Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/eTxt3s6WM46mi3rNHssLL1vW2PE.roa
File: eTxt3s6WM46mi3rNHssLL1vW2PE.roa (raw, json)
Hash identifier: auxcqyqLkDk36e5ePUQvixBI2gmGZbODGDImzFjtOA0=
Subject key identifier: 79:3C:6D:DE:CE:96:33:8E:A6:8B:7A:CD:1E:CB:0B:2F:5B:D6:D8:F1
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 01856EC21181D2D87197A908870059F51ED7
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/eTxt3s6WM46mi3rNHssLL1vW2PE.roa
Signing time: Sun 01 Jan 2023 19:14:50 +0000
ROA not before: Sun 01 Jan 2023 19:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209259
IP address blocks: 5.102.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:11:81:d2:d8:71:97:a9:08:87:00:59:f5:1e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 1 19:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=793c6ddece96338ea68b7acd1ecb0b2f5bd6d8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:47:cd:ee:a4:85:7b:c5:0f:d3:bb:4b:34:
3e:05:9c:3f:a2:d6:ef:21:fb:ea:90:a6:ec:b2:9e:
6f:d6:09:f9:95:c1:1f:60:e1:42:43:28:c8:55:c0:
71:e8:f2:61:b7:88:32:fd:bb:d9:9d:40:38:fa:27:
9a:d0:42:8a:86:81:a7:54:bf:23:8c:52:68:39:9f:
12:41:cd:d8:96:50:bd:05:c3:c7:96:1b:72:f5:cb:
51:35:a9:2b:06:4b:20:92:ba:07:5e:b7:12:ac:2b:
11:bc:1c:5a:5e:6b:19:b3:a8:a9:66:e4:6e:f5:fe:
46:16:9c:62:cf:d4:b1:36:6e:31:cf:21:b1:8b:d7:
95:82:b4:4c:9b:56:a4:ed:6e:39:23:bd:2f:12:5d:
0b:ec:e4:30:ff:24:c4:0e:6b:79:ef:00:9d:31:03:
d1:59:ed:3a:a4:fb:62:d9:6b:04:12:ba:10:30:cb:
c8:22:26:0b:68:15:94:eb:2f:a9:98:32:70:e8:1d:
0e:bd:e2:08:ed:58:6d:17:58:1e:dd:5a:26:92:57:
a1:05:15:17:34:ad:0a:18:2f:e5:64:ea:5c:42:5e:
58:fe:63:a6:9d:4d:a7:f7:91:ee:9d:98:b9:da:e6:
86:ce:99:e3:29:b6:f0:b9:99:aa:6e:87:19:56:62:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3C:6D:DE:CE:96:33:8E:A6:8B:7A:CD:1E:CB:0B:2F:5B:D6:D8:F1
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/eTxt3s6WM46mi3rNHssLL1vW2PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.133.0/24
Signature Algorithm: sha256WithRSAEncryption
01:bb:0f:ce:7d:64:1f:f3:39:d2:fa:c6:0a:61:a0:06:74:e2:
4a:54:a4:38:52:7c:18:1e:7d:a6:40:13:66:08:a4:ae:7c:2a:
04:d9:8f:92:ef:ea:65:f0:8e:05:58:5a:45:29:57:07:21:13:
42:1c:36:bc:1f:82:ea:4d:22:c7:a9:23:50:03:5e:40:69:04:
8a:bc:cd:3a:b7:f5:a7:d2:55:ad:78:a5:aa:8b:93:0c:61:53:
26:7d:74:eb:06:9a:44:ca:2a:85:8c:b1:f6:48:3f:38:2d:4f:
84:83:4a:2b:75:64:af:5a:c2:57:db:13:b3:1d:62:10:f1:17:
94:fd:e4:81:d8:01:23:92:de:54:42:89:49:2f:19:ee:4e:cc:
e9:4c:17:0f:00:c6:16:3b:0f:42:52:64:a3:27:1e:0f:e7:e6:
6c:93:c0:fd:50:2b:42:49:8f:aa:4d:14:80:32:f7:11:8a:a4:
b7:e3:06:7f:7b:c4:72:05:71:44:44:90:e0:f9:37:13:4b:fb:
e0:37:ce:d4:03:0c:7c:d1:e7:dc:b1:5d:d4:96:24:0c:50:7e:
b7:4e:bb:c3:b3:75:7e:ad:74:4e:0c:39:08:23:e6:9b:2b:d7:
47:87:35:f2:44:51:36:3d:f0:e5:ad:81:b1:94:9b:d2:5b:7f:
cb:8b:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:19 2024 by rpki-client on console-ams.rpki-client.org