Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/A0ipfJ04KFcYwMjFE3Uep3yASvo.roa
File: A0ipfJ04KFcYwMjFE3Uep3yASvo.roa (raw, json)
Hash identifier: WoDwdgyGBv7aFyoGiKvc6OeHsW0+IU8ZMi8Vb0Wfn7c=
Subject key identifier: 03:48:A9:7C:9D:38:28:57:18:C0:C8:C5:13:75:1E:A7:7C:80:4A:FA
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 0188FE3FC6DEA916C3D091E63F05FA1638B5
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/A0ipfJ04KFcYwMjFE3Uep3yASvo.roa
Signing time: Tue 27 Jun 2023 19:06:12 +0000
ROA not before: Tue 27 Jun 2023 19:06:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212165
IP address blocks: 5.42.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fe:3f:c6:de:a9:16:c3:d0:91:e6:3f:05:fa:16:38:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jun 27 19:06:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0348a97c9d38285718c0c8c513751ea77c804afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:a7:1e:59:33:18:c2:e8:0a:4c:41:92:af:
e4:ea:c1:ca:8c:ce:fc:d2:f8:f4:f3:9d:e1:ba:45:
bc:46:5f:6f:83:be:b7:48:92:87:99:c9:a5:2d:fe:
21:e5:3b:39:8b:f4:00:63:ac:c0:5a:26:d2:7d:7a:
37:0e:72:fe:30:cc:0e:4b:03:66:bd:10:00:fe:aa:
f7:5c:25:b8:87:19:3e:da:c7:d5:d0:42:a4:b7:23:
98:05:ee:a9:5c:d2:cc:dd:ab:01:16:6b:1a:f0:f8:
8f:29:2b:2e:7b:2a:c5:d8:d3:1d:54:22:6f:40:01:
f3:31:4f:5d:7b:eb:46:60:7a:33:a0:e7:1b:5b:91:
07:a1:55:56:f2:e1:89:0a:10:d5:d1:60:23:8c:4b:
23:df:42:5f:9e:bf:8f:14:cf:45:6e:99:42:c1:9e:
12:cb:0a:91:67:97:77:a8:80:17:47:b8:22:2d:6f:
38:fb:51:25:a9:c8:00:78:50:10:c6:77:e0:bf:34:
6f:c2:fd:89:e9:89:ab:03:a6:f2:b1:d7:66:14:19:
04:ea:08:72:4a:de:86:54:e0:1d:1a:ce:ca:74:62:
b1:14:c0:a4:1f:d4:59:42:32:1e:70:a0:38:e4:73:
90:3f:ac:e8:45:fc:a7:7a:1e:6f:1b:7a:5b:96:3f:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:48:A9:7C:9D:38:28:57:18:C0:C8:C5:13:75:1E:A7:7C:80:4A:FA
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/A0ipfJ04KFcYwMjFE3Uep3yASvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:b5:47:b6:8e:47:29:2c:18:7b:6a:98:5c:36:1e:d2:13:b4:
61:b7:a3:68:41:e9:0f:e3:04:7f:45:59:44:08:e8:89:dd:2b:
2f:f9:f2:29:ae:1f:d9:2b:8a:03:4a:7e:25:bb:9b:34:02:68:
26:f1:a8:96:9f:0e:72:cd:c4:f3:75:e2:c2:c5:09:ab:cb:02:
e3:5d:9c:6c:3f:21:20:10:1e:02:d6:33:9d:b5:7d:35:52:1b:
e7:0d:b2:2d:62:85:c2:8f:84:b9:ec:7f:79:7c:41:00:75:d2:
6f:b0:57:b8:7e:9a:3d:a0:b2:0f:4e:7c:18:e7:e4:07:82:a2:
48:93:e0:5e:ae:76:0a:5b:ce:7d:4b:e1:d5:2d:07:c7:ff:68:
05:0a:7d:bc:e0:b3:88:45:0a:90:96:59:d4:70:94:5f:98:38:
0d:49:6a:0c:53:a5:b7:fd:a3:2b:00:fe:5b:88:f2:77:4c:44:
e4:d2:04:8b:5a:bb:57:a9:4c:8a:a3:0c:24:0f:2e:1d:66:0f:
81:02:45:b7:da:a4:3e:35:db:fe:fd:27:7f:b1:e6:22:5b:ff:
9d:86:a1:c2:75:7b:d2:dd:29:fb:95:fc:23:d3:db:31:e9:9e:
b3:65:63:0f:6a:85:95:9f:30:21:43:72:1c:05:a2:88:c3:66:
f0:b3:58:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org