Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/wN___5W7s6R1VAZ-C_Slt_7xuLg.roa
File: wN___5W7s6R1VAZ-C_Slt_7xuLg.roa (raw, json)
Hash identifier: 5zwYimG5ZxVk2XlC2NL34GqYqdnhL02ejG2XqME8C4U=
Subject key identifier: C0:DF:FF:FF:95:BB:B3:A4:75:54:06:7E:0B:F4:A5:B7:FE:F1:B8:B8
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 01856EC20F872F352DA3799AA3C92E6E7C49
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/wN___5W7s6R1VAZ-C_Slt_7xuLg.roa
Signing time: Sun 01 Jan 2023 19:14:49 +0000
ROA not before: Sun 01 Jan 2023 19:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200380
IP address blocks: 5.102.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:0f:87:2f:35:2d:a3:79:9a:a3:c9:2e:6e:7c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 1 19:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0dfffff95bbb3a47554067e0bf4a5b7fef1b8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b7:9a:6a:2c:c0:3b:00:4e:1b:6b:30:ec:6a:
c0:37:59:9f:9b:f9:fe:76:57:be:aa:08:11:fd:bf:
1e:ea:6c:be:87:60:75:ba:14:7f:12:b1:a5:19:43:
34:5d:68:24:42:25:f1:0f:8b:82:ac:1e:67:cc:c4:
d1:24:2e:c4:ec:5c:53:ba:e1:d5:8b:ca:20:88:4a:
ff:a7:fa:61:73:b8:93:8c:92:66:db:73:bf:58:c9:
e1:98:19:cc:74:24:83:5f:03:36:e1:7b:b0:c1:49:
01:21:65:8c:b7:e8:f8:a1:49:62:e1:64:73:bb:af:
c0:28:ff:64:40:f9:08:e2:00:ec:dc:0e:a6:d7:b4:
65:94:31:b1:8e:03:03:e3:2d:fd:fa:64:93:a0:49:
f3:e6:20:e4:60:9d:c2:75:ce:00:dd:a5:c3:66:47:
07:32:17:55:2e:b7:40:ae:54:13:54:39:e9:71:9c:
c1:41:3c:aa:f2:c3:fa:d0:61:79:42:fa:f7:53:5e:
ba:00:7c:bd:85:21:4a:ea:77:7b:25:44:65:b8:29:
ff:fb:5f:bd:f9:09:15:32:ae:be:67:c6:ef:17:1e:
19:db:2f:e8:57:4a:ed:09:a2:3c:d8:3b:7c:ed:52:
0a:77:55:2f:db:3c:86:47:b4:45:eb:11:6a:6a:51:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DF:FF:FF:95:BB:B3:A4:75:54:06:7E:0B:F4:A5:B7:FE:F1:B8:B8
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/wN___5W7s6R1VAZ-C_Slt_7xuLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:03:d1:6d:c2:0d:88:20:eb:cb:25:ad:00:fc:40:76:4f:26:
d1:dd:64:db:85:c1:6a:30:2c:52:16:65:7d:2e:81:c0:72:5b:
7f:cb:6c:f3:1a:de:5f:7d:87:8b:74:9f:5d:77:f8:11:75:c5:
01:d1:9d:57:0d:d3:78:b5:df:63:ee:8e:de:c5:88:b7:d0:4c:
98:9f:25:02:18:3d:2c:74:c1:c6:c6:b1:a6:4f:56:8b:70:4a:
25:2b:b3:0a:45:76:00:67:70:5c:0b:3a:40:a7:04:cc:59:d5:
12:28:cc:f1:d8:f4:c8:ca:63:35:03:7d:0d:1e:13:d0:2b:ea:
d7:0c:8d:cc:2a:0a:e5:4a:2e:42:64:af:36:35:a6:94:4f:d7:
db:81:81:eb:10:ea:c8:db:b7:29:c6:42:5b:53:1f:46:75:da:
eb:ae:5a:69:c9:29:ac:92:07:b2:10:11:24:a8:ab:96:a2:90:
05:84:55:58:f8:55:3b:32:08:60:14:c1:20:39:60:78:2c:8a:
7c:8c:2a:23:e0:24:f4:ae:f5:71:31:23:58:e3:45:11:d1:95:
40:c0:a5:ab:8a:18:58:74:2a:3a:9b:82:ff:b6:12:02:0e:df:
fa:98:87:76:57:21:c8:0e:af:de:da:a2:a5:4e:72:1c:2a:1d:
87:64:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:18 2024 by rpki-client on console-fra.rpki-client.org