Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/vNTXX1du80iFp-lc8ufQL_N5dD8.roa
File: vNTXX1du80iFp-lc8ufQL_N5dD8.roa (raw, json)
Hash identifier: SJ4ZWoLpJl4CsbSE1m4L5c2qCUpnt3M8Geq1Kl0wOws=
Subject key identifier: BC:D4:D7:5F:57:6E:F3:48:85:A7:E9:5C:F2:E7:D0:2F:F3:79:74:3F
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C580C3A3AF10DBE9C175C1F53D780
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/vNTXX1du80iFp-lc8ufQL_N5dD8.roa
Signing time: Mon 02 Jan 2023 10:34:49 +0000
ROA not before: Mon 02 Jan 2023 10:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212042
IP address blocks: 5.181.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:58:0c:3a:3a:f1:0d:be:9c:17:5c:1f:53:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcd4d75f576ef34885a7e95cf2e7d02ff379743f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:e0:29:50:c0:59:a2:6d:ea:54:9b:7c:c7:
a7:f6:39:6d:bb:8f:bb:13:c4:2f:d7:f5:e6:c3:49:
5d:7a:fa:43:5f:63:ab:be:90:9d:8a:a0:c1:60:b0:
d1:36:b5:d4:b2:c3:81:ae:26:98:13:01:1a:b5:be:
23:8f:bb:69:3f:7e:72:85:61:7a:8b:1f:21:6b:1e:
40:c7:cf:36:46:61:ab:a1:c5:2d:7f:23:6b:91:44:
02:bc:71:2d:4c:54:49:a0:21:ad:07:de:c8:64:af:
fa:e9:ab:43:f7:9f:e4:ce:95:41:ae:c7:4a:e8:cd:
41:cb:88:cc:5d:8d:2c:fd:6a:ab:c7:9c:c2:78:65:
1c:48:b3:92:14:61:cc:79:23:60:9f:1c:81:9b:82:
04:e6:78:cf:ee:c8:7b:ec:dc:0e:ae:ed:74:19:b6:
f1:11:fc:da:2d:05:91:dc:11:5e:02:84:bd:80:3a:
52:02:e8:fe:f4:e9:df:df:4e:cb:a5:53:79:ff:cb:
a7:bd:bb:38:d4:6e:d7:a9:95:9e:09:04:a9:da:36:
4c:71:97:1f:2f:f6:ad:b4:d7:dd:fc:84:59:ae:97:
65:6a:c2:d0:79:ec:18:dd:56:32:8c:87:db:d6:a9:
57:f4:13:dc:dc:8d:15:16:26:f6:dd:8b:4b:47:25:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D4:D7:5F:57:6E:F3:48:85:A7:E9:5C:F2:E7:D0:2F:F3:79:74:3F
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/vNTXX1du80iFp-lc8ufQL_N5dD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:13:09:76:0b:64:11:a0:da:5e:34:d0:b7:2f:a2:bd:18:30:
58:de:1d:bf:62:35:4d:ea:40:bc:36:c6:57:ee:b8:32:6a:c3:
53:1c:58:48:d8:ec:61:ea:a5:c7:02:bd:c0:ea:44:f9:12:8f:
7f:30:d9:6f:99:fa:82:86:0d:b6:87:7f:1d:21:8f:06:e9:27:
3e:51:cc:62:80:c1:05:67:56:87:f5:c0:af:d5:cd:bf:24:f9:
6a:e1:c8:d2:1b:44:1a:41:21:cf:a2:0c:f8:14:37:11:d5:5d:
69:1d:31:b1:e1:78:7f:29:d4:a6:62:f1:5f:d7:d8:be:ab:6b:
13:e7:d1:3d:03:1d:7e:87:52:a1:17:63:7e:05:d5:45:69:61:
b4:44:89:ea:e2:f5:3a:47:0c:04:5e:9a:85:85:24:cf:69:03:
52:fc:5d:85:cd:f7:10:3f:c4:93:4a:62:1c:c2:b6:81:8a:53:
06:18:d3:04:9b:94:f7:62:b6:cc:25:69:1b:19:42:7d:c6:67:
e1:4b:51:fe:81:36:2a:ae:e4:d0:85:db:77:11:86:f8:c4:4e:
55:cc:63:f3:05:cf:2d:90:ae:90:04:73:b5:db:5d:75:9d:60:
1e:d7:98:c5:08:f9:1c:7a:0d:a8:83:e4:5d:25:fa:83:07:18:
bb:a3:d5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:18 2024 by rpki-client on console-fra.rpki-client.org