Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/4j5DvKen7NC4HXzI-sHnyuQ0k0s.roa
File: 4j5DvKen7NC4HXzI-sHnyuQ0k0s.roa (raw, json)
Hash identifier: Vu2GkWdeQdmhgIhYRJVT2ckgHFMXzFZyqHMU3VZCI8M=
Subject key identifier: E2:3E:43:BC:A7:A7:EC:D0:B8:1D:7C:C8:FA:C1:E7:CA:E4:34:93:4B
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0186A144DA29B9E4932904F3A4AC1DD6C60F
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/4j5DvKen7NC4HXzI-sHnyuQ0k0s.roa
Signing time: Thu 02 Mar 2023 07:41:29 +0000
ROA not before: Thu 02 Mar 2023 07:41:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 217.113.24.0/22 maxlen: 24
5.134.86.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:44:da:29:b9:e4:93:29:04:f3:a4:ac:1d:d6:c6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Mar 2 07:41:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e23e43bca7a7ecd0b81d7cc8fac1e7cae434934b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:f8:52:3f:2e:1b:67:dc:b7:86:b4:53:20:
f8:bf:d0:00:1e:82:81:44:45:01:68:68:da:9b:8b:
ad:93:74:50:29:29:aa:72:ca:0a:87:c2:11:a8:a5:
3c:d2:9c:da:63:dd:fb:bc:a6:b5:9a:19:97:52:d6:
f6:b7:1e:61:23:9e:87:38:02:ea:86:6d:f3:75:93:
60:5e:c3:21:99:73:2e:01:69:d4:25:5b:a0:e0:e9:
d4:31:35:0b:85:c7:61:f0:8e:de:a7:e9:1b:73:c9:
7d:3c:f8:c6:d9:ae:d5:02:67:ac:ae:48:d0:25:4c:
3a:ef:e8:49:b3:95:55:1e:ce:3a:dc:2c:ad:38:3e:
92:b9:86:e3:d9:4f:0f:c3:fa:1a:d3:93:3c:cd:d4:
2b:ed:2a:eb:82:7f:75:e7:8c:26:4b:ed:59:f7:11:
9c:5c:30:86:3e:9b:dc:a2:80:b2:57:c8:8d:16:4d:
39:78:e2:d4:ff:3a:f4:73:07:fa:4f:e0:5a:f8:de:
fb:8e:42:a8:f0:bc:66:d4:06:22:39:90:a7:6b:80:
00:c6:6c:2f:da:86:bd:67:32:90:4a:c1:72:62:30:
09:e9:b7:23:2d:1b:96:8d:e3:99:7b:da:3d:64:52:
33:58:ea:d5:2b:1f:cf:3a:32:80:d6:57:12:a2:92:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3E:43:BC:A7:A7:EC:D0:B8:1D:7C:C8:FA:C1:E7:CA:E4:34:93:4B
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/4j5DvKen7NC4HXzI-sHnyuQ0k0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.86.0/23
217.113.24.0/22
Signature Algorithm: sha256WithRSAEncryption
27:84:10:92:1d:96:d3:10:2d:35:72:b1:2c:02:5a:74:ab:21:
13:cf:f0:51:de:d6:7e:63:50:37:97:51:c0:66:89:02:c1:2e:
54:d7:d8:80:c1:a9:cc:49:ea:7d:d5:e4:71:f9:9d:69:a3:ef:
51:e4:bf:3a:6d:78:db:30:7a:ac:ee:8e:0b:68:20:fc:f7:5b:
55:26:73:eb:2f:6e:23:34:09:09:1f:bb:cc:d9:6b:e9:b9:e3:
ec:bd:e6:c8:a7:58:0b:79:16:28:5d:66:64:f8:8a:ec:db:0a:
5e:84:8c:0a:4e:fa:56:ce:dd:54:a1:6d:9c:03:b0:2c:bd:c2:
90:ec:a7:c4:45:6a:2c:78:79:83:60:26:25:05:ba:f0:35:ef:
8b:6f:23:8a:42:15:fb:49:14:05:b5:de:5c:16:ed:53:85:08:
2f:26:1a:3b:bb:e3:96:46:42:20:3e:0b:78:30:4a:93:e4:8d:
ac:71:45:58:fe:57:b1:57:4e:7e:fe:1e:5f:f0:7b:54:80:7a:
01:d6:93:04:b5:0e:6b:13:a8:cf:1c:81:3b:dd:88:c0:dd:e2:
33:2d:61:6e:6d:0a:4f:b5:a6:90:e7:20:d3:58:46:d3:15:8a:
f8:a9:d9:91:c3:c7:8e:83:dd:9f:f7:57:8b:be:cf:0d:87:5a:
d8:6d:6e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org