Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_4Dm_qQhrD4ZICHE8UeJMkkZWyc.roa
File: _4Dm_qQhrD4ZICHE8UeJMkkZWyc.roa (raw, json)
Hash identifier: kNEfVwwsdmltAO5O1YS/fGdNMj0A2KqmWZUfN8WhPrY=
Subject key identifier: FF:80:E6:FE:A4:21:AC:3E:19:20:21:C4:F1:47:89:32:49:19:5B:27
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018709508F43C90B63628A1E0459F954693E
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_4Dm_qQhrD4ZICHE8UeJMkkZWyc.roa
Signing time: Wed 22 Mar 2023 12:34:47 +0000
ROA not before: Wed 22 Mar 2023 12:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25591
IP address blocks: 5.101.208.0/22 maxlen: 22
5.101.212.0/22 maxlen: 22
91.243.36.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:50:8f:43:c9:0b:63:62:8a:1e:04:59:f9:54:69:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Mar 22 12:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff80e6fea421ac3e192021c4f147893249195b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:13:f3:14:84:48:bd:59:01:a2:5e:6f:1d:
31:81:22:27:76:89:0c:4e:88:42:a5:e9:26:bb:66:
f4:05:07:0f:2f:0b:c0:e4:cd:ec:8e:6a:4d:2f:ac:
b2:8c:d3:de:b8:b5:18:03:36:e2:a2:af:fc:7d:86:
e3:1e:18:a2:b2:c2:ec:55:f4:56:ec:50:43:51:88:
6e:d7:89:eb:ef:52:0a:cf:93:72:f5:9c:22:3b:16:
ca:c0:44:35:ed:f6:11:b8:17:2c:da:77:03:16:82:
c4:a7:85:4f:cb:37:87:b3:43:e8:70:40:c3:7f:07:
d7:7f:f9:29:c0:c6:16:22:8e:db:0e:78:23:76:06:
f2:37:87:bc:d3:1a:f0:e1:14:c0:25:51:30:00:88:
b4:6b:a4:8f:4c:4e:73:0f:8b:d5:8d:f9:af:a9:b8:
11:c3:42:33:0b:26:3b:21:89:8a:31:02:19:e1:ae:
82:4c:81:6d:00:7d:be:f7:b4:50:6e:8f:62:5d:74:
e6:70:aa:12:64:e5:79:af:53:d4:3e:f8:b7:60:c9:
ac:f1:d4:1e:27:1e:aa:cf:07:89:8b:b4:5b:45:ee:
2c:72:6e:23:22:75:7c:1d:2d:d4:a0:ca:40:0c:54:
a4:ba:35:32:d1:d1:d8:a8:bf:6b:de:82:74:d7:db:
e8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:80:E6:FE:A4:21:AC:3E:19:20:21:C4:F1:47:89:32:49:19:5B:27
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_4Dm_qQhrD4ZICHE8UeJMkkZWyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.208.0/21
91.243.36.0/22
Signature Algorithm: sha256WithRSAEncryption
00:30:3c:96:00:4b:14:cd:50:54:3c:6d:cb:e2:dd:a8:eb:bc:
06:41:63:cd:b0:e5:00:63:77:67:2e:8c:2e:d2:97:f2:d2:1a:
35:da:fc:2e:f7:7b:7a:0a:0c:d7:11:1a:45:93:6a:af:9c:bf:
b6:6e:0e:74:93:c6:d9:b8:c2:bd:4d:99:e3:06:54:df:ef:4e:
72:59:8b:37:d1:88:de:54:d1:f6:7f:13:fd:1d:3b:29:31:38:
cc:dd:0e:6a:68:32:02:ab:93:87:01:9d:32:fe:ac:c7:e7:6a:
fb:39:8b:dc:23:da:39:0c:4e:8a:bf:9c:c6:4d:26:b4:65:de:
fe:39:22:59:8b:66:6b:aa:2f:14:3c:16:81:44:00:d5:76:b8:
d3:dc:f7:43:9c:d0:bb:b3:66:69:10:ac:18:61:24:ab:7e:e0:
55:62:6e:8a:ce:76:3a:31:51:28:0d:7d:7c:26:71:8e:a3:22:
74:35:39:98:30:2e:b3:e1:c0:cd:c9:7a:3a:c3:9b:6c:81:20:
4e:ce:ec:7b:13:3a:dd:e4:64:cf:ba:e7:bf:6e:0b:d1:82:50:
14:df:ce:57:6c:60:35:0b:c0:15:75:a1:f7:6d:87:f9:b3:e9:
5e:39:f1:5a:cb:b0:e3:e6:8e:4f:cf:19:1d:91:ea:1d:b3:a4:
b8:f8:c3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org