Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/R3rh0bOf1YER8OvOGp3w8SwhCSo.roa
File: R3rh0bOf1YER8OvOGp3w8SwhCSo.roa (raw, json)
Hash identifier: P7K28OtKkbZ9fqQUp4D3aop9hIzGS6q82T1Jqeyeq3A=
Subject key identifier: 47:7A:E1:D1:B3:9F:D5:81:11:F0:EB:CE:1A:9D:F0:F1:2C:21:09:2A
Certificate issuer: /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Certificate serial: 01856B0A267CAADBF5D93F6EBD347E8977C1
Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/R3rh0bOf1YER8OvOGp3w8SwhCSo.roa
Signing time: Sun 01 Jan 2023 01:55:05 +0000
ROA not before: Sun 01 Jan 2023 01:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211128
IP address blocks: 5.181.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:0a:26:7c:aa:db:f5:d9:3f:6e:bd:34:7e:89:77:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Validity
Not Before: Jan 1 01:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=477ae1d1b39fd58111f0ebce1a9df0f12c21092a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:7f:5b:9d:f8:ec:44:32:57:6d:a8:9f:3c:
db:d4:ee:ba:6f:28:d6:56:68:51:94:ef:aa:85:96:
39:02:89:c8:56:f8:85:2b:0b:bc:34:da:9d:a5:4a:
e6:11:27:7c:48:c2:c6:d9:10:40:68:9b:c3:b7:4f:
ce:c7:f8:b4:66:68:f0:89:ce:ce:5c:43:ce:ef:bc:
e4:04:27:ec:e8:3b:b9:9a:3d:e0:9c:93:a5:02:46:
be:21:3a:dd:49:36:2c:bc:81:da:07:4b:36:b2:22:
b0:de:60:e5:a1:12:10:db:19:7b:e1:b3:b5:f4:c7:
48:53:f1:e7:04:d9:7f:b9:f2:9f:07:99:f9:40:5c:
20:0a:f1:4d:11:58:dc:96:7e:60:ad:d7:fb:84:0e:
eb:88:8b:ac:fe:cc:77:fa:18:13:47:61:89:6a:7e:
fe:7f:d6:5e:1c:4b:53:28:4f:a0:59:52:c2:1a:34:
d2:f2:94:b0:d6:bf:9d:7b:d4:80:88:a4:2e:65:41:
fa:86:5e:fd:60:19:62:5c:74:c3:03:95:ce:20:ee:
e7:0a:b7:d2:91:b8:e8:6e:95:a9:09:4c:45:6c:3e:
47:28:07:7c:20:88:c0:08:35:e2:16:21:82:de:19:
55:3d:25:57:3f:c6:5a:9a:46:c8:1b:a7:6c:30:ef:
10:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7A:E1:D1:B3:9F:D5:81:11:F0:EB:CE:1A:9D:F0:F1:2C:21:09:2A
X509v3 Authority Key Identifier:
keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/R3rh0bOf1YER8OvOGp3w8SwhCSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.55.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d8:7c:02:88:c9:ca:7b:ce:62:02:f1:66:6d:9c:bc:19:ce:
ec:23:8b:c7:54:b1:4d:b5:78:02:0c:9f:a0:95:b1:ba:55:ff:
c8:38:8a:cc:75:e2:4b:6e:52:af:5c:08:c0:7e:0d:54:54:46:
2a:1b:71:21:52:30:c7:84:48:fe:b3:71:1f:8b:32:32:a5:f1:
6a:75:8a:88:1b:b0:50:30:17:d4:98:c1:70:76:77:ff:9e:ee:
f8:d4:61:a1:12:42:7a:40:90:79:f0:9a:5e:ba:73:79:c5:07:
8b:97:92:df:e4:ca:39:09:9d:c5:32:3a:a4:fd:a2:61:a5:6b:
26:ff:31:bf:98:f0:3f:fd:ca:ed:79:48:11:b1:37:db:8e:03:
10:6b:b8:ae:96:6a:e8:ae:b7:e2:56:04:c7:92:af:25:7e:45:
3e:6d:60:32:21:d9:c6:86:c5:b8:31:b4:63:9f:a6:57:f4:89:
dc:2b:73:ce:72:e8:6f:e9:f4:06:db:ab:25:ee:f2:34:ce:8f:
5b:1f:ca:af:19:6c:c1:3d:b6:b5:1c:a5:10:2e:75:8e:0b:b8:
56:ce:4e:6d:ad:1c:19:13:ea:f5:15:db:c2:06:4c:28:c5:57:
f2:b5:c0:42:81:ba:24:c4:b5:97:d4:c1:6a:cb:a4:c5:ea:6f:
6d:e9:1a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:36 2024 by rpki-client on console-ams.rpki-client.org