGrJnllMaQoRVR0=
Subject key identifier: 0D:EB:6F:A3:A4:C8:1E:20:C9:C1:BB:BF:6A:D2:4E:B7:D0:B5:71:48
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 0186D68B36CD4BBD96605544D2A84888004A
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Detvo6TIHiDJwbu_atJOt9C1cUg.roa
Signing time: Sun 12 Mar 2023 15:58:13 +0000
ROA not before: Sun 12 Mar 2023 15:58:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397373
IP address blocks: 5.182.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d6:8b:36:cd:4b:bd:96:60:55:44:d2:a8:48:88:00:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Mar 12 15:58:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0deb6fa3a4c81e20c9c1bbbf6ad24eb7d0b57148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:ab:1e:5e:07:85:d5:26:2e:2e:a5:75:9c:
75:9b:2e:cb:6d:d9:65:17:4c:30:09:b9:5a:cc:12:
26:0f:2e:b2:d2:4f:92:61:7e:fc:5f:af:09:56:8c:
d4:53:8f:01:f6:11:c1:31:44:8b:bd:f7:22:f6:9e:
44:0b:52:74:0c:3b:4f:68:c0:a3:79:78:c1:f5:92:
af:76:64:d9:7b:f2:2f:bd:72:1a:f7:5d:85:3d:bb:
26:c4:6a:22:05:3d:d0:c0:b9:c3:2a:27:49:2a:4f:
eb:63:dd:37:0d:ad:44:cc:d9:3a:41:6e:84:7e:6b:
09:c1:45:6c:48:cd:7c:1e:1d:22:6f:47:2a:ad:ff:
5b:16:8f:2b:98:28:af:7d:57:13:ab:97:62:ba:63:
ff:49:c6:87:8a:90:f5:43:49:3c:46:2b:11:2b:06:
fb:4a:96:7b:1a:b8:bc:7a:87:4d:48:09:7d:20:4e:
2d:c4:84:38:da:62:2d:47:18:ca:62:04:37:90:e1:
18:ed:b3:cc:ff:1f:3c:1c:e7:60:6c:82:ff:50:21:
92:db:a5:c2:08:d0:6b:b3:3c:30:91:ca:0d:54:39:
4d:9f:3d:7a:6d:8c:d7:d3:b8:45:e1:7e:17:f2:93:
db:65:73:f9:5e:e2:07:7b:aa:61:00:bf:77:e5:79:
65:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:6F:A3:A4:C8:1E:20:C9:C1:BB:BF:6A:D2:4E:B7:D0:B5:71:48
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Detvo6TIHiDJwbu_atJOt9C1cUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.102.0/24
Signature Algorithm: sha256WithRSAEncryption
92:06:6d:0e:07:28:3b:a0:c3:a4:1d:e9:3b:37:a5:23:0d:18:
24:04:85:02:de:ea:53:e4:86:1a:41:36:20:de:0d:86:3a:5e:
63:87:4f:29:14:9d:e6:84:96:18:b7:be:0b:5c:0d:c7:b4:99:
dc:18:db:0f:c1:5f:72:6b:20:d0:d8:e3:00:de:31:69:88:d1:
89:1e:2e:68:71:fc:8b:93:9b:91:cd:a9:71:f6:13:65:5e:1e:
bf:8c:00:da:15:c4:e6:da:97:99:a0:64:77:0a:dd:a6:a2:44:
9b:73:ea:23:ef:fe:ea:c7:f2:23:ba:47:79:ed:60:53:1c:bf:
cd:c2:30:2a:4e:99:27:48:54:49:71:cb:44:7a:9f:2f:9a:b0:
7f:03:8a:53:8e:86:f8:62:1d:a3:89:8d:fb:83:53:3f:77:c4:
3c:76:a4:15:50:a0:b6:ec:43:83:0d:9f:d9:ae:b1:18:31:c3:
fc:63:09:58:56:0e:b2:4e:b3:ab:b3:28:ed:f3:33:77:4d:5f:
16:f6:bf:19:58:5e:de:67:aa:d7:8a:9b:9b:df:28:e6:7a:f2:
ca:88:7b:96:a3:f0:73:73:a0:ab:da:28:5c:a8:44:b9:4c:fd:
23:53:67:43:94:e6:ae:61:c9:41:9c:df:37:b0:9a:a1:a0:5f:
c4:9b:cb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:26 2024 by rpki-client on console-ams.rpki-client.org