Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/5v9_kevLuru-eaS9htdUyKfk0oM.roa
File: 5v9_kevLuru-eaS9htdUyKfk0oM.roa (raw, json)
Hash identifier: FcEEsZllZdEpijQu9g5LENfijm3uMcoSLTuc8dgQI4g=
Subject key identifier: E6:FF:7F:91:EB:CB:BA:BB:BE:79:A4:BD:86:D7:54:C8:A7:E4:D2:83
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01856FF037542242767B93D81A46E38DB886
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/5v9_kevLuru-eaS9htdUyKfk0oM.roa
Signing time: Mon 02 Jan 2023 00:44:51 +0000
ROA not before: Mon 02 Jan 2023 00:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396356
IP address blocks: 194.15.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:37:54:22:42:76:7b:93:d8:1a:46:e3:8d:b8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 2 00:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6ff7f91ebcbbabbbe79a4bd86d754c8a7e4d283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:a9:41:36:9e:06:1f:fc:b9:0c:73:94:36:
f6:f9:07:e9:66:d3:36:3c:df:e6:aa:72:e7:49:f8:
f7:a9:d0:c7:14:6e:7a:5c:8a:78:12:a1:01:28:26:
17:da:79:31:d0:28:c8:9d:db:9d:e2:f1:89:10:bd:
7d:c0:67:0d:62:a1:77:e0:3d:a8:c1:ae:68:16:a8:
65:81:3a:c4:de:53:c7:a7:23:ca:7b:16:c6:d3:e3:
78:2c:af:88:82:92:e2:67:8e:31:54:85:88:36:0d:
12:2d:09:54:f7:1a:ad:21:b4:2a:a4:3c:a7:e0:89:
09:a5:df:78:8c:66:dc:62:d8:82:3f:26:97:ad:00:
68:a9:d5:78:5d:1b:95:35:97:66:ef:79:dc:22:64:
08:b8:8e:38:d0:ca:9b:29:ef:ad:04:64:11:99:35:
8e:a6:de:d5:1a:46:f1:01:24:1a:55:75:ba:f3:cf:
8a:be:94:86:fc:d3:3f:7a:dd:77:8d:16:08:70:88:
b9:70:29:95:14:93:75:97:58:76:23:62:17:ab:01:
cb:ec:69:50:04:9c:90:ab:8b:d0:4d:fd:f0:a3:b0:
22:71:73:f3:c8:6d:a5:27:75:9c:07:fd:66:42:45:
f7:b9:64:e2:64:0e:ee:0e:df:b2:8c:bd:40:74:78:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FF:7F:91:EB:CB:BA:BB:BE:79:A4:BD:86:D7:54:C8:A7:E4:D2:83
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/5v9_kevLuru-eaS9htdUyKfk0oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.32.0/22
Signature Algorithm: sha256WithRSAEncryption
31:4c:be:f9:e3:ec:07:cf:25:3a:da:15:dd:1c:bb:ba:66:b4:
3b:5c:09:5b:52:64:47:01:4c:69:c7:43:11:b8:42:09:98:21:
85:f6:1e:ad:e6:ec:0c:13:42:2e:10:84:eb:62:09:57:b3:5e:
01:8b:8b:20:be:f2:13:63:72:d1:c3:ca:ac:92:1d:24:b2:24:
f0:df:79:c5:00:64:ff:fe:c1:c8:6e:04:d3:20:ee:e2:2b:db:
8e:d1:c7:17:99:ef:00:04:0a:7d:6a:b6:ac:eb:d4:b9:79:1a:
32:a5:13:02:a6:f2:45:76:fa:5a:2b:75:b1:ad:8a:0c:e5:ea:
e5:41:c6:3b:8a:7d:d8:f5:be:d3:ce:45:a1:58:c6:38:1d:29:
58:e8:c5:e4:b2:ef:b2:7c:ce:5d:19:c4:65:db:69:8b:5a:67:
82:ff:c6:57:1b:11:b2:6c:dd:6e:95:a2:c1:eb:d9:cb:95:f2:
6c:3a:87:e1:a2:f2:d7:f7:3b:04:da:1a:f8:ee:d9:81:59:45:
26:1e:19:f1:2a:6d:b0:77:b7:a5:f9:ba:02:20:bd:0c:1f:44:
a1:7c:23:26:40:b1:96:9e:19:3e:b3:49:0f:72:40:ec:46:c0:
af:29:4f:49:3e:f5:07:b1:8f:e1:cb:87:ab:f7:c1:03:30:34:
bd:2c:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org