Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/2askBs4OGmGbCBxRvOSyqPwu_fA.roa
File: 2askBs4OGmGbCBxRvOSyqPwu_fA.roa (raw, json)
Hash identifier: tsGnEPU9Z9VoKbeiiQJKDrEVydn8ShIMH5BryXeBiZM=
Subject key identifier: D9:AB:24:06:CE:0E:1A:61:9B:08:1C:51:BC:E4:B2:A8:FC:2E:FD:F0
Certificate issuer: /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial: 0185720C96587E5535DCBABE31021E4E5431
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/2askBs4OGmGbCBxRvOSyqPwu_fA.roa
Signing time: Mon 02 Jan 2023 10:35:05 +0000
ROA not before: Mon 02 Jan 2023 10:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8796
IP address blocks: 5.183.80.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:96:58:7e:55:35:dc:ba:be:31:02:1e:4e:54:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Validity
Not Before: Jan 2 10:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9ab2406ce0e1a619b081c51bce4b2a8fc2efdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:70:c3:65:c0:fb:0b:4e:05:4c:67:da:ce:
7e:09:bb:eb:f6:09:f4:fd:2d:cd:b3:d7:53:f0:61:
38:9b:1d:bc:d8:5a:9e:e3:b6:09:ae:f9:ae:46:f9:
55:6c:d5:13:02:8a:f5:6a:e0:62:00:38:99:dc:19:
88:0e:32:d2:10:37:85:b4:ff:33:73:ac:49:ae:2e:
2f:13:48:b5:3b:8c:a5:60:6e:8e:b4:39:ce:49:60:
36:e4:41:77:8f:4e:16:6a:f7:7b:a2:bf:33:bb:05:
c2:ac:98:69:14:c5:e8:8e:e6:8b:ee:d6:b9:4b:9d:
ee:af:ed:25:0a:0b:40:d4:18:11:50:9c:03:37:14:
01:61:03:7b:2d:ad:29:dc:4b:78:40:a6:0a:ac:3b:
f7:25:9a:aa:d4:8e:b6:5c:40:25:b2:8f:0c:45:5d:
55:1d:6c:c0:f6:0e:0a:1b:30:23:f8:d1:01:4b:29:
a4:bc:a6:68:67:84:c5:aa:f1:86:f6:e2:e7:9c:ed:
e1:58:41:0b:5e:66:15:a1:75:2a:cb:83:7f:07:e6:
e7:00:5f:d6:8b:c6:8a:f9:8e:fe:d5:66:8f:99:5e:
86:99:2b:17:16:f8:94:51:ea:56:e8:ea:7a:e0:d2:
a8:1a:76:13:39:49:ee:bc:23:1a:52:95:ea:60:2c:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AB:24:06:CE:0E:1A:61:9B:08:1C:51:BC:E4:B2:A8:FC:2E:FD:F0
X509v3 Authority Key Identifier:
keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/2askBs4OGmGbCBxRvOSyqPwu_fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.80.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:15:01:7f:4c:4c:8d:fc:be:46:cf:12:3d:76:e0:b3:cf:d6:
6b:ac:a7:42:c1:6a:60:cc:73:bf:b7:e0:68:a9:b5:76:6e:9f:
20:ab:0a:59:cc:48:c6:c8:08:4b:ea:85:20:b2:be:c4:da:8d:
32:4c:9f:fa:9a:a8:c5:89:16:a9:b4:63:8c:63:23:3b:ac:b7:
7d:0e:2d:d0:26:93:50:60:0e:a1:f7:ca:3d:34:c4:43:5e:56:
a7:fe:88:be:07:1d:db:9d:79:6a:2a:b3:29:6d:1a:2a:61:cf:
19:40:13:13:d7:24:be:86:c2:11:fb:d3:2e:28:76:fc:56:7b:
37:df:bc:85:73:64:87:e9:0f:a6:f5:49:87:85:f6:0d:0f:7c:
cb:14:1b:8d:3e:f5:97:d9:bf:15:e8:85:7a:3b:c4:37:d2:7c:
53:3e:ff:f2:84:95:28:1b:f9:59:af:c2:ba:79:a7:05:b0:bc:
67:4d:b8:bc:29:45:5c:83:70:0f:e0:5b:97:37:09:99:8a:67:
3c:27:ae:10:11:e5:1d:6a:d4:cb:57:8c:36:70:74:7e:4b:80:
6b:ee:90:65:6b:72:14:9d:0f:40:24:e3:97:a7:40:ec:23:b0:
0a:01:36:6e:0d:6f:d6:b6:f8:ed:67:bb:83:0b:8a:09:a7:a6:
c2:74:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:03 2024 by rpki-client on console-fra.rpki-client.org