Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/AUyXWC513nOifH624k0WLC7X2zQ.roa
File: AUyXWC513nOifH624k0WLC7X2zQ.roa (raw, json)
Hash identifier: FsOLxa694RZyKsKd0DCBaS/fUs8JD++VPosrBFh4mDY=
Subject key identifier: 01:4C:97:58:2E:75:DE:73:A2:7C:7E:B6:E2:4D:16:2C:2E:D7:DB:34
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018678B20179D679DBEF699580EA6B7760DA
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/AUyXWC513nOifH624k0WLC7X2zQ.roa
Signing time: Wed 22 Feb 2023 10:36:17 +0000
ROA not before: Wed 22 Feb 2023 10:36:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 5.57.32.0/24 maxlen: 24
5.57.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:b2:01:79:d6:79:db:ef:69:95:80:ea:6b:77:60:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 22 10:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=014c97582e75de73a27c7eb6e24d162c2ed7db34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:30:27:f7:e1:d7:79:53:b2:f9:bb:fe:5c:
ca:90:33:05:e0:a2:62:2a:49:95:ac:af:8e:b6:9b:
9d:5f:66:55:d3:18:ba:ff:ff:9e:ec:84:c4:42:51:
74:86:47:ce:a1:31:60:04:83:8d:b1:5a:aa:4d:a0:
7c:b8:d3:de:a5:e3:dc:dd:fa:9f:4a:b3:44:19:df:
0c:5c:03:7f:17:4f:72:02:43:27:0b:96:a6:8e:15:
56:44:c1:4c:7c:7b:c5:5f:a7:86:46:90:d6:6f:58:
9c:b2:b3:63:e9:29:1c:21:e6:8d:a9:d2:fd:39:c8:
2d:a7:c2:b7:d3:eb:cc:ca:50:6f:f6:e4:9d:49:e1:
c9:da:c3:ba:8f:78:0c:ee:29:b3:6c:7b:3f:11:35:
cd:07:ea:75:bb:a0:a9:8a:2e:18:30:b2:a0:84:ed:
e8:87:27:2f:c2:bb:62:8a:0a:8f:8f:57:dd:61:a6:
f4:e3:b1:8b:56:96:2e:29:f2:c5:3f:e6:f5:4b:c1:
9a:02:a3:ae:37:e4:39:68:7a:af:f3:e9:18:74:bb:
a5:30:99:25:39:be:ee:56:5d:1a:c5:a9:dd:28:89:
9f:00:fc:66:f5:c9:10:84:11:26:12:22:a5:c2:2e:
f6:e4:9c:7a:a3:7d:40:2a:ad:5e:86:db:66:c5:17:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4C:97:58:2E:75:DE:73:A2:7C:7E:B6:E2:4D:16:2C:2E:D7:DB:34
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/AUyXWC513nOifH624k0WLC7X2zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.32.0/24
5.57.38.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4d:31:3c:2b:ef:ed:27:8e:71:24:a9:1e:1d:3f:b0:dc:ef:
39:9b:07:44:99:77:e8:a6:09:37:88:df:c8:b1:3d:a7:ab:d3:
4b:a2:5b:d7:ba:ca:e8:76:09:a8:c5:8f:c9:14:fc:49:d1:00:
dd:1a:9f:9f:51:6d:ac:b3:f1:49:2d:c8:9d:6e:30:8a:e5:f8:
94:8f:b3:d1:38:f2:db:c2:a8:75:a9:f8:04:33:f4:2c:38:54:
61:c5:ca:f5:84:46:e9:49:bd:2d:ec:c4:a2:a8:6e:d4:47:40:
e7:1b:b8:e0:d7:32:bb:c4:37:65:4d:b8:2c:b1:e5:0b:09:d5:
f4:3f:71:6f:a2:f4:16:76:73:a4:9c:41:ed:1f:54:24:78:c3:
3f:94:8f:61:23:cf:c5:b1:53:c0:97:7f:24:7d:56:09:20:e7:
e6:ea:bf:56:b2:24:3b:e5:b5:76:3f:49:0d:61:83:8e:f6:ba:
6e:4e:56:ad:a4:73:bf:6f:0c:2f:79:e2:6e:98:cf:4e:1a:0f:
7c:60:75:da:38:bc:78:3a:3d:f4:14:83:58:cc:15:46:8f:f0:
98:54:a8:64:b8:ab:a7:aa:11:e1:93:1c:45:cc:21:a7:4a:49:
49:f3:d6:78:a2:f1:72:45:50:42:99:df:fd:8f:3d:44:82:d1:
6e:c0:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org