Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/UObYi4eJKF5uHiiOOX9wPX8zhiU.roa
File: UObYi4eJKF5uHiiOOX9wPX8zhiU.roa (raw, json)
Hash identifier: dqKvXjSDUmmL0GpeSWeruSFJZ5k5juChbjwBkhjzRS0=
Subject key identifier: 50:E6:D8:8B:87:89:28:5E:6E:1E:28:8E:39:7F:70:3D:7F:33:86:25
Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial: 01856B77D0DEBABECDADC972410D631CE2C3
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/UObYi4eJKF5uHiiOOX9wPX8zhiU.roa
Signing time: Sun 01 Jan 2023 03:54:52 +0000
ROA not before: Sun 01 Jan 2023 03:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60358
IP address blocks: 5.44.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:77:d0:de:ba:be:cd:ad:c9:72:41:0d:63:1c:e2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Validity
Not Before: Jan 1 03:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50e6d88b8789285e6e1e288e397f703d7f338625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:d1:e7:52:80:24:f0:bb:4f:4f:3a:4e:d0:
f8:92:c6:d3:3f:0c:c5:19:37:cc:0c:74:75:53:fe:
60:2d:88:d3:5f:de:bd:b8:64:e9:b8:31:7b:06:29:
e5:cd:64:4e:e8:2e:51:f9:7e:ff:20:1c:c4:83:11:
73:76:03:d5:d9:df:4b:23:45:22:61:76:03:0c:fb:
98:3d:29:dc:44:89:0e:27:a6:e2:d0:33:c3:a5:7e:
40:5e:b1:8d:ab:0f:22:b4:06:b4:dc:f2:48:ee:3a:
7d:7e:13:42:93:1e:4c:32:ca:f6:ed:34:f9:f1:0a:
15:c8:ac:c2:95:49:6c:9c:2d:da:db:77:a4:06:15:
6e:a1:48:d4:35:10:9a:2a:eb:f7:5b:d0:5c:36:d2:
46:bc:59:02:e2:b7:58:53:80:4d:95:2c:86:55:e9:
4b:fc:dc:50:29:38:04:94:91:e1:29:1c:d4:bd:01:
94:03:09:54:2f:94:d7:47:4a:a6:66:70:d8:33:58:
7b:aa:74:01:07:8f:a1:4d:e7:39:d6:e1:c9:fa:d7:
08:ba:81:d4:93:2f:d4:25:6b:87:76:0f:31:0f:a1:
78:3e:73:db:c5:37:5d:83:37:60:94:b2:d8:a4:d3:
e6:1a:f5:13:b9:57:8e:da:a9:25:68:31:c6:b1:86:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E6:D8:8B:87:89:28:5E:6E:1E:28:8E:39:7F:70:3D:7F:33:86:25
X509v3 Authority Key Identifier:
keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/UObYi4eJKF5uHiiOOX9wPX8zhiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.79.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c9:a4:40:76:94:fa:01:36:93:8b:8d:4b:0b:3e:f2:28:5b:
cc:3e:d9:c1:b6:af:14:a2:13:8d:f1:95:32:b3:3f:0c:d8:d4:
da:eb:67:38:c6:e3:92:f3:d0:6c:c3:6c:31:3d:09:c8:81:93:
1d:6c:76:5b:c1:a5:8b:bb:9e:b1:47:0f:b7:49:a3:86:14:d6:
1a:ae:65:84:da:d6:ca:6f:7b:82:a1:2f:6a:17:af:85:d3:5d:
86:1c:b2:84:40:9b:cb:fa:ae:35:c3:d1:25:c6:75:06:3a:35:
6d:e1:2a:68:9f:19:27:f0:9c:b4:20:36:8d:ec:6a:96:a4:ed:
ba:b2:87:33:60:cd:18:64:e5:ef:34:92:29:14:c9:d0:2e:b8:
33:ca:31:cf:5f:5e:56:7e:ee:71:3c:59:a0:45:8d:54:43:49:
48:dc:3d:71:58:c6:c6:2f:ec:0b:d3:0c:34:c2:87:f5:84:f4:
c5:a7:2f:90:f7:cd:c0:7a:40:79:a7:bb:78:99:a0:1d:5c:24:
e2:a6:44:02:07:28:7f:ac:9c:dc:f6:b2:70:68:c5:29:48:4f:
a0:35:38:80:99:21:cd:2b:ee:0c:5a:a0:6e:cd:8e:4a:7a:5d:
25:8b:9a:24:31:3a:f4:7a:e3:3a:79:f3:61:6a:86:9b:9a:1e:
a9:67:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:43 2024 by rpki-client on console-ams.rpki-client.org