Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/8ZtvvsZOTQtT_QYcYRAVsUkXUj4.roa
File: 8ZtvvsZOTQtT_QYcYRAVsUkXUj4.roa (raw, json)
Hash identifier: vdILtQxx5RyZZcvTsCOR9G5fIoVlP4DjrU59h5cX4ZE=
Subject key identifier: F1:9B:6F:BE:C6:4E:4D:0B:53:FD:06:1C:61:10:15:B1:49:17:52:3E
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01857D7956335571E719D3EA283C52D54D2A
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/8ZtvvsZOTQtT_QYcYRAVsUkXUj4.roa
Signing time: Wed 04 Jan 2023 15:49:42 +0000
ROA not before: Wed 04 Jan 2023 15:49:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 5.249.176.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:79:56:33:55:71:e7:19:d3:ea:28:3c:52:d5:4d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jan 4 15:49:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f19b6fbec64e4d0b53fd061c611015b14917523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b2:c7:31:d9:22:43:b6:ae:06:cf:90:af:a1:
c0:33:95:19:e2:58:46:fe:11:b1:42:74:5f:1c:29:
5e:9a:eb:aa:81:e2:ee:ea:ae:e3:b4:e1:0e:06:0f:
04:68:f6:ba:7f:a3:f2:59:ac:79:ba:62:5e:e5:01:
ef:56:f0:4a:c2:ab:90:c1:60:be:85:22:19:84:2e:
6f:16:55:5e:d5:f8:93:cd:a1:29:fb:6c:59:77:75:
4a:18:d4:dc:a2:93:12:89:46:58:b1:94:16:14:35:
74:19:41:a3:5f:90:7f:2f:d7:62:dd:5e:93:e3:57:
1f:f0:24:0c:88:73:d1:51:47:6e:de:4e:0b:e4:91:
fa:e9:1a:f5:f2:b8:4f:7c:7f:40:d1:ca:2e:87:bd:
ee:ee:4c:9b:da:4c:47:f5:7c:bf:7d:64:a4:0f:11:
eb:82:34:f2:c5:f5:86:e5:d0:ed:3c:7f:c3:1a:45:
1b:d9:4d:b8:37:9c:ea:03:ca:a4:f4:e7:c1:e3:52:
30:e4:e7:a1:e0:e3:b3:98:9c:70:58:8b:92:bf:34:
52:ce:36:5b:26:97:aa:54:05:d6:dd:50:4f:28:18:
fc:bc:f6:8a:c6:a5:bf:74:bd:af:37:f1:4c:50:f9:
00:ed:b4:99:0a:71:82:bd:fe:28:10:a4:03:91:23:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9B:6F:BE:C6:4E:4D:0B:53:FD:06:1C:61:10:15:B1:49:17:52:3E
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/8ZtvvsZOTQtT_QYcYRAVsUkXUj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:35:0a:77:e1:b7:f5:43:99:a8:65:7a:e2:cf:f1:e0:23:b3:
85:b4:29:57:4f:06:5c:3d:2a:9a:ba:67:e1:1b:6a:e3:6f:b0:
2f:67:8b:b5:85:c5:21:ab:6d:20:60:4f:83:ba:6c:a3:36:c2:
4b:2b:27:40:46:d8:cd:0a:78:4d:e7:18:bb:8c:34:78:98:c5:
fd:b8:c6:e0:65:4e:9f:69:20:ea:58:26:ee:e9:e5:ae:fa:db:
3d:4c:bf:19:99:82:d1:92:39:78:eb:92:ba:c5:44:3b:c9:74:
c3:74:13:fb:40:7d:e5:ce:84:51:57:35:51:21:e2:7f:c8:a0:
65:ba:0c:01:00:5d:98:24:d2:cb:94:b2:06:40:c1:a5:63:70:
91:30:db:c9:72:74:06:38:17:72:3d:ae:22:cb:47:cd:e5:69:
ea:6d:7b:fb:cf:a5:fb:54:ca:ea:6e:ba:02:e4:ea:f5:db:2c:
20:3d:c0:e5:0e:d9:3a:bc:8f:56:97:de:f5:2c:c2:70:7f:e7:
88:1a:d6:61:42:9e:54:49:f0:84:8c:74:ba:8b:7b:b0:86:15:
52:f4:49:b1:f9:db:ab:70:d2:81:08:25:bd:e4:43:0a:90:85:
44:fe:a1:4a:0b:d5:04:eb:64:95:d7:70:86:f5:93:8e:8d:53:
35:50:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-fra.rpki-client.org