Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/sa-clMKDvs9fVn098VHY0pyQ9rE.roa
File: sa-clMKDvs9fVn098VHY0pyQ9rE.roa (raw, json)
Hash identifier: Rrq1tRfePF5KQnLieX953SmEaxypNHG4YGfKijr2n+k=
Subject key identifier: B1:AF:9C:94:C2:83:BE:CF:5F:56:7D:3D:F1:51:D8:D2:9C:90:F6:B1
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 01856C1CC66B3B16E3EB8BC147B08C51FFA5
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/sa-clMKDvs9fVn098VHY0pyQ9rE.roa
Signing time: Sun 01 Jan 2023 06:55:03 +0000
ROA not before: Sun 01 Jan 2023 06:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199072
IP address blocks: 5.61.15.0/24 maxlen: 24
2a00:9801:e001::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:c6:6b:3b:16:e3:eb:8b:c1:47:b0:8c:51:ff:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Jan 1 06:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1af9c94c283becf5f567d3df151d8d29c90f6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:23:50:98:7d:0d:f9:3f:fa:ca:32:0d:f4:
92:83:4f:6a:3b:f5:2d:5d:d6:f0:37:38:8d:e0:29:
5e:e7:e8:a1:ee:1d:5f:e6:55:e2:4e:94:0b:b5:cc:
cb:da:2f:37:b8:18:89:d7:60:a8:e5:a4:b5:c6:17:
79:75:6d:b1:84:61:38:56:0e:ea:e7:9f:ce:73:3c:
46:e4:d9:c4:f5:ab:49:b7:8d:ee:2e:c1:e3:53:52:
e5:1b:33:48:18:4b:ec:1d:48:90:21:b9:03:08:7d:
f3:bc:bf:63:11:c2:52:22:3a:6a:c4:00:50:6f:8e:
4e:ae:88:eb:c5:54:f9:09:02:13:a7:43:23:22:42:
86:4f:96:7b:2d:49:86:8e:1f:5b:5c:af:ae:a9:71:
13:09:82:f5:a7:5a:c4:c1:a5:00:34:21:2b:a3:57:
0c:2c:aa:3e:71:13:44:dd:5e:a0:70:8e:3a:3a:6c:
27:5a:c1:d9:93:dc:20:10:35:1f:d9:75:8f:1c:d3:
1e:1d:8d:f4:c1:5a:77:a8:27:a3:f7:fa:fb:a5:6b:
b2:b6:63:b9:be:e1:29:25:92:b2:9b:03:82:b3:6d:
55:ca:b6:64:38:8f:6c:82:f6:15:62:22:d9:cc:cb:
2f:c9:71:ef:1c:55:32:6a:81:84:42:b7:52:75:da:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AF:9C:94:C2:83:BE:CF:5F:56:7D:3D:F1:51:D8:D2:9C:90:F6:B1
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/sa-clMKDvs9fVn098VHY0pyQ9rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.15.0/24
IPv6:
2a00:9801:e001::/48
Signature Algorithm: sha256WithRSAEncryption
73:c3:6f:fd:a7:bd:e4:be:75:f9:c3:71:8d:cd:a0:da:0a:aa:
4f:95:56:a2:ee:f3:ba:90:6f:bb:7a:12:36:63:a6:90:3a:15:
26:1f:ac:82:77:62:4a:b7:2f:85:40:fe:f3:02:ab:0b:c3:a8:
5a:46:ca:b0:9a:81:60:6d:da:0b:70:97:b9:6b:6e:7c:97:13:
71:6a:0c:cd:da:80:5c:b8:a1:b9:5f:a9:3a:12:78:38:ac:b3:
00:c7:09:f6:bc:66:d8:ad:e5:3f:f4:cb:a0:ba:f1:e5:db:78:
b1:dd:3d:70:f1:02:f1:db:35:81:b6:d5:c1:6c:5b:2f:44:04:
84:61:aa:5f:7e:32:8a:0a:5d:1c:48:8b:13:a7:9b:74:68:00:
80:19:8b:7a:f9:5e:4d:b7:1e:12:9c:92:33:53:49:06:97:93:
6f:a7:8c:b5:75:f2:8a:e2:35:c2:7c:e0:0e:f5:d9:f8:88:29:
ff:4a:1e:c3:26:e3:76:12:4e:ab:75:d4:4f:60:cb:fc:8f:c7:
8d:a0:8f:32:5d:c1:e6:b4:60:e7:16:19:a7:59:d8:3e:83:3f:
83:8a:37:6d:fb:24:48:c9:39:3c:a7:11:03:97:00:31:3f:6f:
3e:28:ab:9d:59:7e:bf:27:5b:a2:e7:5c:a5:e9:24:55:71:9e:
78:75:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:03 2024 by rpki-client on console-ams.rpki-client.org