Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/MR764_u5_5-MOaECSUIH-fEi3EA.roa
File: MR764_u5_5-MOaECSUIH-fEi3EA.roa (raw, json)
Hash identifier: d2iQKjGwT3YlNtgYsjnaYJX+l5vPkF/8y8KWrTdGKtc=
Subject key identifier: 31:1E:FA:E3:FB:B9:FF:9F:8C:39:A1:02:49:42:07:F9:F1:22:DC:40
Certificate issuer: /CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Certificate serial: 018570F09A0ECA2B7CF09BF1EBCB404DAE56
Authority key identifier: 14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/MR764_u5_5-MOaECSUIH-fEi3EA.roa
Signing time: Mon 02 Jan 2023 05:24:54 +0000
ROA not before: Mon 02 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209141
IP address blocks: 5.180.92.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:9a:0e:ca:2b:7c:f0:9b:f1:eb:cb:40:4d:ae:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Validity
Not Before: Jan 2 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=311efae3fbb9ff9f8c39a102494207f9f122dc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:04:63:a4:63:58:13:f2:1b:e2:a6:a7:eb:
eb:30:72:ba:94:c4:5a:e7:24:87:fa:ec:eb:8d:bc:
4f:56:32:82:7c:f0:3b:45:fd:b0:e7:5d:54:ca:73:
6d:87:36:d1:a2:bc:9d:6e:65:d7:ec:ce:fc:40:b9:
8a:1e:77:7b:1f:ee:83:ce:3d:73:1e:fb:74:b9:88:
40:61:62:aa:7f:00:1d:cb:78:62:1a:3b:c8:17:76:
49:b9:38:74:d8:29:ad:cc:70:d7:b8:8e:7d:6b:08:
51:ee:7b:8a:3a:90:bd:d5:71:6f:eb:a1:f1:0f:c1:
9f:d0:b0:68:59:c9:33:60:42:8d:54:af:41:c0:fc:
4f:44:c5:b8:ca:ae:c8:ed:92:1f:6a:f3:6e:da:21:
b4:b5:46:d2:75:69:cd:c1:63:ec:ec:59:d3:db:7b:
15:67:41:0b:9a:c0:9c:30:4e:a0:82:0b:c5:d4:9c:
fa:3c:97:9f:cd:48:f4:cb:4f:0e:27:81:25:20:13:
d5:6c:69:e4:59:86:06:0a:5b:ee:96:75:cc:ff:2f:
0b:d5:9e:f3:b0:df:36:0f:f4:1a:4b:84:5c:0a:04:
e3:78:b8:7f:6e:62:67:d3:d1:2c:30:95:50:cb:d2:
de:0a:0d:a6:01:f3:4c:0c:8d:3e:f6:5e:24:d6:c9:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1E:FA:E3:FB:B9:FF:9F:8C:39:A1:02:49:42:07:F9:F1:22:DC:40
X509v3 Authority Key Identifier:
keyid:14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/MR764_u5_5-MOaECSUIH-fEi3EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.92.0/22
Signature Algorithm: sha256WithRSAEncryption
80:af:f8:0c:3d:15:6d:26:73:30:88:8d:42:b4:40:51:53:ca:
c1:9d:84:17:98:1a:52:e4:1e:2c:9a:cc:ba:e5:57:1a:d7:20:
47:67:41:93:2e:b3:e6:62:96:30:f6:53:25:82:68:da:11:00:
1b:4b:8b:6c:90:c4:e5:e0:69:3b:14:28:73:b1:fb:ac:e9:3c:
38:ca:58:9e:95:d6:44:69:4b:93:53:f4:98:ba:d7:e0:45:34:
e2:f9:63:b7:c4:cb:02:d0:32:cf:59:7a:5a:b2:93:ce:fb:58:
4b:85:21:02:84:a5:26:86:03:62:4c:6a:a4:de:4a:bd:d0:14:
22:e9:96:15:cb:44:b3:5e:c5:c0:73:c4:14:a5:aa:4d:bd:42:
2e:70:8e:c5:de:49:6b:2d:55:35:cf:21:be:01:52:5d:df:75:
ed:88:8e:90:93:82:c8:0a:1b:20:5d:8d:c6:f0:b6:be:55:11:
73:ad:7a:a5:4b:45:8a:8a:3b:ce:7a:ec:10:82:13:0c:cb:ba:
34:1e:44:80:dd:72:ae:84:a2:ff:34:1a:b1:a3:e3:22:54:87:
2c:23:52:cd:94:f7:d3:36:d1:3e:38:6f:f0:d6:cc:e2:6a:69:
fd:04:e0:05:0d:d8:72:8c:c3:e6:a4:9b:07:2a:bd:ae:6b:e2:
5e:8c:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:18 2024 by rpki-client on console-fra.rpki-client.org