Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/aVUQwoLVGfk6j02ii89XiAOA8hY.roa
File: aVUQwoLVGfk6j02ii89XiAOA8hY.roa (raw, json)
Hash identifier: cSTarQTgCv8bymkLKi91px9E4TwAFu1Reg5x0obTI0s=
Subject key identifier: 69:55:10:C2:82:D5:19:F9:3A:8F:4D:A2:8B:CF:57:88:03:80:F2:16
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0188E6DFA76E4493DC06862069F682D43409
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/aVUQwoLVGfk6j02ii89XiAOA8hY.roa
Signing time: Fri 23 Jun 2023 06:09:57 +0000
ROA not before: Fri 23 Jun 2023 06:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45027
IP address blocks: 5.101.90.0/23 maxlen: 23
5.188.164.0/23 maxlen: 23
46.161.2.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e6:df:a7:6e:44:93:dc:06:86:20:69:f6:82:d4:34:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jun 23 06:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=695510c282d519f93a8f4da28bcf57880380f216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bd:a3:5d:33:3b:fa:21:45:de:82:6e:5f:21:
3d:51:78:04:e6:2a:95:11:8a:46:2a:12:ff:27:82:
05:0e:17:bf:d3:9b:ab:9b:2a:03:7d:7e:cd:e9:01:
48:0c:a6:5e:37:7b:33:e8:6d:0a:52:7d:2c:81:be:
4f:d2:a7:bb:70:c5:8f:82:fe:68:3d:c4:b1:b3:c3:
17:10:86:ca:a5:29:b4:4b:e3:26:b8:79:cb:46:5e:
ea:19:af:a8:be:dc:54:99:ed:cc:ba:08:3c:fe:53:
71:12:f1:29:7c:41:d1:43:ac:25:37:ec:31:db:df:
ec:fb:40:8f:ec:48:8e:09:44:53:a3:86:25:9c:13:
cb:f3:bc:fd:24:08:06:05:4a:9f:1e:0b:84:c6:f3:
14:a3:14:fa:29:02:74:ad:1f:b4:cc:00:60:57:a6:
40:4a:9a:75:1a:1e:ee:17:ff:fb:6c:57:68:af:8b:
d6:c0:28:b7:4f:e0:86:4a:85:22:f4:74:1f:38:27:
c4:6d:b2:67:24:33:ad:cc:8f:b4:84:63:7e:9a:36:
93:ca:9d:3a:08:a5:49:50:02:13:4b:6d:dd:9c:8a:
18:46:9d:4e:be:65:f7:f2:76:c4:32:8e:d9:5a:06:
95:9d:e9:8e:62:76:ce:86:c5:31:d3:b7:95:5e:48:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:55:10:C2:82:D5:19:F9:3A:8F:4D:A2:8B:CF:57:88:03:80:F2:16
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/aVUQwoLVGfk6j02ii89XiAOA8hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.90.0/23
5.188.164.0/23
46.161.2.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:09:04:e6:be:64:cd:2a:f1:5b:44:69:ef:db:0a:9b:75:84:
89:38:d7:94:9b:b7:21:1c:d5:25:28:60:17:6e:a9:aa:02:a3:
04:f6:8e:fe:0b:1b:3b:93:3f:f9:9c:0b:ad:58:17:d8:f7:00:
9c:7c:fa:79:9d:4f:6f:82:76:f7:1f:78:4f:06:97:b2:07:60:
af:f3:54:da:40:3e:d9:a5:52:11:3b:69:2c:9e:6a:75:ff:ef:
2f:b7:8d:6e:64:36:8d:10:f8:9c:cd:1b:9a:8f:2b:e9:53:0f:
ee:05:7f:33:5c:b2:6e:bb:03:a3:bc:33:de:b2:4d:fe:95:dd:
63:33:8b:02:c8:44:e6:c3:83:1d:f9:76:8e:9a:8a:b1:60:be:
00:8f:a3:33:21:36:e6:75:38:b2:33:92:96:ef:4a:8d:ca:bd:
21:23:c5:b6:4c:ec:81:f1:27:48:27:e0:8d:2f:62:6b:ee:2d:
f1:eb:c4:fb:68:e2:57:6e:f6:80:38:32:21:e6:fc:d4:94:23:
69:14:da:07:e6:e4:f2:94:0a:83:60:9d:7a:7f:1b:ab:92:0d:
fa:39:8b:a7:5a:6d:24:d9:ed:9c:2c:17:0b:11:db:e3:3c:79:
59:fb:3c:b7:25:ab:97:ed:e1:8a:b2:fc:57:a1:ff:89:c1:34:
0f:63:2e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 04:50:38 2023 by rpki-client on console-fra.rpki-client.org