Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/90DP5qkiMN1vift00qiiw2HS5TY.roa
File: 90DP5qkiMN1vift00qiiw2HS5TY.roa (raw, json)
Hash identifier: dhG8GQT5xYmZ34WWBijq08/GLlHv5tSsuurNIeECfXs=
Subject key identifier: F7:40:CF:E6:A9:22:30:DD:6F:89:FB:74:D2:A8:A2:C3:61:D2:E5:36
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 018572311AA591ABB6CF19E8B2AC0DBAFD04
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/90DP5qkiMN1vift00qiiw2HS5TY.roa
Signing time: Mon 02 Jan 2023 11:14:58 +0000
ROA not before: Mon 02 Jan 2023 11:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210658
IP address blocks: 62.204.47.0/24 maxlen: 24
5.181.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:1a:a5:91:ab:b6:cf:19:e8:b2:ac:0d:ba:fd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: Jan 2 11:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f740cfe6a92230dd6f89fb74d2a8a2c361d2e536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:79:2a:c1:ba:24:70:d1:db:86:9b:77:1d:
00:86:a9:f9:53:4d:ed:2c:4d:6d:42:b1:a8:50:9b:
af:5d:4b:ef:cd:c5:8e:ef:e2:be:f7:2c:f3:fc:99:
9b:57:1e:5e:a6:79:e6:3b:55:cc:34:29:cb:58:a9:
17:fe:a8:e1:41:a4:54:36:e3:b9:6a:66:10:c9:da:
c0:67:fa:0a:83:92:7b:03:be:48:51:3b:d5:59:05:
0a:a0:85:13:54:86:37:bd:de:2d:80:fb:05:7a:ee:
17:35:ed:4c:e5:61:e6:61:e6:42:4e:8f:96:6b:39:
1d:59:e6:22:fa:40:31:cd:2c:88:c1:61:c5:47:0c:
af:7d:21:e2:d6:04:3d:44:a2:f5:ef:68:e4:38:53:
d7:a5:7a:a2:d0:53:ea:3a:f9:a3:de:6e:8c:4b:32:
5d:14:94:bd:f0:83:23:5b:a5:79:81:01:0b:58:07:
78:a5:13:95:9a:6c:57:82:89:14:1a:97:7d:8b:95:
cf:44:da:a6:72:e2:29:6f:48:ec:de:7c:48:d0:57:
5a:2c:58:8e:a6:40:66:7b:59:fb:80:0e:6e:a4:ca:
a0:1e:ea:3e:0a:0a:e9:26:b0:db:f8:69:97:0d:e3:
d2:81:3f:50:2b:49:92:c4:3f:93:e2:b5:d5:e5:9c:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:40:CF:E6:A9:22:30:DD:6F:89:FB:74:D2:A8:A2:C3:61:D2:E5:36
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/90DP5qkiMN1vift00qiiw2HS5TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.16.0/24
62.204.47.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:07:90:59:7e:47:19:da:ab:c7:ab:f4:01:b3:13:d5:2e:dc:
a8:4d:01:51:f9:5a:7e:ac:ab:4f:ce:62:c0:e0:51:c6:0c:9a:
03:0e:a8:a4:32:3c:59:ed:f1:06:8a:70:86:fb:86:17:23:b1:
eb:39:43:e4:5e:7f:95:20:b3:2b:95:57:14:6d:b5:4c:2a:d0:
9f:84:2f:42:3c:83:66:92:4b:d7:3d:46:f0:83:df:18:4c:9b:
52:f4:88:d9:87:ba:c2:93:37:e8:0d:22:66:ef:30:fc:e7:8f:
84:b2:f2:fd:dc:4d:e8:c2:10:11:8f:2b:4e:f4:a3:41:ff:a0:
e1:55:15:a0:06:35:58:b8:fe:56:3f:5a:21:c1:2f:0e:43:d6:
8c:5d:1e:69:62:f7:96:08:e4:da:f4:3d:5e:42:13:62:af:fe:
86:24:27:91:81:0a:ad:ac:ba:cd:f6:9b:73:0b:7b:5b:7f:34:
ba:81:a5:6a:01:2a:28:70:a2:32:3e:af:a1:7a:f4:52:9a:72:
58:03:42:60:27:a0:9d:e5:4e:a9:2b:e7:0e:5b:2b:8a:81:c6:
f5:0f:d9:d3:cc:10:15:5f:c0:f2:29:3b:ee:e1:6b:06:26:e6:
9e:49:7e:1b:d3:56:f8:4b:83:be:86:38:c0:5d:8d:6b:4d:71:
9c:d9:ca:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:18 2024 by rpki-client on console-ams.rpki-client.org