Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5RZt2Zl-UsbDhiVIlNeDNDodFS4.roa
File: 5RZt2Zl-UsbDhiVIlNeDNDodFS4.roa (raw, json)
Hash identifier: oc7WhgQz6CW0JorHuwbU74ohRRgzPbPUFQfl3xWphx8=
Subject key identifier: E5:16:6D:D9:99:7E:52:C6:C3:86:25:48:94:D7:83:34:3A:1D:15:2E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018A31BC0216EC69CCEB68F7FDE7CCD492D2
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5RZt2Zl-UsbDhiVIlNeDNDodFS4.roa
Signing time: Sat 26 Aug 2023 12:05:19 +0000
ROA not before: Sat 26 Aug 2023 12:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28064
IP address blocks: 201.77.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:bc:02:16:ec:69:cc:eb:68:f7:fd:e7:cc:d4:92:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 26 12:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5166dd9997e52c6c386254894d783343a1d152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:26:02:f6:61:57:83:3f:bd:cf:39:4f:7c:
87:2d:41:bd:61:c7:57:53:be:14:98:40:5d:06:2b:
3b:83:e7:a5:b6:6f:7f:5a:8b:af:68:da:57:d5:94:
20:64:c1:1e:ed:8d:ba:6a:26:87:6c:8f:3b:9d:68:
44:13:55:7f:31:1b:6e:54:f0:6c:eb:28:c5:e4:60:
43:f4:80:27:69:57:58:7e:44:14:1a:da:d5:e3:4b:
c3:4b:aa:8a:6a:13:81:53:60:0a:05:98:95:84:15:
e4:2d:4a:bd:15:ee:ea:a8:6c:3f:10:9b:17:3f:cd:
a8:d2:48:a3:14:f8:0b:f4:19:1f:2b:79:fb:ac:8e:
2b:47:ee:7e:0a:71:3c:4d:e8:a8:9c:d9:eb:64:83:
2c:72:88:c5:f7:7d:37:85:8d:95:b5:62:a2:d4:22:
8d:78:ea:b3:64:b2:b7:b9:24:e4:87:6b:62:19:da:
1d:e1:15:22:3d:ec:a6:f6:9d:30:4d:3b:ec:fe:17:
2e:e3:5e:f1:c0:8d:41:df:ab:97:58:77:b9:5b:26:
59:0a:e3:59:91:dc:07:d0:d9:8b:84:c2:64:24:e8:
1c:11:01:f2:be:3b:58:7c:f6:2d:f1:fc:68:4f:e2:
8f:1f:56:0c:5d:ce:c1:b9:20:fb:c3:1d:0f:19:96:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:16:6D:D9:99:7E:52:C6:C3:86:25:48:94:D7:83:34:3A:1D:15:2E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5RZt2Zl-UsbDhiVIlNeDNDodFS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.52.0/24
Signature Algorithm: sha256WithRSAEncryption
38:97:c5:b1:33:38:cc:76:05:01:7d:48:79:14:61:46:a7:d0:
b6:ff:5b:cc:c0:04:0c:3f:81:84:92:08:3e:31:0d:0a:db:24:
0a:25:61:c3:1e:6e:c8:49:74:6d:cf:48:d8:9c:16:ac:4b:86:
2e:c3:29:c6:03:6a:eb:1f:d5:b7:2a:9d:36:b6:b8:9e:5d:53:
8a:aa:1c:77:7d:93:d9:8d:70:d7:b3:10:32:c2:34:24:64:a4:
6a:08:a6:45:03:cf:c8:5f:c5:10:dd:88:0a:10:a4:24:f8:e5:
2f:13:0b:d6:0b:a0:bd:65:e9:72:c8:1c:c6:24:d1:0d:8f:fe:
5e:4d:a3:7b:e8:56:82:11:03:d6:e7:e4:78:c1:55:89:92:4e:
fe:95:0a:15:06:26:50:3a:cc:c8:3c:70:bf:b9:9b:46:f3:da:
13:82:c0:1e:7b:b0:31:25:3f:98:68:ec:25:46:87:bc:de:ad:
26:7f:8b:1f:74:8f:01:b1:55:33:2e:8f:f2:73:2a:15:88:fa:
37:06:1f:26:5f:1e:ae:02:85:23:ea:f5:89:0b:ee:fc:10:66:
89:c1:2d:c8:1d:38:3f:48:81:90:9a:96:80:4a:eb:ce:aa:4d:
cb:5e:b3:55:2f:fe:2f:22:98:53:3a:dc:ac:f1:60:fd:ae:7a:
9c:2e:2b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:08 2024 by rpki-client on console-ams.rpki-client.org