Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jDkzy6Por0GIP7JZk-QSKLEVrbM.roa
File: jDkzy6Por0GIP7JZk-QSKLEVrbM.roa (raw, json)
Hash identifier: dUYWmbBT2S1fRI8OdZlpq62omsb3HaGUB+LHk7YKlDc=
Subject key identifier: 8C:39:33:CB:A3:E8:AF:41:88:3F:B2:59:93:E4:12:28:B1:15:AD:B3
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0186078E9FFCD6FF0480C03C13B8F23EC33B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jDkzy6Por0GIP7JZk-QSKLEVrbM.roa
Signing time: Tue 31 Jan 2023 11:20:32 +0000
ROA not before: Tue 31 Jan 2023 11:20:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50896
IP address blocks: 5.188.219.0/24 maxlen: 24
37.9.41.0/24 maxlen: 24
37.9.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:8e:9f:fc:d6:ff:04:80:c0:3c:13:b8:f2:3e:c3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 31 11:20:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c3933cba3e8af41883fb25993e41228b115adb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:71:da:9e:10:6b:7c:9a:45:3f:8d:39:4f:05:
24:dc:c9:7b:fe:29:6f:24:df:5a:5a:aa:17:48:97:
18:18:b4:a7:2b:24:93:66:7f:d2:88:e6:26:a9:0a:
01:69:be:35:92:38:10:7a:8f:6e:02:4a:43:7b:67:
f8:34:3a:e7:b2:b8:7f:c9:5f:f7:7f:0e:7f:8f:ac:
cd:26:08:95:14:8d:6f:f3:32:75:47:99:37:21:53:
10:31:13:db:b7:8f:70:b0:5a:a8:97:21:c2:32:94:
82:f1:d9:94:bf:96:ea:8d:eb:d9:75:64:e0:c9:1c:
0a:23:ed:e2:ef:05:04:65:b6:7f:02:63:d3:d0:0a:
40:a4:c3:26:d6:84:f5:3b:09:22:22:83:b9:32:ad:
f6:70:a6:53:b0:b1:3f:48:0b:04:db:12:62:a1:9d:
4a:0e:04:69:ee:8d:e9:b6:36:1f:e0:b1:23:34:d0:
b4:e1:79:0a:8c:7b:a1:77:11:52:f5:7e:e5:fc:9c:
9f:43:6f:fb:9d:d7:2b:16:88:08:c6:ad:ac:c5:73:
49:92:ab:91:23:cb:47:ea:cd:29:5f:b7:dc:eb:8d:
f9:3a:27:6c:36:8c:05:dd:ae:98:73:07:27:7c:ce:
78:a0:ed:b8:2c:6b:1c:37:f0:92:d3:09:30:9b:e0:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:39:33:CB:A3:E8:AF:41:88:3F:B2:59:93:E4:12:28:B1:15:AD:B3
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jDkzy6Por0GIP7JZk-QSKLEVrbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.219.0/24
37.9.40.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:64:90:19:9f:64:b7:57:02:61:75:c8:9b:ce:56:16:30:e8:
7b:c4:c9:2e:0d:5e:16:24:2c:22:55:62:19:db:f6:4c:88:ee:
fa:67:dd:32:0a:c9:70:33:2b:d6:9d:a8:16:5c:5d:09:e8:a0:
1a:69:be:cb:75:fd:cf:c0:0b:87:e3:f7:9d:b9:36:eb:ce:3d:
d2:bf:2b:37:d1:0d:9d:93:d4:98:dc:db:1f:6c:ec:fc:b2:63:
f0:9e:ed:6c:79:8c:24:89:0f:87:23:44:13:8e:7c:b8:e4:02:
f1:c1:70:6f:59:69:5f:cd:70:39:ce:3c:7e:5a:c3:6b:62:6e:
38:c9:4f:87:8c:88:c6:0d:78:c6:49:f8:be:a3:70:05:4d:03:
c9:a0:aa:34:9d:3c:d6:8e:9a:0e:d4:5a:67:32:32:a2:d8:45:
40:94:39:e3:6d:f2:0c:71:50:bd:9f:84:23:83:75:10:91:96:
01:bd:e4:1a:68:de:f8:f9:4f:ce:9e:1f:53:a8:88:9b:d0:a1:
c6:4f:1d:0c:55:71:b6:72:3a:c4:84:50:06:47:c8:9a:a0:05:
f3:11:5d:4c:76:45:27:61:3a:41:e5:0f:84:64:02:59:e7:8c:
e7:f7:7d:7e:d4:fe:94:f1:2c:67:67:09:10:a6:0e:b2:9d:c9:
94:ed:b2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org