Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2CgwFGxPwmMI7Rw6DEMmtcEV3PQ.roa
File: 2CgwFGxPwmMI7Rw6DEMmtcEV3PQ.roa (raw, json)
Hash identifier: Uc/p6RBByq5PGq74pGbIjJSCrlpt30pvp+0lG414l18=
Subject key identifier: D8:28:30:14:6C:4F:C2:63:08:ED:1C:3A:0C:43:26:B5:C1:15:DC:F4
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018709508FF759EA17C6F8EC5427E65E0216
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2CgwFGxPwmMI7Rw6DEMmtcEV3PQ.roa
Signing time: Wed 22 Mar 2023 12:34:47 +0000
ROA not before: Wed 22 Mar 2023 12:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39047
IP address blocks: 5.101.208.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:50:8f:f7:59:ea:17:c6:f8:ec:54:27:e6:5e:02:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Mar 22 12:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d82830146c4fc26308ed1c3a0c4326b5c115dcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:e7:2b:12:d2:9d:de:e4:29:cf:26:86:95:
38:0a:1a:c0:1c:79:fc:c7:a9:b8:9a:93:67:e9:32:
9c:62:05:88:08:7f:ca:23:ce:79:59:6f:15:b1:85:
3f:10:cd:c8:73:40:77:27:08:f3:e8:80:a9:b7:4c:
ed:e6:9c:9b:15:88:95:f9:79:08:42:e7:06:f5:c5:
cb:34:4d:ce:81:47:71:23:df:33:ce:aa:49:31:94:
b1:35:bd:27:46:ed:31:1a:2d:13:04:68:77:3c:f8:
76:67:50:6f:11:f7:a7:97:0c:9e:98:7b:36:d2:d1:
65:06:c4:97:18:04:24:f7:a9:12:58:29:5f:06:67:
65:cd:f7:b1:c6:78:06:12:8e:17:bb:84:6f:69:38:
6a:a8:99:49:d2:7c:a6:a4:77:0c:5a:fb:ec:23:15:
64:92:8e:bf:ed:b2:33:85:ac:2e:9e:12:c7:a3:de:
3d:af:25:eb:ef:43:ea:1b:2c:6a:57:00:5d:62:77:
5c:fa:66:87:38:15:c3:42:4e:fe:68:68:78:54:3c:
cd:7e:e6:b5:ad:14:e0:06:c2:bd:15:b9:0d:35:2f:
65:9d:74:0c:26:a5:b5:46:b1:2c:ef:1a:b6:97:ff:
94:78:94:d3:0a:08:9c:1b:67:72:fb:8e:5b:17:ec:
a4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:28:30:14:6C:4F:C2:63:08:ED:1C:3A:0C:43:26:B5:C1:15:DC:F4
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2CgwFGxPwmMI7Rw6DEMmtcEV3PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.208.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:3c:32:26:16:bf:e2:1a:52:9c:d5:e7:0a:2f:83:65:63:d5:
55:98:e8:42:1a:48:60:f3:ef:e0:35:b9:c3:68:fb:31:d1:60:
1e:b0:a9:86:53:15:73:e4:f8:6a:08:9b:b9:11:6a:99:a1:a5:
22:c9:b8:01:d7:dd:d2:86:69:66:3a:e5:c9:d2:cc:a8:13:ba:
8f:43:46:a6:10:d5:36:29:07:b9:3a:cd:ae:df:3a:c0:bd:fd:
a1:07:9f:62:21:e7:b3:a0:48:2f:60:66:74:4a:09:e6:76:ee:
7b:7d:df:9d:85:cd:0f:2d:df:44:a3:39:56:50:ce:5f:12:25:
c1:c2:b1:b9:ea:d1:fc:98:11:74:c3:df:08:e9:93:58:ed:df:
9b:51:8e:cc:da:f8:a9:2d:1c:fe:b0:15:13:11:3d:9b:b2:b9:
cc:19:ec:e1:a0:76:d8:5e:63:79:91:ed:ba:f6:73:e2:05:91:
57:b8:df:f1:01:fe:50:85:0d:df:19:f4:e4:e0:67:1c:e5:b1:
f1:32:ce:13:e2:40:a0:7f:d1:b1:34:af:e2:b1:ec:72:b0:f0:
2d:89:63:d8:12:4e:43:ab:53:2e:08:fd:2c:bc:8e:23:bf:8d:
70:07:4b:1f:0f:91:72:8e:d9:4b:87:c2:62:7b:c3:d4:f2:0f:
02:2e:ec:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org