Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/FSwP8RnNrxKMPbtv7z8mvJuZlQE.roa
File: FSwP8RnNrxKMPbtv7z8mvJuZlQE.roa (raw, json)
Hash identifier: QdBHCZaaAhIu3cRvgtHhBgt0eRzhpZWFgLAvoiV8wbQ=
Subject key identifier: 15:2C:0F:F1:19:CD:AF:12:8C:3D:BB:6F:EF:3F:26:BC:9B:99:95:01
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 01856EC210646CBEF8955213D2E656682226
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/FSwP8RnNrxKMPbtv7z8mvJuZlQE.roa
Signing time: Sun 01 Jan 2023 19:14:50 +0000
ROA not before: Sun 01 Jan 2023 19:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207191
IP address blocks: 5.102.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:10:64:6c:be:f8:95:52:13:d2:e6:56:68:22:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 1 19:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=152c0ff119cdaf128c3dbb6fef3f26bc9b999501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:b6:f4:3d:f4:4b:ef:95:93:41:fd:f6:0a:
de:32:bf:d0:f6:32:2e:6e:1e:d0:c0:23:b4:95:31:
44:27:41:39:81:f5:00:4c:85:ba:ff:8e:8e:8e:e4:
26:c7:4b:e5:1d:12:51:b1:83:56:dd:fc:36:66:e7:
65:32:6a:78:b9:bd:ec:6b:93:d4:c5:28:0a:ef:29:
02:e3:2f:26:ca:05:b6:26:02:bd:76:d6:ba:96:06:
e8:a3:60:f4:d5:ae:2d:55:dc:2b:89:da:15:ad:31:
fc:a3:60:eb:97:4c:a5:57:6d:d0:39:3f:73:2e:ad:
fd:1f:4b:f6:dd:c4:71:7b:c6:b5:92:5d:d8:c3:0c:
6f:9d:3f:46:ac:b9:8e:1b:86:b2:13:9d:b7:cd:b9:
9e:3b:c3:9b:55:6d:9c:da:09:3c:f1:c7:47:51:64:
3e:73:8d:10:bb:6a:67:3b:3d:71:85:69:fb:4c:9d:
67:a2:5b:b1:7e:07:36:9c:d9:f3:26:f7:ad:bd:38:
8d:51:75:7f:10:59:a7:27:81:57:ae:fe:45:3f:08:
96:87:32:d5:25:81:80:c0:57:b8:d7:6d:73:59:90:
5b:b9:9c:53:bf:a2:13:89:89:aa:7c:ba:e8:e7:6c:
12:bf:b9:40:58:12:0f:c7:e9:e3:5f:01:13:be:bc:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2C:0F:F1:19:CD:AF:12:8C:3D:BB:6F:EF:3F:26:BC:9B:99:95:01
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/FSwP8RnNrxKMPbtv7z8mvJuZlQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.134.0/24
Signature Algorithm: sha256WithRSAEncryption
16:20:b4:7a:67:90:83:51:ec:26:73:07:e4:38:28:63:23:1f:
8c:38:d5:32:88:1c:39:6c:bf:b6:f3:65:8f:d0:d0:01:d9:63:
b4:ed:8d:50:e6:7c:09:c0:9a:df:c5:e5:36:73:01:8c:a8:8e:
00:ed:35:b7:ec:29:04:33:ed:5a:09:7c:7e:07:e5:ea:f3:ad:
9d:d1:bf:28:93:57:02:c7:0c:1c:40:cb:38:ad:25:fb:15:25:
b7:c3:fb:7b:20:32:25:a6:95:3f:29:25:f7:ae:51:05:bf:78:
7c:c3:a9:36:aa:9f:64:3e:cb:c9:42:b2:62:2f:4a:9f:52:86:
76:c6:29:4b:82:4b:7a:e9:a9:35:04:5b:c6:a7:c8:82:20:80:
aa:fd:78:bb:26:45:ac:5f:ee:8b:d9:c7:56:3a:90:59:a6:4b:
8a:e2:17:5e:26:d8:6f:c3:09:07:3a:92:de:09:ab:31:c0:dd:
1d:82:78:59:34:0b:f2:01:ef:5e:38:05:0e:5d:4e:43:fe:30:
14:32:67:1d:ee:58:c4:88:ce:33:de:f2:50:a3:f8:f2:cd:5b:
90:4c:66:76:a2:aa:3a:1c:a6:af:31:00:f6:65:4d:02:79:87:
ac:f8:38:df:04:cc:87:1f:ed:52:98:58:5e:81:74:53:6f:f0:
9e:62:94:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:19 2024 by rpki-client on console-ams.rpki-client.org