Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Gc64NQzXJbQCz79cAq9drY1YP4E.roa
File: Gc64NQzXJbQCz79cAq9drY1YP4E.roa (raw, json)
Hash identifier: htfkGpwZWIChfTq94M4j01Tavc8WGJN30ZSQwuYp2Ow=
Subject key identifier: 19:CE:B8:35:0C:D7:25:B4:02:CF:BF:5C:02:AF:5D:AD:8D:58:3F:81
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01857246FFC3AEB40FE7B4ADA5C1F73EDED2
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Gc64NQzXJbQCz79cAq9drY1YP4E.roa
Signing time: Mon 02 Jan 2023 11:38:53 +0000
ROA not before: Mon 02 Jan 2023 11:38:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39421
IP address blocks: 5.101.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ff:c3:ae:b4:0f:e7:b4:ad:a5:c1:f7:3e:de:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19ceb8350cd725b402cfbf5c02af5dad8d583f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:68:e8:fa:0f:41:63:4a:17:0d:8a:12:e2:
3a:bc:4b:63:54:95:23:a1:ec:08:88:d4:7d:78:f8:
92:50:6f:97:3d:67:20:cc:b8:e1:5b:13:e6:a4:81:
17:85:d5:b8:27:73:1d:cf:fe:68:f5:95:ee:b0:d2:
4c:45:cf:11:ad:91:d4:2b:dd:ff:71:5f:06:e4:b5:
78:2a:a9:28:99:a9:81:d4:12:22:92:2b:e5:b1:c7:
69:fc:e0:65:e2:83:17:ef:a6:31:22:d8:bd:83:34:
b8:80:d6:a1:73:c7:07:80:40:62:84:c6:83:c4:5f:
a6:72:f0:eb:0d:85:fa:0f:2c:a4:08:a1:af:38:92:
91:60:b0:69:06:d9:41:05:15:09:5c:bb:bd:2d:f2:
1f:3c:4c:c0:2c:59:f1:63:1c:16:05:76:6c:34:80:
9e:03:43:27:f0:30:37:b1:6c:db:5b:ac:07:e5:54:
58:77:e1:eb:60:56:68:3a:23:68:d9:fd:93:b3:07:
9e:95:73:38:ab:04:46:02:e2:ad:1a:db:e3:5d:a4:
79:8d:c0:24:2c:4b:00:8b:24:e7:92:4e:34:32:7a:
8c:54:da:87:64:b4:4b:e3:1d:89:0f:fc:dd:ac:c1:
6d:9f:ef:23:1c:04:97:a3:0b:2d:36:7a:66:b3:8d:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CE:B8:35:0C:D7:25:B4:02:CF:BF:5C:02:AF:5D:AD:8D:58:3F:81
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Gc64NQzXJbQCz79cAq9drY1YP4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6f:d0:0f:39:77:5d:41:04:6a:15:be:b3:23:5e:95:1f:3f:
2e:58:51:f8:ca:5d:58:71:aa:1f:4a:f1:d2:9c:ff:ac:52:16:
16:13:47:8a:55:3b:ae:16:7f:b1:70:f0:60:e1:ac:62:31:df:
dc:83:c8:ea:f6:74:49:75:a8:e8:b5:23:24:9b:9f:cd:7d:e4:
4c:76:83:78:e3:8c:46:9f:94:92:fb:86:50:9f:c9:18:14:29:
6e:d1:82:c8:27:1f:77:d0:29:e1:79:a9:65:33:09:5b:3a:90:
09:e6:7e:99:55:68:88:c5:96:6d:13:47:8d:81:60:63:a9:e5:
c4:19:74:a5:e2:e4:e6:c4:c2:31:b8:71:cd:a2:ad:0e:e4:a5:
c1:51:fb:2a:93:f9:5e:2f:14:62:01:eb:bc:ce:16:d3:93:80:
c7:63:f2:59:46:58:12:82:71:96:28:5a:63:1f:f0:93:d3:44:
b5:57:3f:d5:aa:45:86:81:07:89:81:18:31:92:cb:b9:3c:f1:
2e:7f:04:6f:be:da:4d:e5:3c:62:d8:b6:d0:c9:e4:8d:2e:7a:
9a:35:d7:8b:8d:1f:d3:f4:3a:e4:36:b4:2f:77:3c:9b:c2:14:
bd:78:14:23:b4:74:cb:2f:47:22:a8:18:8e:e5:90:71:3f:10:
4a:5c:45:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org