Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/_rKmTkNnLTzHttgdNW29woCo_uw.roa
File: _rKmTkNnLTzHttgdNW29woCo_uw.roa (raw, json)
Hash identifier: P49xOAgsh0eZxNLuNjSi1JFalMk3q6qmzQAq5EbBtQw=
Subject key identifier: FE:B2:A6:4E:43:67:2D:3C:C7:B6:D8:1D:35:6D:BD:C2:80:A8:FE:EC
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01869272DBA620E5E979BD4F0018671FFB4A
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/_rKmTkNnLTzHttgdNW29woCo_uw.roa
Signing time: Mon 27 Feb 2023 10:37:26 +0000
ROA not before: Mon 27 Feb 2023 10:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56322
IP address blocks: 5.182.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:72:db:a6:20:e5:e9:79:bd:4f:00:18:67:1f:fb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Feb 27 10:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feb2a64e43672d3cc7b6d81d356dbdc280a8feec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:76:ef:25:57:26:10:a1:d9:34:35:82:37:
75:ee:15:02:4f:e2:8f:d3:84:29:1e:80:c2:5f:81:
44:d5:d8:83:a0:4d:05:f0:60:09:2e:57:33:34:07:
06:b9:80:e8:b1:ae:4f:b2:f0:9d:d6:c9:d5:50:9c:
b6:6f:a0:cf:a0:37:5e:b7:41:1f:66:85:9e:03:59:
70:c0:0b:42:bc:ad:24:be:d5:8b:7f:b7:42:4b:b8:
4b:bf:32:ee:32:64:56:d8:48:8b:05:43:5d:f2:ea:
2c:85:bb:1f:65:8d:88:d0:59:9d:ae:22:4b:bc:21:
ee:7a:e4:f6:b0:23:60:0d:1a:f6:52:0d:c8:9d:92:
93:77:12:c1:0a:b2:0f:e7:47:78:eb:8b:36:be:72:
9d:23:5a:28:03:e2:7e:8a:99:02:cd:96:43:19:ca:
58:9d:73:f5:f8:0b:d9:45:d7:5f:5a:b5:f6:de:63:
d7:85:0b:e5:d3:3f:1e:07:cb:9f:68:20:51:35:99:
d6:53:70:73:98:4d:28:1d:2d:f4:c0:6d:b4:3c:f6:
ab:d8:af:79:a5:41:97:6f:27:9c:33:18:31:e3:96:
bd:13:30:4d:54:eb:be:48:cf:87:3e:c2:b8:c5:97:
be:aa:64:36:47:c6:7c:bc:49:12:b7:92:3c:89:3f:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B2:A6:4E:43:67:2D:3C:C7:B6:D8:1D:35:6D:BD:C2:80:A8:FE:EC
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/_rKmTkNnLTzHttgdNW29woCo_uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:38:a1:70:f4:ee:95:6e:c7:f2:ea:02:7c:9a:db:58:8f:c9:
5c:ad:5a:ca:53:b7:13:7c:8d:37:e2:2f:2b:6b:8b:90:95:31:
4d:dd:fc:5f:e6:53:e5:42:9f:51:2c:42:7b:77:75:ba:7a:b1:
73:a4:a6:05:0d:3d:ed:c1:c5:18:75:16:9b:82:3a:50:0b:4d:
15:72:c2:3d:e8:ef:ee:83:91:93:a1:f8:e6:6e:d3:45:07:15:
f4:9d:44:a1:fb:ec:5e:de:42:10:08:56:03:23:a9:ca:f6:a9:
9c:e1:76:03:5e:e6:e9:db:4a:89:64:b9:00:2a:90:40:f8:7c:
ff:a8:fb:ee:7d:d9:bd:17:2e:80:ba:3f:4d:a6:08:8a:68:ee:
b0:f7:9d:28:23:e4:7b:bd:32:f5:82:03:20:37:f6:43:40:e4:
a9:b5:2f:36:78:f3:23:f2:c1:f4:d3:b9:10:16:f7:59:c8:ac:
04:33:2d:53:eb:66:a8:e0:65:ce:1b:77:6c:36:e0:8f:2f:ae:
f6:14:05:bf:6d:ef:32:2e:52:cf:2a:65:b7:c0:ec:ce:e9:42:
8e:0a:01:6e:94:9c:70:ae:7b:04:77:08:af:fd:96:97:6d:68:
44:3d:79:10:b5:a6:7e:b2:72:19:fd:96:72:9c:b4:54:9d:49:
ce:cd:78:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:17 2024 by rpki-client on console-ams.rpki-client.org