Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/HB5f6Q5744h7ZhXd_grxuRS2I9o.roa
File: HB5f6Q5744h7ZhXd_grxuRS2I9o.roa (raw, json)
Hash identifier: 9Q8w3oyfzld9drBCMlUZW8EX/VSj1CMov3LlC5CffOQ=
Subject key identifier: 1C:1E:5F:E9:0E:7B:E3:88:7B:66:15:DD:FE:0A:F1:B9:14:B6:23:DA
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01870B00AF266E67D28CFA71EF3F8AEBF02E
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/HB5f6Q5744h7ZhXd_grxuRS2I9o.roa
Signing time: Wed 22 Mar 2023 20:26:46 +0000
ROA not before: Wed 22 Mar 2023 20:26:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57271
IP address blocks: 5.104.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0b:00:af:26:6e:67:d2:8c:fa:71:ef:3f:8a:eb:f0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 22 20:26:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c1e5fe90e7be3887b6615ddfe0af1b914b623da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:58:83:42:95:74:2e:dc:1c:a5:8c:60:4f:
84:41:7b:a4:f4:11:ab:a4:8b:bd:f7:86:f5:43:c8:
57:b2:3e:63:b2:d2:3c:6a:95:8c:20:3d:c9:6e:ad:
b2:4d:f1:4a:90:93:a9:66:73:22:0f:4f:8c:bf:4b:
fb:45:1b:e3:a2:f4:5e:cc:74:3d:87:83:55:ee:2e:
d9:61:0e:f6:68:41:2f:d9:ce:6c:4a:fe:4b:62:53:
3b:0e:11:39:56:ef:fd:82:de:ea:58:64:fc:14:cd:
64:e1:b2:7a:9d:56:36:7c:e8:15:e4:8e:f1:0d:cb:
9e:86:c1:fa:7b:87:e9:de:ca:58:cc:e2:c9:33:77:
b7:a1:74:ce:47:88:24:ab:71:56:b2:27:65:39:64:
6e:a2:5d:d3:69:2d:99:09:3b:f5:94:37:57:d1:aa:
b8:76:9f:4e:4b:69:66:52:c3:08:37:b8:56:b4:bf:
f4:02:10:63:93:e6:cd:d7:c9:d3:d9:d9:a5:7a:09:
f8:c4:fd:db:83:58:86:11:58:6f:60:08:ec:fb:c1:
3a:32:81:1b:c2:ed:c7:34:20:1e:01:1a:e2:a4:de:
93:97:7b:15:b3:24:05:9c:a8:83:bb:a9:81:8a:c7:
77:10:35:5a:88:b9:5b:ad:65:21:6b:00:d5:96:71:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:5F:E9:0E:7B:E3:88:7B:66:15:DD:FE:0A:F1:B9:14:B6:23:DA
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/HB5f6Q5744h7ZhXd_grxuRS2I9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.74.0/24
Signature Algorithm: sha256WithRSAEncryption
89:32:51:c3:6d:95:d7:63:69:98:b6:96:78:f6:bd:be:bd:55:
19:37:9c:eb:bf:54:c9:b1:0a:ac:0b:28:a4:f1:17:d9:5c:c4:
62:91:61:f4:bf:e4:36:46:1b:09:b4:d5:58:1a:5f:0f:72:f9:
05:e7:da:21:6e:d1:9b:f8:0c:e3:5f:cb:00:2e:e9:95:ac:34:
b4:c4:80:e6:c9:80:11:a2:93:ea:91:bb:45:8e:d7:de:fc:03:
56:7d:47:71:4c:c6:37:14:36:86:b5:8c:e0:b1:2f:95:2f:5d:
09:e0:54:14:a0:eb:ab:9d:39:70:f6:ab:5e:6b:1b:47:2d:24:
b1:94:f9:bd:3a:6a:95:53:e8:88:31:a7:9e:27:a1:73:1f:0c:
7c:f9:45:6b:78:f7:e8:77:78:7d:20:a5:9c:1c:f5:a2:03:2d:
0e:05:a4:7c:e5:e1:92:9d:96:90:d9:50:97:6d:11:ed:ce:5d:
6b:8d:a6:cf:44:d1:50:1b:c2:ed:87:79:f2:93:99:11:38:f5:
b3:61:85:95:62:e9:05:fc:82:0c:29:6d:06:e7:95:53:db:5f:
b6:27:ff:eb:67:ac:1d:ac:04:90:4d:8d:e8:ae:30:9f:b7:ff:
b4:b1:8f:65:fc:0f:f9:17:84:58:20:3d:73:d1:d7:f6:9e:74:
0c:45:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-fra.rpki-client.org