Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/U7vuojIco-jnMkbhV8kueXZB9eI.roa
File: U7vuojIco-jnMkbhV8kueXZB9eI.roa (raw, json)
Hash identifier: Z6BHpoViKsuHG1bSVV2mYpP+lNk1uFY9WyRzYCHAeIk=
Subject key identifier: 53:BB:EE:A2:32:1C:A3:E8:E7:32:46:E1:57:C9:2E:79:76:41:F5:E2
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01856BC11B11F4F4109DF567870D67A2F83F
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/U7vuojIco-jnMkbhV8kueXZB9eI.roa
Signing time: Sun 01 Jan 2023 05:14:55 +0000
ROA not before: Sun 01 Jan 2023 05:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 5.249.180.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:1b:11:f4:f4:10:9d:f5:67:87:0d:67:a2:f8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jan 1 05:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53bbeea2321ca3e8e73246e157c92e797641f5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:d1:18:d4:86:62:de:50:96:17:7e:ae:b5:
1d:c3:f8:37:84:ae:42:70:30:43:18:64:61:7e:79:
51:2f:f7:6a:bf:92:97:25:53:f7:ea:42:f3:b0:62:
55:5d:8e:80:35:37:d3:4d:ad:dc:b7:b4:d8:94:1c:
bd:03:b5:44:08:f3:59:90:e2:b8:85:13:1a:f9:d7:
78:2f:7f:3b:14:14:2e:da:8f:e1:c6:02:cc:6e:96:
d1:48:8a:a0:35:c3:f6:59:b2:40:ae:58:5b:b3:77:
bc:6d:30:a8:de:c4:2e:8a:b0:90:ca:d7:e8:63:45:
4b:e3:62:ab:8f:7d:75:97:28:0a:91:c1:7d:4c:bc:
11:3e:55:1c:00:7e:ca:bd:20:e7:4f:e6:0b:83:06:
4a:a5:ca:5a:97:61:95:0b:67:d1:44:8b:63:23:15:
92:d5:a9:c9:ed:2f:e2:1f:9f:1b:32:bb:b6:c0:d8:
04:6f:5b:84:8f:d1:b7:e8:a0:b1:3a:16:d6:7e:a7:
b8:49:d2:df:93:03:6b:9a:18:83:c1:8b:75:22:0c:
a3:41:ed:0b:70:d1:7b:53:36:52:09:ec:79:69:8f:
a3:56:81:7b:f1:94:aa:fe:ba:a8:d6:1e:c2:13:b2:
31:d2:c3:57:54:77:bc:a9:14:56:7c:31:d3:98:a3:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BB:EE:A2:32:1C:A3:E8:E7:32:46:E1:57:C9:2E:79:76:41:F5:E2
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/U7vuojIco-jnMkbhV8kueXZB9eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.180.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:80:9c:fc:fb:f1:10:aa:f7:4a:f5:ce:f5:09:07:9b:d5:aa:
fc:fc:17:42:25:69:e7:e2:0d:84:c5:d4:ba:09:44:11:32:7f:
a1:9f:8d:a7:d8:64:32:79:33:f2:40:86:1b:54:a4:5f:f7:71:
2c:74:fe:85:92:09:62:0e:4e:31:0e:c7:05:17:69:80:6f:19:
1c:61:6f:a8:57:3f:08:27:72:64:9e:d6:4c:6b:cd:d6:a3:00:
c7:f3:55:85:de:ac:34:7e:4d:7a:b6:07:e7:9a:f7:d6:52:0c:
e5:86:33:65:8b:9e:4c:aa:be:07:33:98:85:07:e1:24:63:e9:
c4:16:54:8f:d3:77:50:64:0d:79:e8:bf:35:1d:97:98:16:e6:
22:a7:9a:c4:14:03:b1:4e:cd:fc:c2:52:62:68:06:b9:00:ef:
22:0e:aa:0b:26:f0:57:81:44:f7:7a:5a:4a:e8:52:aa:5f:f8:
92:75:b3:8b:13:5a:e9:1b:5b:4e:25:54:84:39:01:84:2d:f6:
c0:b9:ff:c4:e3:40:39:9e:b3:6f:44:a4:56:b1:38:2e:0d:ef:
9a:66:5a:f2:43:e2:81:23:8a:a1:22:36:3f:5a:7b:4a:07:28:
70:31:ae:ce:8a:b8:09:51:91:7d:0f:26:47:3d:85:6a:d8:5d:
75:49:23:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 13:35:32 2023 by rpki-client on console-fra.rpki-client.org