Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/5IDWfQFEmswGTWk7ZHLfwFyit98.roa
File: 5IDWfQFEmswGTWk7ZHLfwFyit98.roa (raw, json)
Hash identifier: zc4NYCT8JLWPKsvj7MY89t+fb8zkWQ2qvOZWldBAl1o=
Subject key identifier: E4:80:D6:7D:01:44:9A:CC:06:4D:69:3B:64:72:DF:C0:5C:A2:B7:DF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 0185710C08307D60E4E111B1E29650871BED
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/5IDWfQFEmswGTWk7ZHLfwFyit98.roa
Signing time: Mon 02 Jan 2023 05:54:52 +0000
ROA not before: Mon 02 Jan 2023 05:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 553
IP address blocks: 141.59.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:08:30:7d:60:e4:e1:11:b1:e2:96:50:87:1b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Jan 2 05:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e480d67d01449acc064d693b6472dfc05ca2b7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:fe:d5:fb:aa:d1:10:41:8a:2b:18:1e:44:
a2:5c:8e:2c:94:e6:08:26:55:fa:37:44:ad:67:68:
4c:22:1f:eb:e2:b4:f8:96:8a:14:67:a8:44:85:5f:
16:38:5a:9e:42:63:c0:7d:06:37:e9:bb:d8:5f:75:
9e:33:32:8a:51:a8:6e:7b:8a:41:be:ab:7d:8b:5c:
6a:7b:54:d2:11:c2:d3:f1:96:71:0c:c5:6a:21:9c:
30:e0:67:4f:95:f1:9b:c0:3b:65:a8:fb:66:9f:d6:
22:94:f5:48:31:32:79:07:bb:b9:48:da:16:fa:b5:
a6:d8:2f:0a:46:0f:66:e3:d7:4b:a2:03:e9:1e:28:
52:f8:29:d0:32:11:a6:da:b0:16:59:8d:f8:ec:a7:
ea:11:9f:3d:d4:c4:0c:e1:30:26:cb:5b:00:78:06:
cd:d0:64:f0:4d:1d:c7:ab:d7:7b:a2:7c:a4:b6:98:
c2:34:e3:c9:e4:5f:31:f3:05:74:16:45:1f:59:99:
e4:2c:d7:d6:5f:7f:a4:83:d5:e8:7e:38:8a:3f:f3:
00:54:49:62:8a:ba:d9:7d:88:7f:3f:96:8b:9f:96:
ad:5b:13:63:32:31:bc:65:53:6a:03:bb:5a:d3:74:
f4:b9:00:88:98:58:3e:4c:a1:2a:45:dc:79:aa:31:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:80:D6:7D:01:44:9A:CC:06:4D:69:3B:64:72:DF:C0:5C:A2:B7:DF
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/5IDWfQFEmswGTWk7ZHLfwFyit98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.59.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:2b:4b:91:af:fe:8d:ed:8b:77:7a:6b:71:07:2e:c6:21:06:
c1:d7:0e:cb:58:75:47:73:d2:36:5a:5f:77:a5:2a:bd:7b:af:
2d:14:f0:be:88:24:68:70:54:96:b1:0e:f4:91:bb:91:d2:46:
96:c6:51:2a:fb:85:a4:30:8c:3f:70:e5:0f:88:90:b5:f3:66:
16:56:7c:01:24:e4:ff:38:36:64:f5:4f:7c:b1:62:a2:e3:d1:
3c:8d:a1:c5:51:a9:93:02:26:99:47:df:be:f5:ed:4a:66:87:
1c:e7:20:4e:57:da:34:54:4c:71:d4:51:e7:7d:3f:db:dd:41:
c7:8c:c9:df:ee:e6:e7:b8:52:69:1b:d6:82:19:2b:89:2c:f8:
7d:93:e7:1e:43:4a:45:2b:1b:b6:c7:03:df:af:ce:4d:61:65:
22:53:1b:0a:78:00:3b:17:6f:25:73:d6:5f:2d:0f:f4:04:10:
ea:80:90:1f:eb:ba:68:8f:ff:3c:aa:f9:a9:51:a1:2d:69:46:
fc:83:6d:0b:e8:88:d7:67:ae:29:de:34:92:c3:45:b2:3e:de:
dd:7a:0a:ba:6a:f1:1c:d3:c1:ba:52:df:66:ca:59:b1:2c:00:
0b:83:f8:f3:7e:f4:51:b4:d0:ec:0c:6f:cf:38:b1:e5:a8:9f:
aa:06:63:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:52 2024 by rpki-client on console-ams.rpki-client.org