Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/5Q_B7U7WNSjfYAkLlTYxWvHyMYc.roa
File: 5Q_B7U7WNSjfYAkLlTYxWvHyMYc.roa (raw, json)
Hash identifier: w8mpwj7Zwx83oXbxJzz2aqllJM8xN1xxu9VJRTWN1fw=
Subject key identifier: E5:0F:C1:ED:4E:D6:35:28:DF:60:09:0B:95:36:31:5A:F1:F2:31:87
Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial: 01862C33AD848304EE1C3FA4FFA08A69B7E2
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/5Q_B7U7WNSjfYAkLlTYxWvHyMYc.roa
Signing time: Tue 07 Feb 2023 14:07:09 +0000
ROA not before: Tue 07 Feb 2023 14:07:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8560
IP address blocks: 185.127.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:33:ad:84:83:04:ee:1c:3f:a4:ff:a0:8a:69:b7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Validity
Not Before: Feb 7 14:07:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e50fc1ed4ed63528df60090b9536315af1f23187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0e:66:fd:c0:28:f2:de:92:b7:dc:68:f7:de:
0b:11:ae:1f:82:02:84:40:6b:c0:32:bd:0c:ce:5d:
d9:f4:df:0b:53:ca:2e:6d:53:2f:de:94:8b:b2:62:
83:25:a8:8c:47:a0:a5:c4:1c:d5:55:fe:e0:40:dd:
e1:d0:86:33:84:35:c4:b2:7c:b6:92:34:df:6a:82:
d6:cf:bf:b5:93:6e:da:8a:26:5b:9e:eb:2d:51:b9:
5f:4e:d4:b8:a3:d5:29:d6:9e:3a:a3:77:6d:cc:90:
d4:ce:a3:4a:47:d9:9c:ca:86:97:58:a8:7f:64:43:
50:fe:da:0b:01:ef:83:9d:c9:9f:31:85:37:9a:b0:
6c:8e:e1:14:d9:31:f7:d8:30:67:8e:57:5c:9f:32:
26:a4:52:df:c0:c8:77:ba:3d:95:40:a0:9e:8e:fd:
65:02:c7:c3:2b:ce:5f:d9:8e:d5:51:4a:17:1a:bd:
59:a7:18:7a:de:44:da:8f:be:cd:9c:37:6e:29:88:
54:24:a2:d2:4d:2c:14:ef:b3:2f:69:2a:ab:f2:b4:
c3:65:d5:32:23:ca:c4:9d:0c:e6:1b:cf:43:d4:1e:
5d:d2:08:28:ee:1a:dd:7f:c6:9e:25:a1:c7:67:2a:
e0:5f:ad:16:08:0c:51:cf:ee:fd:97:70:54:70:0a:
39:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0F:C1:ED:4E:D6:35:28:DF:60:09:0B:95:36:31:5A:F1:F2:31:87
X509v3 Authority Key Identifier:
keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/5Q_B7U7WNSjfYAkLlTYxWvHyMYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.30.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:9b:91:e5:c7:31:d7:be:b9:dc:8f:ca:d7:8b:1b:72:a5:02:
d1:f6:31:d1:c6:cf:28:f9:c0:68:29:ba:6e:0a:f2:d3:3d:d3:
76:d0:c5:76:8b:6e:53:83:a6:9a:a9:2a:f1:56:9b:82:52:50:
e9:b8:70:31:a2:d3:9c:64:cf:28:f5:5c:4e:fd:9c:fe:4d:05:
f4:25:f7:95:ca:b8:31:d4:88:37:69:03:17:00:7e:3e:e5:11:
b3:43:4e:1c:42:89:a1:a7:ca:4e:75:e4:79:f5:fa:23:2f:83:
be:9c:7c:7a:51:22:1b:4b:55:f0:13:58:6e:f5:f2:d3:13:6b:
87:fd:99:70:74:d3:20:dc:ef:21:94:5d:1a:07:56:f1:42:15:
24:38:75:09:f3:f0:02:0a:fd:42:58:c1:56:b3:6f:06:01:8b:
d6:c3:19:62:8e:36:70:a5:94:04:73:3f:90:c4:3d:d2:58:71:
bc:0d:90:62:7c:87:9a:84:45:81:79:db:52:2a:d0:f2:a6:be:
e0:ad:7a:05:60:2a:f3:59:83:24:84:fc:d6:a7:4e:71:5a:6c:
75:15:f1:97:6d:32:be:a7:41:81:33:5d:36:83:a7:0d:88:0a:
1a:4f:62:22:10:27:00:fb:dd:f0:05:93:7d:e4:2f:98:75:07:
33:b8:68:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:46 2024 by rpki-client on console-ams.rpki-client.org