Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/33N_EqPPX6ehRAeNK6Evzk0tDAs.roa
File: 33N_EqPPX6ehRAeNK6Evzk0tDAs.roa (raw, json)
Hash identifier: nWBxe+negj1xBGBwysAgzRQMXRl+/blnCeWV2qbhnbw=
Subject key identifier: DF:73:7F:12:A3:CF:5F:A7:A1:44:07:8D:2B:A1:2F:CE:4D:2D:0C:0B
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018C7508967CF3CE497E0D2F50F99047BA75
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/33N_EqPPX6ehRAeNK6Evzk0tDAs.roa
Signing time: Sat 16 Dec 2023 23:49:06 +0000
ROA not before: Sat 16 Dec 2023 23:49:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216145
IP address blocks: 5.144.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:75:08:96:7c:f3:ce:49:7e:0d:2f:50:f9:90:47:ba:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Dec 16 23:49:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df737f12a3cf5fa7a144078d2ba12fce4d2d0c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:e7:77:79:67:87:61:5b:dd:09:2d:c3:93:
35:9d:87:d8:fd:30:d2:ae:52:de:3f:ce:1d:de:56:
e0:64:6f:a8:d7:6e:b5:02:18:7e:0e:52:5e:98:28:
03:d0:2d:b5:49:ac:38:da:ea:93:64:96:33:b9:53:
c5:fb:1d:71:18:ce:56:f4:32:ac:b7:2d:e7:0b:7a:
4a:d6:0d:4c:fd:78:c2:d5:da:12:5e:8e:38:7a:86:
0e:d0:a3:f8:81:ae:d8:5f:ee:aa:ae:1a:02:42:4e:
c4:e9:41:b5:43:d3:39:97:a6:61:81:b6:c4:b7:26:
c2:57:5f:65:01:94:09:51:f2:23:e1:26:52:8b:1d:
d3:65:dc:b1:9e:d4:db:16:36:8d:a1:a6:8a:7c:9e:
a6:bd:4f:62:55:32:28:41:89:79:46:fd:1f:3a:6a:
03:bf:48:ef:7d:ef:9a:12:c1:22:a6:0f:cc:c7:f8:
9e:a6:60:00:b3:d5:9e:58:5e:57:85:20:51:0f:ea:
cf:92:da:8c:53:e2:e8:e7:d4:b1:58:84:25:54:c7:
59:79:58:66:26:0d:64:3d:b2:43:51:26:9e:8d:c5:
c3:b7:89:72:3f:09:d3:8e:25:96:f9:3e:8d:68:26:
52:bf:93:7d:7e:f6:9d:5e:08:78:7a:5c:60:a0:11:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:73:7F:12:A3:CF:5F:A7:A1:44:07:8D:2B:A1:2F:CE:4D:2D:0C:0B
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/33N_EqPPX6ehRAeNK6Evzk0tDAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.183.0/24
Signature Algorithm: sha256WithRSAEncryption
69:59:d9:5e:e4:99:a9:99:95:1b:f6:be:14:81:5a:da:fc:c5:
bc:e7:7b:55:f5:02:28:84:24:62:4f:52:88:9b:c1:10:b1:f6:
45:7b:31:d6:12:19:2b:2c:85:a5:fc:9c:78:1c:10:c1:78:83:
ed:ca:5b:54:e1:8b:d5:8f:37:8c:c6:c8:a2:12:4e:b4:d2:0d:
bf:58:ec:8c:a3:59:07:7a:1e:13:14:1e:a4:52:ff:3d:03:58:
ba:c9:76:bb:e6:db:72:a7:12:c8:48:c8:6a:0e:2e:0e:0a:e4:
ee:b3:7c:3e:f1:3f:3c:61:72:5c:70:e8:a8:7c:e1:9b:7d:2f:
83:e5:d0:84:63:78:da:36:95:be:7e:20:7e:13:fb:50:ec:64:
e7:ab:c3:3c:65:2f:cf:a8:be:f9:89:8c:b0:af:15:e4:e0:98:
1a:d5:e3:9d:69:f6:f8:ad:ca:71:08:02:74:1b:a4:41:55:9b:
ea:23:da:6f:36:5e:a0:93:bf:19:b2:c1:c7:01:50:f1:af:87:
71:da:70:d6:f2:c4:5b:ce:bb:e0:0c:21:6e:98:a7:41:e7:60:
41:a6:5c:cc:eb:c6:8a:d9:28:82:18:34:7c:c3:a1:63:4a:42:
46:01:08:1a:8e:85:1c:e0:16:cd:7f:ee:bf:ab:ad:f5:47:c1:
ec:8c:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:30 2024 by rpki-client on console-ams.rpki-client.org