Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/E94vSOWjkps4iHS-F5aEJgQE6wQ.roa
File: E94vSOWjkps4iHS-F5aEJgQE6wQ.roa (raw, json)
Hash identifier: Z182m2fN6moV+PnJmVa8pRCRP9W7w8VBBhx6qPWIqiE=
Subject key identifier: 13:DE:2F:48:E5:A3:92:9B:38:88:74:BE:17:96:84:26:04:04:EB:04
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 01856C1C96BBFEF0366CCAE6AA1E6440A856
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/E94vSOWjkps4iHS-F5aEJgQE6wQ.roa
Signing time: Sun 01 Jan 2023 06:54:50 +0000
ROA not before: Sun 01 Jan 2023 06:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12779
IP address blocks: 5.104.26.0/23 maxlen: 23
5.104.30.0/24 maxlen: 24
5.104.28.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:96:bb:fe:f0:36:6c:ca:e6:aa:1e:64:40:a8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Jan 1 06:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13de2f48e5a3929b388874be179684260404eb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:77:72:b5:32:9f:fe:42:64:af:58:a7:5f:
68:2b:81:07:7e:26:a5:c1:3b:f9:3c:0a:bd:c0:a8:
46:fa:41:52:42:bd:f5:e0:0c:4e:9f:9c:04:3c:8c:
94:f6:0f:f4:75:d3:09:b4:75:58:1f:32:14:61:33:
53:75:71:5c:a3:7e:58:77:15:c6:7c:9a:70:2d:55:
80:19:0e:38:37:c5:ab:5e:46:a5:ba:1c:68:b8:58:
07:40:df:6e:d4:53:23:bc:07:be:8c:6b:5b:f7:87:
74:d9:a8:f6:f7:c0:ce:53:e1:a1:ac:75:50:76:c3:
75:74:5d:e6:cc:43:99:b0:a2:dc:e9:d2:86:43:87:
38:db:99:d6:4e:32:42:fb:83:66:73:88:fc:bf:d3:
46:f3:ad:55:f3:c8:6c:80:c8:76:90:57:cd:d6:bc:
7e:44:30:81:bd:37:a8:be:e2:91:b2:67:dd:76:c6:
3b:b1:9b:f5:7b:c2:fb:9a:dc:9d:ef:2f:f3:92:4e:
e7:8e:81:20:9a:14:70:99:2e:25:27:53:de:e0:c1:
b9:e3:44:53:aa:20:f7:08:71:ef:fc:70:a0:dd:b1:
64:c3:d6:19:c8:f0:52:da:05:ad:24:c6:ce:49:7a:
9a:db:53:1a:33:71:4d:f5:f1:f3:dd:cc:df:6c:5a:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DE:2F:48:E5:A3:92:9B:38:88:74:BE:17:96:84:26:04:04:EB:04
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/E94vSOWjkps4iHS-F5aEJgQE6wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.26.0-5.104.30.255
Signature Algorithm: sha256WithRSAEncryption
49:c3:0b:a9:4c:0d:5e:a1:08:ea:48:12:62:bf:ee:da:06:cc:
7c:61:85:4e:20:9b:b9:d4:5b:50:c8:d7:c3:11:3a:ef:67:32:
23:04:87:30:b5:e9:41:3b:c6:48:38:d1:4a:80:8e:9c:69:93:
c8:06:b4:35:92:be:76:9e:a7:df:13:3e:3e:07:49:08:a1:2d:
2e:85:1e:d4:91:51:d7:f2:32:a9:be:af:ce:49:0d:83:8c:ee:
76:17:c4:e1:a2:64:51:fe:d5:ed:46:42:b8:54:2d:75:b0:10:
91:9b:1d:80:66:99:b5:d0:9b:90:19:44:c9:df:16:76:ed:89:
10:74:b4:d4:d6:bb:8b:2a:4a:e9:46:ba:9b:21:3a:d6:df:01:
b1:6e:55:ff:17:47:bd:8a:5b:ac:b2:c1:2b:c5:4d:1a:dd:5e:
8f:42:0e:10:98:3f:9a:49:ab:e8:60:58:eb:b7:df:34:7f:07:
ea:b2:da:2c:07:59:76:5f:b6:17:36:cc:ba:95:14:8d:45:49:
08:2d:25:a4:e2:e4:67:e6:eb:a2:d9:45:cf:f4:90:05:cf:34:
d7:ff:3d:2f:81:7a:b8:84:2c:17:aa:fb:97:41:b8:da:0a:03:
0d:f6:23:f5:c9:18:cd:f3:9b:4b:86:e3:24:00:57:0a:e4:26:
4e:37:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:14 2024 by rpki-client on console-ams.rpki-client.org