Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LM4Bfcvuom0MtugtEdRT3PcyJqw.roa
File: LM4Bfcvuom0MtugtEdRT3PcyJqw.roa (raw, json)
Hash identifier: c6zIKOvc8+Tnzt/nNpPY5VoiaZUkW5DDT7GmrwRRVuk=
Subject key identifier: 2C:CE:01:7D:CB:EE:A2:6D:0C:B6:E8:2D:11:D4:53:DC:F7:32:26:AC
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0188D235D9F10FF8566DA6929D73CF434CC7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LM4Bfcvuom0MtugtEdRT3PcyJqw.roa
Signing time: Mon 19 Jun 2023 05:52:04 +0000
ROA not before: Mon 19 Jun 2023 05:52:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.253.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:35:d9:f1:0f:f8:56:6d:a6:92:9d:73:cf:43:4c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 19 05:52:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cce017dcbeea26d0cb6e82d11d453dcf73226ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:b6:80:b6:28:44:5a:8b:86:12:d9:4c:94:
43:1a:4c:42:f9:b1:cd:3f:56:9a:b4:09:54:0a:1c:
1f:45:a5:ee:57:26:35:95:ca:b1:ed:f1:6d:b2:47:
ee:94:ec:f6:c6:af:81:a9:c0:9d:a4:96:82:b7:b0:
cd:a0:a8:50:37:2c:21:e8:7c:8c:89:6b:ec:87:ec:
81:92:fb:90:91:94:57:28:ab:66:27:14:03:60:ea:
6a:84:48:74:b3:3c:fd:33:df:b7:74:6b:ec:52:fc:
c5:37:24:bd:68:1a:4c:0a:f2:bf:1a:89:68:3f:93:
32:80:77:d0:5d:8b:8f:bb:b5:5c:6c:cf:b6:18:ba:
06:0c:c4:c5:50:bd:f1:28:a6:73:4c:e0:96:98:d5:
0d:5e:51:4a:e9:92:f7:cf:56:e1:ae:98:7d:4d:8e:
6d:67:c0:b9:9a:48:a8:fc:dd:bc:4c:98:61:a4:40:
6a:d8:77:6f:52:7d:41:6b:a0:a7:25:5f:96:b8:46:
72:65:03:92:62:dd:04:2d:b0:60:df:1a:a1:aa:d1:
9a:8f:2e:a7:74:b6:fa:0e:cd:54:cc:63:d3:6d:ad:
ae:6c:d8:4e:9a:7c:96:b3:f5:c5:48:85:a6:70:26:
c2:f7:00:d8:df:02:d4:8c:f4:c2:a2:94:33:7a:18:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CE:01:7D:CB:EE:A2:6D:0C:B6:E8:2D:11:D4:53:DC:F7:32:26:AC
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LM4Bfcvuom0MtugtEdRT3PcyJqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cd:9f:7c:25:e4:74:67:6f:ab:de:8d:28:94:ec:f0:1c:aa:
6b:02:43:35:f9:1f:9f:16:0f:12:37:d8:9a:64:76:77:e6:00:
19:b0:8b:e0:f3:1c:23:38:01:ac:7d:03:72:de:a2:b1:96:86:
99:fa:3c:ec:db:b9:81:32:01:57:27:9a:10:21:69:47:01:10:
26:56:eb:2e:0c:39:50:31:10:1f:dd:fa:3b:af:dd:73:c9:95:
d5:1c:3f:05:f9:cb:25:a1:e3:25:e5:89:52:85:63:28:0f:1a:
28:62:34:89:c4:39:ce:56:cd:c7:ee:25:61:0f:10:e3:37:86:
8c:22:57:1e:3e:69:3a:b6:fd:5d:83:00:49:5e:36:8d:0c:72:
04:ec:40:85:e2:c8:58:cc:9f:f1:10:0e:de:5e:fc:ba:e3:f9:
e1:8e:a0:47:a3:2f:68:35:ce:5a:ec:31:a2:56:9f:ee:50:5a:
31:71:dc:ab:9b:64:67:7f:d3:fa:f5:2b:62:41:f8:6e:f3:2d:
af:75:1f:50:08:a0:e1:12:fb:c5:ba:92:1c:c4:bb:66:da:ed:
9f:47:b8:e5:ba:b1:63:9a:9e:09:3c:89:65:f0:aa:63:da:c6:
62:52:69:a8:9b:63:66:b2:e4:b2:a9:1a:77:10:b2:f9:7d:06:
d8:c9:63:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org