Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/m4KIhQrumR-HtWZnbW_Lhq8x_No.roa
File: m4KIhQrumR-HtWZnbW_Lhq8x_No.roa (raw, json)
Hash identifier: N0eexgJ0IG3wcDNKtAuIgQ3vKh1oDEQOPuEfq7mYyjs=
Subject key identifier: 9B:82:88:85:0A:EE:99:1F:87:B5:66:67:6D:6F:CB:86:AF:31:FC:DA
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0189C5FFA0827894C7D3B736A33FF81863B6
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/m4KIhQrumR-HtWZnbW_Lhq8x_No.roa
Signing time: Sat 05 Aug 2023 14:00:11 +0000
ROA not before: Sat 05 Aug 2023 14:00:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200391
IP address blocks: 5.188.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:ff:a0:82:78:94:c7:d3:b7:36:a3:3f:f8:18:63:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 5 14:00:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b8288850aee991f87b566676d6fcb86af31fcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:68:5a:1f:c8:92:c8:a1:e2:c1:9c:ef:c2:
2b:86:6c:c0:5a:49:00:32:58:b5:76:aa:26:ba:c7:
5e:fb:82:bc:57:ed:20:00:9b:df:b4:bb:80:f8:94:
5b:4f:39:63:09:90:9e:db:a6:29:3a:b0:59:85:29:
69:8b:cc:39:e5:a9:a7:75:ec:ee:bd:19:0f:2c:b9:
4f:84:d5:6a:f5:44:d8:60:1e:13:26:74:a8:d3:e1:
2b:ae:8c:02:8a:4b:1c:45:ec:c7:85:6d:b0:20:bc:
49:fa:7e:38:02:0a:f2:af:da:3d:bd:17:7d:e2:b8:
23:f5:8e:3e:2b:56:dd:cb:b8:c6:b0:5e:78:c7:35:
64:5a:64:09:9f:6b:6b:af:11:30:5d:d8:ed:af:1b:
64:4a:8b:5f:2c:51:68:c0:09:c6:bf:be:e2:5c:5e:
56:2e:aa:67:38:40:6f:a7:12:be:78:41:26:24:af:
f8:d9:6a:21:32:2f:bc:8e:0a:29:64:3f:c0:a8:04:
ff:93:41:4f:5a:3c:b7:20:f5:63:fa:3c:86:16:ab:
ab:3b:11:c3:12:e4:b2:bb:52:b8:0c:14:d4:a6:8e:
0f:38:2f:c3:a2:41:20:7d:05:06:ec:ef:77:62:52:
c8:4d:7f:5a:1f:d0:9b:c9:15:a4:57:c6:47:70:a6:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:82:88:85:0A:EE:99:1F:87:B5:66:67:6D:6F:CB:86:AF:31:FC:DA
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/m4KIhQrumR-HtWZnbW_Lhq8x_No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f0:74:91:b4:ad:8c:7e:1c:3a:84:d4:07:d8:aa:c8:16:36:
c0:c1:88:cc:f3:c7:15:77:b7:2a:4c:7f:af:c5:14:f5:91:d0:
af:b5:13:44:78:3e:fe:13:86:34:ef:26:ec:0a:6c:cd:ad:ff:
bf:dc:b0:bf:ad:09:fb:c9:f2:dd:30:e6:e4:4a:71:54:72:64:
e7:c3:aa:27:ec:c9:4b:82:bf:43:b1:ba:c5:02:21:90:d2:3f:
d4:f7:2d:3b:e4:dc:2d:2c:05:05:42:8a:53:55:d5:cb:5e:a4:
9c:94:61:88:26:13:45:4f:68:4f:da:3e:b4:43:8c:ea:4c:46:
82:19:29:09:3e:9f:f8:41:f6:c2:fd:4a:e9:0d:d3:24:fe:f7:
17:3c:78:c8:68:96:26:28:f9:82:fb:8f:ad:81:2c:2d:00:51:
b2:5b:8f:98:2a:e6:3a:b7:91:02:82:04:e9:47:75:a0:07:d4:
ea:86:2f:df:84:6f:28:7d:28:2d:06:fa:80:d9:45:7c:4b:f7:
37:cc:60:7e:00:20:d0:0b:ae:8e:9b:04:92:42:fb:47:5c:52:
1e:fc:04:a4:ad:5b:e8:ae:d7:a4:8c:1c:31:e3:4c:4e:ad:2c:
46:da:0a:d1:4b:69:fe:09:5f:8f:35:55:2e:ef:2f:02:a9:e0:
84:1a:2e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org