Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/xCr_fIGi7-GHIOhrzzdzqYy0wIk.roa
File: xCr_fIGi7-GHIOhrzzdzqYy0wIk.roa (raw, json)
Hash identifier: KB6x18U+sVPbX2osM1eGBsHFPYsB7geiYfieJ9BOZQs=
Subject key identifier: C4:2A:FF:7C:81:A2:EF:E1:87:20:E8:6B:CF:37:73:A9:8C:B4:C0:89
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 01856E2F8A5AC187AA18D26254E2D5032119
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/xCr_fIGi7-GHIOhrzzdzqYy0wIk.roa
Signing time: Sun 01 Jan 2023 16:34:47 +0000
ROA not before: Sun 01 Jan 2023 16:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209072
IP address blocks: 5.183.140.0/22 maxlen: 22
5.183.143.0/24 maxlen: 24
5.183.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:8a:5a:c1:87:aa:18:d2:62:54:e2:d5:03:21:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Jan 1 16:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c42aff7c81a2efe18720e86bcf3773a98cb4c089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:dc:37:98:89:3e:70:f5:69:63:04:2b:b8:
9f:ed:66:cb:6c:72:d3:56:a4:ae:bc:be:8c:61:78:
dc:58:5b:74:55:c7:c6:a4:4c:d9:ad:b2:8f:be:5a:
c5:6b:19:0c:e9:85:f2:22:38:3d:a6:d6:65:4c:24:
08:95:48:68:c5:5b:4d:ac:6a:2c:db:51:00:8c:82:
80:b9:28:98:ea:15:ce:5d:74:1a:de:c3:81:68:d6:
44:75:d9:2d:8d:db:63:2f:c8:d8:62:77:1b:3b:9d:
49:b9:03:71:96:3b:cf:e3:28:d4:c0:20:6c:5f:cf:
31:47:78:c8:09:73:d3:2a:5e:69:0b:e1:72:e7:74:
b2:15:11:39:85:10:27:29:2a:56:7c:86:db:ee:da:
11:8b:41:5c:a9:90:45:d2:ae:13:6b:5a:1c:25:d7:
ad:21:37:f9:b6:a2:cd:de:dc:89:83:92:75:ae:fb:
f4:ac:83:ea:b3:8d:cd:b0:c2:5a:7a:ec:9c:58:dd:
0d:68:e8:af:42:8e:be:58:f7:29:bc:e9:1a:9b:fe:
07:b2:1c:8f:4f:84:e0:b1:7a:72:8b:ae:90:da:83:
b2:d1:85:b4:bf:12:26:8f:93:8a:89:0b:5f:11:a5:
f9:0b:78:af:c5:34:14:56:bc:a9:d3:6d:df:1f:9a:
8d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2A:FF:7C:81:A2:EF:E1:87:20:E8:6B:CF:37:73:A9:8C:B4:C0:89
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/xCr_fIGi7-GHIOhrzzdzqYy0wIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.140.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:e2:4b:d4:f9:95:45:bf:96:cf:40:5c:a6:ca:08:dd:ae:7a:
3d:7a:5b:13:75:7e:26:16:6f:69:99:1e:6f:ad:45:fe:d2:33:
b0:81:f8:c2:73:4f:ea:d5:66:9c:46:cf:35:aa:41:8f:49:94:
11:7c:fb:ad:63:50:29:91:b8:02:21:d2:b5:a3:e2:a5:a9:b4:
0b:c5:71:bc:9c:19:4d:dc:97:67:1a:b5:c7:96:8b:10:77:4d:
e3:a2:13:0a:80:81:b1:c8:45:77:a4:1b:7c:46:01:2b:ff:f7:
97:0b:ed:71:cc:80:94:4e:3e:3e:4e:e3:fb:d0:b1:7c:80:25:
66:97:99:08:56:e5:c9:b4:f0:6e:71:1c:f4:82:76:1a:e4:67:
21:83:a9:66:7f:c5:5e:9c:3b:64:3c:94:b0:ed:3e:36:e9:15:
37:54:8f:38:3e:45:bc:70:bd:db:67:2c:10:5d:34:f3:9c:9d:
de:db:db:1a:cd:8a:92:4b:ca:1b:2c:d8:f8:d4:ad:18:7e:92:
90:82:82:a8:a9:f1:cd:ae:c7:b5:06:6c:90:67:e0:e6:90:27:
29:4a:d5:26:c4:86:ae:e2:37:e7:73:ee:16:3f:80:49:7e:5b:
2c:1d:26:e4:d8:fc:0a:ca:dc:d4:75:fb:a6:4a:c7:6a:dc:19:
4f:b1:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:47 2024 by rpki-client on console-fra.rpki-client.org