Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/5LpdioQje3T56D91gNuKrB1sysc.roa
File: 5LpdioQje3T56D91gNuKrB1sysc.roa (raw, json)
Hash identifier: DMtVyBGP12EG+6zCJdCFVSHvVfx17ekzRgPaxWK5Urw=
Subject key identifier: E4:BA:5D:8A:84:23:7B:74:F9:E8:3F:75:80:DB:8A:AC:1D:6C:CA:C7
Certificate issuer: /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Certificate serial: 01856F0B4ED9AB0277B1F58E292F2510AED0
Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/5LpdioQje3T56D91gNuKrB1sysc.roa
Signing time: Sun 01 Jan 2023 20:34:50 +0000
ROA not before: Sun 01 Jan 2023 20:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25321
IP address blocks: 193.201.78.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:4e:d9:ab:02:77:b1:f5:8e:29:2f:25:10:ae:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Validity
Not Before: Jan 1 20:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4ba5d8a84237b74f9e83f7580db8aac1d6ccac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:51:ae:c2:15:00:7a:7d:76:f3:7b:76:21:bb:
63:40:ff:2a:70:53:03:24:f2:b1:eb:6f:bc:82:92:
e3:37:06:04:d7:73:c1:da:3d:ae:85:b0:91:15:1e:
00:9f:17:e2:f3:df:e9:72:20:96:e0:fe:49:e3:48:
a1:86:8a:b9:95:b7:94:65:60:f2:10:51:f5:a9:26:
96:2d:45:17:e2:6a:8b:7d:c0:31:3d:cc:f4:e2:91:
ca:85:5c:f7:fe:52:9e:d1:02:38:67:8c:b3:cc:c3:
4c:06:98:3e:35:ca:8b:2e:34:a1:ac:bb:10:d2:f6:
d1:a2:51:af:9a:6a:a9:cd:57:e4:1a:12:53:8c:a8:
01:3d:fe:b9:67:e7:fa:71:a2:0e:5e:54:03:ad:be:
49:c1:13:9c:6e:ef:c7:d9:70:53:6d:f7:25:b0:5a:
75:8b:25:18:ab:d8:ba:fa:e4:a9:ab:44:6a:5b:6f:
77:fa:75:f7:db:a3:a9:0c:2b:e7:b8:d6:07:18:e3:
13:96:35:de:a3:c9:22:bd:07:25:25:b5:b9:bd:53:
2f:93:ae:52:4a:83:c5:a1:40:c7:a1:f1:92:39:a8:
b3:b7:6b:63:57:c8:0c:73:a7:69:f1:56:ef:08:59:
57:f2:92:21:1d:19:16:ab:14:1e:f9:2b:90:7d:a1:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:5D:8A:84:23:7B:74:F9:E8:3F:75:80:DB:8A:AC:1D:6C:CA:C7
X509v3 Authority Key Identifier:
keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/5LpdioQje3T56D91gNuKrB1sysc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.78.0/23
Signature Algorithm: sha256WithRSAEncryption
33:d9:11:55:ef:ed:38:a8:34:a1:8d:cb:29:43:b1:c1:ff:b2:
ba:36:59:ac:3e:aa:f6:34:a5:9b:fd:50:46:b5:2c:fd:c2:dc:
1d:30:ab:1d:08:50:cc:d6:8f:93:90:d8:85:ee:8a:6c:80:d5:
38:7b:63:1b:8d:34:0d:3c:f9:1d:85:3c:15:c4:40:2e:4a:88:
15:9b:39:2d:21:82:f2:e8:14:7b:69:1d:33:ab:cb:e6:87:47:
2e:a0:f2:a2:b7:10:c3:9c:60:5c:4a:cf:46:9b:65:fd:28:2b:
b8:c2:6c:5b:20:4f:34:e6:e1:fb:ef:c6:92:af:08:e4:98:94:
49:c6:5c:7f:34:40:32:65:19:d4:e5:37:89:55:cf:a5:38:b6:
f3:88:f9:92:92:d5:5a:47:8e:30:11:67:12:5e:2b:8b:6e:91:
eb:7f:db:8e:f3:21:e5:45:17:7b:97:67:c2:6e:d1:5e:e4:17:
32:6e:0f:b0:1b:94:72:26:45:bc:b5:ca:64:f2:66:77:d2:6c:
39:3d:70:43:50:16:91:13:34:61:bb:e5:bb:fe:e3:8a:d5:d6:
da:1b:e3:be:e9:6c:ca:1b:e7:c5:4b:37:14:06:5e:0f:f6:e1:
b1:2a:81:88:d0:b4:44:ba:e3:45:13:1e:77:16:2f:44:37:d0:
a1:4f:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:28 2024 by rpki-client on console-ams.rpki-client.org