Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/jnqOadkkFGHegpPSu1ItO6QK9NY.roa
File: jnqOadkkFGHegpPSu1ItO6QK9NY.roa (raw, json)
Hash identifier: Psh34nmkhadIbDluZXz0rHzeUGvzbYFvk6cODw3d2eU=
Subject key identifier: 8E:7A:8E:69:D9:24:14:61:DE:82:93:D2:BB:52:2D:3B:A4:0A:F4:D6
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 018B23CCF1C3735E9493645EA01737998AA1
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/jnqOadkkFGHegpPSu1ItO6QK9NY.roa
Signing time: Thu 12 Oct 2023 12:11:55 +0000
ROA not before: Thu 12 Oct 2023 12:11:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8860
IP address blocks: 5.182.21.0/24 maxlen: 24
5.182.20.0/24 maxlen: 24
2a0e:b800:dddd::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:cc:f1:c3:73:5e:94:93:64:5e:a0:17:37:99:8a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Oct 12 12:11:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e7a8e69d9241461de8293d2bb522d3ba40af4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:04:08:8b:7e:23:32:13:6f:aa:47:81:54:
cc:ef:bd:69:c2:fd:22:55:2f:ee:da:86:34:e8:6f:
c4:17:d5:e2:a3:a9:71:81:2d:20:fe:d1:0d:26:45:
84:17:a2:f2:18:f9:49:e1:10:71:61:19:38:c6:dc:
37:95:9e:51:05:8b:ec:d9:52:1b:ab:c3:e4:4f:9a:
b1:06:4c:16:3e:ea:a6:bd:7f:b7:bc:74:6e:3c:12:
b1:ef:e2:e6:a7:3b:0b:c5:ca:54:a7:8c:84:5d:74:
9b:df:57:fd:a5:17:b2:e3:89:62:bc:62:e7:82:77:
b0:99:64:3b:83:e6:2d:9e:d0:61:00:0d:af:69:8d:
ee:37:cb:55:29:e4:95:51:d6:55:4e:01:d2:96:09:
99:e0:f8:c6:85:df:62:f5:9a:57:86:d4:43:14:99:
2f:86:ae:5b:69:de:ea:42:af:8d:35:36:f6:86:b9:
fe:52:e9:c9:45:28:1e:59:0e:25:32:48:ff:5e:15:
37:4b:97:7c:5d:88:51:5e:28:5c:fd:b2:ac:21:11:
bb:f6:a3:cc:87:eb:c4:39:ea:1b:cb:96:47:26:cd:
ae:5e:2e:44:0d:b1:1f:56:92:1c:1a:7c:d7:70:73:
81:5e:6f:46:f7:1b:91:98:9e:78:1c:dc:24:ad:29:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7A:8E:69:D9:24:14:61:DE:82:93:D2:BB:52:2D:3B:A4:0A:F4:D6
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/jnqOadkkFGHegpPSu1ItO6QK9NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.20.0/23
IPv6:
2a0e:b800:dddd::/48
Signature Algorithm: sha256WithRSAEncryption
6a:d6:57:af:79:bb:89:d8:ef:95:dc:65:ad:ed:9e:b7:27:8f:
a6:07:09:11:3f:36:1d:01:d4:a7:04:ad:67:bd:1b:cf:dc:09:
ad:3c:b3:03:b1:7b:b2:b3:38:43:7f:14:d5:b1:10:7f:cc:9a:
c2:f9:29:d1:4f:7a:bc:a0:07:c1:56:74:eb:81:64:05:99:e4:
92:b3:e2:e6:f6:91:b0:e8:27:ef:fc:a6:b8:52:d7:e1:50:6c:
47:3e:55:3e:30:46:9c:a8:61:91:d8:e0:b3:04:66:f1:a0:28:
1e:fc:8c:b8:23:fc:0d:c9:11:13:f9:de:37:5d:aa:d4:9e:c4:
b4:94:4b:b8:23:33:d5:c3:e1:e0:fd:17:09:31:4f:72:ef:ec:
ed:1c:f0:e2:41:c3:35:ae:16:d2:b7:c5:79:0c:10:52:59:aa:
03:ab:ef:6d:b3:cb:40:a6:10:d4:ca:78:b4:ab:40:33:43:46:
c4:1f:18:23:95:28:4b:b8:e9:23:60:aa:4c:2f:f6:06:ac:b6:
4c:e1:6f:bf:80:b0:61:7a:6b:e0:6f:d8:dc:a4:11:c4:f1:89:
76:58:6f:f6:74:7b:37:8f:d4:f4:97:37:d7:5c:93:59:aa:83:
62:23:5c:37:79:0f:9d:81:f9:92:a2:2b:ad:28:52:57:0c:4e:
b8:75:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:36 2024 by rpki-client on console-ams.rpki-client.org