Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_fx0ox77XI6tO8n-n0p3rZMnoWM.roa
File: _fx0ox77XI6tO8n-n0p3rZMnoWM.roa (raw, json)
Hash identifier: WroLkUdNsVQReH06FcvRj4ZabRmGi+OSXZC+zK6Frpc=
Subject key identifier: FD:FC:74:A3:1E:FB:5C:8E:AD:3B:C9:FE:9F:4A:77:AD:93:27:A1:63
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01857247098E3513BA24263BE518D0881A21
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_fx0ox77XI6tO8n-n0p3rZMnoWM.roa
Signing time: Mon 02 Jan 2023 11:38:55 +0000
ROA not before: Mon 02 Jan 2023 11:38:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47478
IP address blocks: 5.188.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:09:8e:35:13:ba:24:26:3b:e5:18:d0:88:1a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdfc74a31efb5c8ead3bc9fe9f4a77ad9327a163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:c1:a9:5a:02:fe:f9:75:13:3e:c2:01:a4:
ee:d1:4c:4b:a4:ac:99:f5:bb:41:1a:fa:ea:91:ca:
6a:3b:9e:22:2c:83:5c:a2:18:68:c1:fa:7e:d3:bd:
c8:b7:3e:db:df:d4:b9:c4:cf:55:7a:ff:6b:f5:a8:
58:0f:e5:a9:8c:35:83:68:91:4d:a0:58:9e:08:0c:
b4:b8:81:d3:2e:4c:d6:7d:81:c5:ff:cf:04:ca:ad:
17:3b:94:fd:cb:5c:cf:8a:50:5f:c6:55:5c:fe:1b:
d0:1b:88:89:6f:20:69:ca:71:c9:ea:5e:ca:13:47:
91:8c:5e:a3:89:54:10:c9:ac:a7:24:c1:44:20:6d:
8e:d6:6d:c3:30:22:72:93:6f:d3:2c:3e:de:2c:2c:
bf:f1:76:48:23:db:a1:1a:43:73:79:da:40:21:f3:
f3:60:ee:e4:db:cc:95:45:d3:10:8e:04:79:9b:52:
b5:77:d0:8c:22:2a:8c:0b:b2:69:dc:06:41:03:88:
95:53:d8:43:31:18:36:dd:16:f7:01:bd:e7:d6:00:
7f:f2:7e:da:02:85:bd:9b:b3:20:7e:79:ba:82:16:
e2:f5:7e:50:8f:87:6a:b9:62:3d:76:60:e8:03:f2:
cc:00:d3:98:5f:6a:ea:81:49:5c:a4:c0:fa:95:ba:
3b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FC:74:A3:1E:FB:5C:8E:AD:3B:C9:FE:9F:4A:77:AD:93:27:A1:63
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_fx0ox77XI6tO8n-n0p3rZMnoWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.52.0/22
Signature Algorithm: sha256WithRSAEncryption
45:f8:9c:fa:09:bd:49:ce:c3:45:65:33:e4:3c:3e:77:54:42:
ee:5f:0a:e1:ff:df:43:ae:d8:5c:e2:b6:31:e2:1a:f8:8d:a3:
e3:d5:67:09:e9:a9:45:21:ef:93:88:1d:40:7c:0c:2e:63:49:
81:ec:fe:dd:07:b5:d4:42:9c:9b:21:01:75:ac:34:89:6e:ea:
ea:cb:bb:d8:a7:47:68:48:b4:11:46:00:a5:eb:ce:23:64:3a:
db:95:04:bd:71:fe:bc:d6:e4:c7:a9:86:3f:ca:1a:54:20:7b:
0b:81:1a:6c:51:95:ef:5f:ed:63:84:f1:85:46:c7:1a:bf:d9:
e9:36:1c:b8:dd:44:fa:5a:cf:42:2a:db:28:04:9e:19:be:56:
e0:62:72:c2:89:07:2a:8e:41:73:38:79:9f:00:cf:5c:3a:67:
06:ce:5e:ac:e5:fa:4d:20:c5:3a:94:64:3f:22:1e:4b:8a:54:
a9:4f:9e:bc:c9:e8:78:1a:e6:15:22:8e:84:a4:79:c1:6a:52:
ed:34:c9:9a:e0:bd:6c:6a:b3:25:c8:00:de:84:44:b0:7f:95:
5e:d8:b3:b1:2e:f0:0d:60:70:f4:a3:5b:65:71:42:c3:ad:c8:
1a:57:20:c4:24:a4:e2:8a:14:ad:32:75:c6:de:23:44:f3:f2:
df:05:e4:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRwmONRO6JCY75RjQiBohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMwMTAyMTEzODU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGZjNzRhMzFlZmI1YzhlYWQzYmM5ZmU5ZjRhNzdhZDkzMjdhMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQPBqVoC/vl1Ez7CAaTu0UxLpKyZ
9btBGvrqkcpqO54iLINcohhowfp+073Itz7b39S5xM9Vev9r9ahYD+WpjDWDaJFN
oFieCAy0uIHTLkzWfYHF/88Eyq0XO5T9y1zPilBfxlVc/hvQG4iJbyBpynHJ6l7K
E0eRjF6jiVQQyaynJMFEIG2O1m3DMCJyk2/TLD7eLCy/8XZII9uhGkNzedpAIfPz
YO7k28yVRdMQjgR5m1K1d9CMIiqMC7Jp3AZBA4iVU9hDMRg23Rb3Ab3n1gB/8n7a
AoW9m7Mgfnm6ghbi9X5Qj4dquWI9dmDoA/LMANOYX2rqgUlcpMD6lbo7nwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP38dKMe+1yOrTvJ/p9Kd62TJ6FjMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvX2Z4MG94NzdYSTZ0TzhuLW4wcDNyWk1ub1dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbw0MA0G
CSqGSIb3DQEBCwUAA4IBAQBF+Jz6Cb1JzsNFZTPkPD53VELuXwrh/99Drthc4rYx
4hr4jaPj1WcJ6alFIe+TiB1AfAwuY0mB7P7dB7XUQpybIQF1rDSJburqy7vYp0do
SLQRRgCl684jZDrblQS9cf681uTHqYY/yhpUIHsLgRpsUZXvX+1jhPGFRscav9np
Nhy43UT6Ws9CKtsoBJ4ZvlbgYnLCiQcqjkFzOHmfAM9cOmcGzl6s5fpNIMU6lGQ/
Ih5LilSpT568yeh4GuYVIo6EpHnBalLtNMma4L1sarMlyADehESwf5Ve2LOxLvAN
YHD0o1tlcULDrcgaVyDEJKTiihStMnXG3iNE8/LfBeTk
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org