Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/uDrcMEXh8E9fHH8pmf1PN9apiss.roa
File: uDrcMEXh8E9fHH8pmf1PN9apiss.roa (raw, json)
Hash identifier: 728mA1kuKCSvV8ZIWrwYaIb3g6cLcjVu7+gTSXnA/z4=
Subject key identifier: B8:3A:DC:30:45:E1:F0:4F:5F:1C:7F:29:99:FD:4F:37:D6:A9:8A:CB
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018572471A16B475AABB563A2C7CC79EE36B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/uDrcMEXh8E9fHH8pmf1PN9apiss.roa
Signing time: Mon 02 Jan 2023 11:39:00 +0000
ROA not before: Mon 02 Jan 2023 11:39:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211849
IP address blocks: 5.188.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:1a:16:b4:75:aa:bb:56:3a:2c:7c:c7:9e:e3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:39:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b83adc3045e1f04f5f1c7f2999fd4f37d6a98acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1f:0a:d7:e7:4c:da:57:4b:f1:5a:05:be:f1:
df:69:00:c3:60:ba:d0:9b:6e:f3:83:13:7e:92:e7:
bc:35:77:22:a3:4f:3b:ae:c2:d9:16:11:a8:cf:c5:
58:c6:cc:0d:e1:0b:61:f8:09:9f:0a:f6:9c:db:83:
9c:ec:09:00:89:dd:05:c1:ac:9b:16:55:e4:c9:23:
84:46:19:ce:71:45:29:94:f9:96:84:7d:76:a2:af:
20:36:ba:ab:1c:4b:d4:32:03:2c:67:a4:69:b0:a9:
57:c2:9d:4b:61:ff:20:72:1e:c3:6d:87:15:cc:ff:
61:bc:13:0e:75:0c:4e:94:94:42:bb:fe:be:71:42:
98:e5:7d:f2:41:63:8e:d4:d2:f5:84:b5:47:60:73:
09:0e:ed:46:89:e3:03:01:30:02:2b:4a:93:54:ff:
41:ae:19:5e:97:78:93:04:d2:85:7c:6d:7e:16:b6:
b2:52:e3:82:64:c4:ea:e7:9e:b1:2e:d2:06:37:4f:
a5:35:dd:39:e2:bb:02:20:c7:aa:97:93:33:a4:53:
48:61:8d:27:7d:ad:9e:c3:fb:42:f0:09:80:5c:2f:
69:50:b7:f0:96:2d:76:ca:c9:93:6f:ac:a8:0d:80:
ce:51:8a:56:d4:ad:e0:f8:c5:01:15:23:d1:ac:37:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3A:DC:30:45:E1:F0:4F:5F:1C:7F:29:99:FD:4F:37:D6:A9:8A:CB
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/uDrcMEXh8E9fHH8pmf1PN9apiss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.49.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7f:a2:5c:ea:4e:66:91:90:93:cf:ca:44:6f:56:78:ac:20:
80:aa:7c:0b:73:ee:1e:5a:fa:2a:b3:92:0c:89:3b:5e:34:82:
65:11:c8:18:30:31:27:05:3f:c0:6c:9a:53:ab:83:3f:ac:22:
99:db:7e:e1:a3:36:8a:bb:8c:3d:3a:e0:b4:00:2d:45:77:6c:
c2:1c:f5:90:52:27:25:0a:10:e8:10:b7:82:6c:64:51:6d:4c:
13:cf:77:7d:fc:64:9f:d9:23:5d:3e:be:bd:82:7a:8d:8a:82:
bd:9f:4e:8b:96:fd:4d:e4:96:dc:46:1e:10:26:0a:32:18:ce:
83:6c:e3:07:8c:08:f6:1c:1d:d5:ed:32:91:14:ee:bd:2c:11:
a2:8b:d7:eb:59:74:1d:7f:b5:52:08:cb:88:a4:0c:e8:a0:2c:
6b:d8:ec:02:9f:12:00:a1:63:10:ab:e2:e1:b8:03:7a:4a:67:
fe:85:5b:32:97:65:33:18:20:99:42:8d:c7:93:19:b5:85:13:
46:0b:a8:62:fd:67:3f:32:dd:10:f5:d7:2e:d3:46:8a:d7:84:
49:a0:22:46:d6:1d:8f:97:6b:7d:d7:1a:34:a6:0b:ac:d4:43:
b4:d5:d7:f4:3a:8a:d8:95:02:34:d8:27:9a:7e:a7:44:5e:76:
df:76:d6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:44 2023 by rpki-client on console-ams.rpki-client.org