Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Cm7sCPlQX8mNQL0SozeWeCorkM0.roa
File: Cm7sCPlQX8mNQL0SozeWeCorkM0.roa (raw, json)
Hash identifier: deBKhEx1DAygdNNUIdzJHMJQiS5iUTXNZGsAs0YwjOQ=
Subject key identifier: 0A:6E:EC:08:F9:50:5F:C9:8D:40:BD:12:A3:37:96:78:2A:2B:90:CD
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018CC5004951C50806DFF4D34B468E02F217
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Cm7sCPlQX8mNQL0SozeWeCorkM0.roa
Signing time: Mon 01 Jan 2024 12:29:39 +0000
ROA not before: Mon 01 Jan 2024 12:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64073
IP address blocks: 5.134.84.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 18:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:49:51:c5:08:06:df:f4:d3:4b:46:8e:02:f2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 1 12:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a6eec08f9505fc98d40bd12a33796782a2b90cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:2a:c8:1a:5e:96:17:12:88:94:bd:c7:5e:
e4:4d:eb:cd:25:0a:4d:4c:eb:12:73:9a:83:9f:4c:
fa:a8:fd:a9:e9:11:1e:d5:03:72:34:6a:64:ac:ef:
8e:de:b4:7c:ab:21:2f:77:86:9c:80:39:51:4b:1c:
ad:22:da:ad:e6:bb:64:43:32:7f:a7:4a:05:d5:99:
f6:31:58:5c:ca:7b:c1:d4:ca:a4:c8:81:41:5f:8d:
93:9b:26:9f:b5:c0:03:bd:39:d1:46:01:e5:1e:55:
3d:d8:48:38:4a:84:03:65:58:a2:24:3a:97:0b:7f:
9b:cc:a3:39:ab:2c:f8:c6:24:fa:72:e5:51:f3:c1:
d4:94:c8:f4:d5:19:72:d5:63:71:c4:68:16:db:84:
a1:40:07:ad:41:79:1b:b0:bf:2e:84:c3:a9:b8:78:
b2:a0:c9:51:ef:8e:d8:6a:68:9c:fe:a3:9a:44:c3:
c3:4c:cf:ef:0d:b1:1d:a7:53:f5:9e:bf:1d:5e:39:
a2:be:b7:20:fb:33:c1:db:02:00:ca:9a:e9:3f:0e:
28:ee:88:63:97:22:52:3f:81:eb:aa:ac:8d:da:cb:
82:11:18:0b:55:ac:22:3a:2f:ee:be:b6:64:d4:2b:
46:94:18:5b:5b:21:35:6e:bf:a6:48:b7:07:96:80:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6E:EC:08:F9:50:5F:C9:8D:40:BD:12:A3:37:96:78:2A:2B:90:CD
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Cm7sCPlQX8mNQL0SozeWeCorkM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.84.0/23
Signature Algorithm: sha256WithRSAEncryption
21:ed:17:e4:ea:03:f9:4a:f4:6a:d2:7e:6d:a9:b2:4a:7f:07:
4e:1c:b2:68:5e:65:53:67:3c:e2:e2:a6:6a:db:01:64:d6:2e:
10:a9:64:87:5a:56:d7:ba:32:10:e2:28:2e:59:68:ea:89:ef:
a2:9c:dd:1c:1e:cf:65:a8:e9:7a:73:0f:56:f2:f2:2a:f0:d8:
7c:de:5d:15:1a:6d:61:de:de:b3:9a:a9:80:3c:fc:31:98:f8:
f4:c7:e5:13:56:81:70:7e:3f:f9:2e:75:0b:86:ab:1c:13:b6:
91:f1:c6:fc:ca:88:a5:67:ac:c7:fd:44:c0:ad:c5:b2:51:f0:
a7:50:ed:74:d8:11:62:b0:34:7c:13:a7:45:c4:b1:42:ac:ec:
cf:2c:29:78:af:05:df:03:9b:c4:0d:8f:15:44:43:6f:b1:a9:
ba:0e:5f:ad:70:f4:b9:80:12:2d:c8:54:d1:f4:5f:0f:50:00:
8b:a4:3b:fc:3d:69:27:f2:7f:70:a6:49:93:ac:55:08:dd:ce:
7c:c5:bc:0a:59:9a:f7:75:f2:44:ea:f9:48:33:c3:7a:d5:22:
41:79:66:e7:71:d1:11:91:06:ec:8b:68:e8:b8:68:19:8e:f2:
ba:67:e0:fa:94:11:4c:1d:16:61:0e:1e:70:ed:16:b5:6e:ea:
a1:d5:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 22:31:53 2024 by rpki-client on console-ams.rpki-client.org