Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/CxrLANSAWnTMG2yq8VIqCd3LZko.roa
File: CxrLANSAWnTMG2yq8VIqCd3LZko.roa (raw, json)
Hash identifier: uRaBZdndK/w3/mN8D9Bu9wzUGqw0p/ydIyZKc8XaQro=
Subject key identifier: 0B:1A:CB:00:D4:80:5A:74:CC:1B:6C:AA:F1:52:2A:09:DD:CB:66:4A
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018572BA6D4DB2E5C104C8BCED77D3C097E6
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/CxrLANSAWnTMG2yq8VIqCd3LZko.roa
Signing time: Mon 02 Jan 2023 13:44:58 +0000
ROA not before: Mon 02 Jan 2023 13:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 5.134.84.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:6d:4d:b2:e5:c1:04:c8:bc:ed:77:d3:c0:97:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 13:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b1acb00d4805a74cc1b6caaf1522a09ddcb664a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:26:17:b5:64:f5:ee:ed:ba:42:a3:ca:ac:
2f:4a:e8:42:d3:4c:80:d6:07:67:a6:05:51:a5:33:
0d:ab:62:ed:48:c1:0c:c1:50:e2:ed:e4:b9:97:c9:
d1:b5:1c:81:96:b3:b9:c6:0a:f0:1b:0f:7d:05:67:
8f:a2:b7:42:b6:23:3d:2d:ab:ee:09:8b:86:be:eb:
81:b6:9d:af:d3:1e:0e:68:85:e3:80:78:50:e4:58:
31:d3:20:50:9a:c0:9d:13:54:1b:c1:39:c1:c9:79:
6d:f2:3c:38:14:07:ff:fd:dc:12:4c:12:4c:16:16:
ab:f2:07:b1:2c:21:9d:c7:5e:03:db:68:01:71:e8:
94:c1:9b:cb:28:3f:fd:79:f4:8f:4c:a8:60:5b:e7:
da:58:ee:bd:0c:e9:f6:48:b9:44:f0:b2:8b:f9:72:
32:5c:08:05:e4:dc:41:e1:8d:3c:98:4a:af:95:d7:
3a:89:cb:58:72:b4:80:bd:a2:88:4a:59:1b:bd:34:
d5:31:a0:c1:1c:a5:e8:04:ba:9a:d0:b6:21:14:fc:
4f:e6:b5:a1:de:c8:55:0b:ad:9b:99:cb:30:fc:f6:
2a:ea:57:66:5a:67:ba:8f:8d:d9:73:fb:ee:aa:6f:
ee:4f:6d:86:6a:97:89:00:00:2e:64:3f:80:76:8a:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1A:CB:00:D4:80:5A:74:CC:1B:6C:AA:F1:52:2A:09:DD:CB:66:4A
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/CxrLANSAWnTMG2yq8VIqCd3LZko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.84.0/22
Signature Algorithm: sha256WithRSAEncryption
82:80:dd:b8:cb:99:77:91:f4:39:78:5e:c4:a2:58:95:69:88:
81:06:58:54:94:f8:f0:57:b9:83:31:3e:83:a8:2b:c1:5b:a2:
d3:4b:9a:dd:63:f8:d6:49:97:6f:c1:43:23:94:a8:58:9b:61:
cd:f0:e6:98:2c:ea:a5:66:e5:b1:89:a8:30:60:e9:e9:d7:99:
85:fe:eb:fc:58:83:44:a5:47:63:4c:48:49:10:0a:24:b3:c8:
b0:e0:1d:dc:90:ee:8f:ec:a8:1d:5a:34:7b:f7:4e:92:00:98:
07:1b:1e:2b:a2:ec:0e:76:1e:75:41:cd:90:62:94:a4:1c:85:
91:01:3c:28:85:76:d9:79:6e:2e:13:78:06:86:0d:ef:8b:0b:
65:03:b3:d3:96:df:d7:50:a8:ac:a5:97:7e:19:10:7f:7d:04:
d7:22:0c:5e:fc:d8:80:25:0c:9d:50:b4:9b:ae:c0:a8:57:2e:
26:7d:25:8a:b3:1d:6a:7d:59:7b:b4:4a:2e:b2:18:e9:64:b4:
64:73:38:cf:86:50:98:f5:2f:97:11:71:16:86:fe:bb:d6:8f:
ae:54:d7:51:33:29:f6:f7:db:8e:3f:1a:d7:7c:48:f7:46:73:
39:e9:d4:ef:92:ae:cf:8e:48:87:5c:09:16:35:3d:19:e8:41:
0f:ab:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org