Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/1ezK_XjDgkn_fhoShtCYjjv5cv4.roa
File: 1ezK_XjDgkn_fhoShtCYjjv5cv4.roa (raw, json)
Hash identifier: m0l4MKZQQ52LRJBnlyB4zbndM190jQzPDyCb3SdHHRY=
Subject key identifier: D5:EC:CA:FD:78:C3:82:49:FF:7E:1A:12:86:D0:98:8E:3B:F9:72:FE
Certificate issuer: /CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a
Certificate serial: 01856F300A3859FE5E24800CDF6FAEBFB953
Authority key identifier: 1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/1ezK_XjDgkn_fhoShtCYjjv5cv4.roa
Signing time: Sun 01 Jan 2023 21:14:57 +0000
ROA not before: Sun 01 Jan 2023 21:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209116
IP address blocks: 5.181.248.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:0a:38:59:fe:5e:24:80:0c:df:6f:ae:bf:b9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a
Validity
Not Before: Jan 1 21:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5eccafd78c38249ff7e1a1286d0988e3bf972fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c2:f2:c7:e8:d9:46:45:0b:b5:70:7d:5e:e6:
10:fb:93:c8:cc:57:b4:40:c0:f1:0e:86:cf:fe:0e:
6e:ca:98:9d:4d:18:43:36:49:2f:13:78:6b:ef:fe:
43:da:fe:8d:8b:8f:a4:f7:12:3a:7b:e7:e3:57:ac:
5f:34:b0:75:cd:37:69:18:94:be:4f:8a:03:23:ae:
2a:f1:f9:40:42:ce:5e:ec:7d:dd:c2:e9:93:60:87:
d9:f4:4a:a5:e5:9e:11:f1:8c:d4:56:9d:9f:c1:56:
dc:17:95:70:ea:6d:84:13:60:bf:c5:47:34:c2:92:
05:7d:b6:45:af:ba:00:ed:33:9c:52:e4:f3:43:38:
61:f0:d4:25:29:07:83:1d:f8:0f:35:01:7e:3a:34:
d3:b0:ac:b7:21:73:f7:89:a1:53:6d:ed:f2:0b:bd:
01:81:ef:82:67:43:cb:fe:37:e3:35:bd:cf:41:1c:
dc:71:d2:a0:be:9d:2f:1e:7a:e3:a0:df:56:ce:a8:
61:02:19:4b:ad:8b:a0:6c:e0:cf:38:57:ed:46:33:
42:e5:b3:c5:56:de:69:33:35:0d:a8:90:4d:c8:87:
ac:ba:80:8f:71:09:4c:0e:b9:54:8b:c2:aa:37:e9:
f8:ef:8b:fe:88:13:6e:16:82:01:6f:7e:fb:b3:b6:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EC:CA:FD:78:C3:82:49:FF:7E:1A:12:86:D0:98:8E:3B:F9:72:FE
X509v3 Authority Key Identifier:
keyid:1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/1ezK_XjDgkn_fhoShtCYjjv5cv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.248.0/22
Signature Algorithm: sha256WithRSAEncryption
06:f2:f8:58:f8:63:90:cb:c8:fd:49:0e:e3:48:4e:1c:04:ee:
66:9f:8a:30:9c:93:6a:f6:77:c3:ae:03:1f:03:04:cf:68:7d:
90:d2:8d:6e:1f:3a:78:e3:ae:fa:17:d0:8f:ed:35:42:58:3c:
ad:ae:68:35:c2:6c:cb:ed:1b:10:6c:fb:6c:32:c0:52:a6:9d:
4f:38:b9:d0:ac:52:e8:b2:7b:ce:a9:69:c2:3f:47:b0:d0:46:
28:52:b6:8f:16:20:79:31:c1:86:45:d5:f3:4e:f2:f5:55:9b:
d6:f2:7d:45:00:ef:e6:7b:6f:17:e0:ad:64:d3:41:26:d4:e6:
eb:19:b1:a0:5b:89:e8:23:f6:8c:35:d4:93:fa:f6:31:ac:d7:
9d:00:50:43:5d:16:8b:9f:e6:fc:11:7a:42:76:b0:47:26:51:
05:c2:24:37:ac:cb:a5:75:ab:62:0d:53:b4:f9:5a:2f:4c:4e:
ca:b0:b8:29:56:f0:5a:8a:02:33:f0:a3:19:8e:62:ee:97:ac:
05:63:c3:b5:6d:a8:a7:2b:a1:a0:31:3a:e7:1e:80:c8:cb:83:
30:2d:3a:ae:5e:71:09:16:fa:a3:0e:a0:fe:a4:e8:15:0c:43:
11:52:8a:ee:34:ad:9e:10:9a:a2:69:7b:ef:fe:33:59:43:5c:
47:22:db:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:58 2024 by rpki-client on console-fra.rpki-client.org