Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/zZGV7KrF8Mo8QzxBXqZErW0G9cE.roa
File: zZGV7KrF8Mo8QzxBXqZErW0G9cE.roa (raw, json)
Hash identifier: aYhRIn1gXWyOWuWare5Rlg3KfuPJ5x+fTBnz5fVINaA=
Subject key identifier: CD:91:95:EC:AA:C5:F0:CA:3C:43:3C:41:5E:A6:44:AD:6D:06:F5:C1
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 0185728342D63F7097CF5F9B35A2772E008D
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/zZGV7KrF8Mo8QzxBXqZErW0G9cE.roa
Signing time: Mon 02 Jan 2023 12:44:42 +0000
ROA not before: Mon 02 Jan 2023 12:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48289
IP address blocks: 5.22.192.0/21 maxlen: 21
5.22.200.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:42:d6:3f:70:97:cf:5f:9b:35:a2:77:2e:00:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Jan 2 12:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd9195ecaac5f0ca3c433c415ea644ad6d06f5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:16:6d:89:1a:44:5d:e2:ed:a3:26:53:b6:08:
04:24:88:45:44:8a:71:81:4d:89:30:22:33:83:a0:
b9:ef:7d:e8:b9:ec:10:c9:51:ce:63:0f:31:54:3a:
3d:a7:3d:71:ff:a0:3a:93:ab:1e:f9:b7:cb:66:45:
4a:eb:65:11:51:f2:b4:50:a7:63:58:b0:3e:67:03:
42:49:88:32:5c:25:7c:5f:98:15:5a:99:7e:7e:98:
fa:a6:eb:d5:08:80:a0:16:00:7e:6c:d3:5a:18:61:
fd:cc:11:96:30:6f:e9:37:2e:84:e4:09:31:3c:d4:
c8:78:11:af:56:5a:5f:64:c3:ca:2d:73:6e:f9:ca:
05:1b:d8:74:33:25:50:bb:01:5d:22:46:ab:71:fa:
86:4b:0e:80:66:0e:79:ef:78:07:4f:51:d7:5d:ca:
87:6b:d8:32:8e:74:94:65:db:96:42:c3:0f:85:88:
c6:d5:96:8c:08:f9:d5:74:75:ef:d5:71:b2:d9:e2:
fd:2a:91:81:10:b8:f9:1c:ec:ad:59:dc:69:2e:8a:
53:88:cc:1b:94:08:2e:d9:63:ca:41:7e:f4:28:4a:
b9:62:e2:4d:05:7f:ce:c1:4a:d6:68:59:c5:08:c3:
f7:2b:4c:58:ab:bb:bd:4c:f7:7c:a6:3d:5d:67:10:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:91:95:EC:AA:C5:F0:CA:3C:43:3C:41:5E:A6:44:AD:6D:06:F5:C1
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/zZGV7KrF8Mo8QzxBXqZErW0G9cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.192.0-5.22.203.255
Signature Algorithm: sha256WithRSAEncryption
a1:fd:25:c6:95:a2:f9:14:5c:56:23:3a:fe:d2:c8:a5:b7:0b:
d4:65:48:15:73:11:9e:4f:91:de:1c:cb:24:ef:5a:9a:a5:44:
14:43:2e:7d:dc:5a:34:b9:32:bf:31:75:ce:d9:69:7d:fd:1a:
e4:0c:d4:ad:44:ce:ee:b2:9d:93:0f:02:b9:2c:fb:85:6f:85:
c1:0f:72:91:4b:c4:8f:0a:18:1b:d1:cd:6b:f7:02:52:a9:51:
c5:fa:50:4f:82:9c:21:25:d8:5d:cd:1e:11:d1:00:6d:75:02:
7c:56:b6:38:5c:ac:af:57:15:ee:9a:2d:2e:73:44:f0:03:32:
cc:4b:56:1f:ec:f4:40:b6:ae:8b:a1:b3:aa:de:0c:25:a9:b4:
68:f7:9b:cd:f3:dd:9e:c0:11:44:e0:b3:13:c3:6d:58:8d:c7:
4e:09:64:4a:26:60:57:7d:22:07:4e:fa:0c:79:42:8f:84:65:
0d:40:47:65:35:85:a1:f1:43:69:f2:86:a4:ca:f0:78:c1:c4:
33:5c:f3:a0:cb:98:9e:8a:e4:ae:ff:50:e2:93:3d:69:83:02:
d7:8b:c3:bd:df:12:21:1a:2c:0e:f7:35:c3:75:de:18:85:c7:
4c:0d:35:31:55:8a:7f:8b:dd:0e:59:1c:63:8e:30:08:c3:ff:
ba:e5:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:05 2024 by rpki-client on console-ams.rpki-client.org