Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1F6S4OIQv2LIVrTcX0AlvEvbd38.roa
File: 1F6S4OIQv2LIVrTcX0AlvEvbd38.roa (raw, json)
Hash identifier: juNdZ922DxtxZU16/JzrSYgX4ODXcViPGgquuWQtnYg=
Subject key identifier: D4:5E:92:E0:E2:10:BF:62:C8:56:B4:DC:5F:40:25:BC:4B:DB:77:7F
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F0F34080068A7A08637BE07495CBA3
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1F6S4OIQv2LIVrTcX0AlvEvbd38.roa
Signing time: Mon 02 Jan 2023 10:04:54 +0000
ROA not before: Mon 02 Jan 2023 10:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33881
IP address blocks: 5.154.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:f3:40:80:06:8a:7a:08:63:7b:e0:74:95:cb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d45e92e0e210bf62c856b4dc5f4025bc4bdb777f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:dc:fe:88:cf:48:c2:ad:fb:8b:8e:7d:8f:
53:db:b6:e4:47:b0:c1:01:e2:1e:a5:24:aa:b3:69:
26:10:e0:82:52:ae:32:54:03:f2:aa:fe:15:d2:ad:
c4:51:ef:88:f3:63:04:7a:ea:94:c7:47:19:d1:b3:
45:e1:29:6a:12:2f:44:0f:df:e6:0a:5f:28:e8:84:
42:6f:4f:7f:dd:aa:84:ab:e0:9a:3b:0e:58:77:ac:
fc:ab:d7:d0:a4:36:77:8d:b7:f1:93:73:d0:ab:26:
a9:1d:6e:13:9f:45:8a:d4:6a:83:8c:75:39:af:c2:
a0:7b:7d:03:b4:3d:1e:aa:a6:d0:4e:11:1c:fe:62:
8f:7d:0b:eb:38:66:ec:aa:49:8f:40:91:7c:fb:5a:
83:bb:7b:65:ca:06:e1:2c:48:79:3a:ec:a4:64:2d:
81:7f:70:f6:0c:1c:1d:45:01:e2:db:64:e6:a7:15:
13:b5:11:70:3b:82:22:4b:7e:9a:a2:c0:68:c7:d0:
82:25:f3:95:82:f1:78:f3:87:90:db:78:bb:f4:14:
3d:91:74:fa:04:fe:55:36:b1:80:17:6d:9a:4e:86:
e5:76:41:71:88:4b:94:0f:ce:26:62:aa:58:27:b1:
b1:9e:63:16:e6:fe:e3:39:c4:50:22:99:37:e3:60:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5E:92:E0:E2:10:BF:62:C8:56:B4:DC:5F:40:25:BC:4B:DB:77:7F
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1F6S4OIQv2LIVrTcX0AlvEvbd38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.172.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ad:65:af:62:7f:ee:1e:21:7a:97:f3:c5:3a:5b:38:b9:06:
bf:74:3e:a3:e7:a1:bc:a2:3b:12:8f:e7:14:44:e1:56:b9:16:
e4:65:d1:f7:b6:ad:e0:0b:58:ca:24:0d:33:f2:2e:a6:c2:6c:
ce:1e:73:ab:d7:a7:b6:23:64:34:e7:49:6c:3d:65:42:61:71:
ad:aa:00:43:1f:37:43:d9:07:9c:29:82:9c:4e:55:f9:7e:cc:
b2:3d:64:63:e6:c3:49:c8:eb:0c:1e:d9:85:63:d7:1b:5f:0d:
19:6b:cd:19:c1:c5:e4:e8:52:0c:08:84:40:70:dc:a7:f9:ee:
1a:cf:a6:44:95:b0:1f:99:d8:c1:9b:7a:65:0d:3c:f4:e5:5a:
c9:2b:aa:bb:12:a0:c6:cd:bb:b3:b8:92:95:72:f3:16:e5:14:
cb:3e:7a:2c:1e:22:26:9e:da:f9:62:6e:c6:ca:48:53:63:86:
d2:88:6c:e1:2a:20:bc:ae:17:85:05:b5:76:d3:1d:4b:f8:fe:
ea:dd:f7:a5:f7:c8:e4:51:5f:86:42:d9:7e:ca:2e:62:87:a0:
7f:90:5e:2a:7a:9b:52:c8:b8:32:a3:98:92:d9:d3:75:04:bf:
96:ee:30:ac:39:43:dd:96:de:1a:be:b4:50:d7:53:c9:ab:b1:
d4:16:35:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:36 2024 by rpki-client on console-fra.rpki-client.org