Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bW9J4hXaqXEmXTRJdHgwT0mcFLs.roa
File: bW9J4hXaqXEmXTRJdHgwT0mcFLs.roa (raw, json)
Hash identifier: V6j+I/OnFrMCsXzENBphTPC9zVdtXsuY6OUYewf/PrM=
Subject key identifier: 6D:6F:49:E2:15:DA:A9:71:26:5D:34:49:74:78:30:4F:49:9C:14:BB
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B4CAB4913EDD7AE9C856DC6E44A6B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bW9J4hXaqXEmXTRJdHgwT0mcFLs.roa
Signing time: Sun 01 Jan 2023 18:15:00 +0000
ROA not before: Sun 01 Jan 2023 18:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147001
IP address blocks: 5.253.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:4c:ab:49:13:ed:d7:ae:9c:85:6d:c6:e4:4a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d6f49e215daa971265d34497478304f499c14bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:14:41:88:e2:ba:73:0d:07:53:27:b2:4b:b8:
bc:97:3b:af:cc:3b:76:b9:67:c5:bb:1f:ae:07:6a:
de:92:cb:f8:59:3f:e1:fb:dc:d7:8d:48:c6:f0:ae:
95:06:db:73:7e:99:39:07:6a:d2:99:6f:ca:74:74:
96:35:8f:ff:85:c1:6d:32:87:ce:e4:6f:ff:65:6f:
5a:e7:ba:8d:62:c4:eb:3b:75:83:05:18:9f:52:b8:
fe:a7:f0:f7:47:10:14:3d:89:15:8d:6b:ec:c6:59:
57:fe:92:e3:e1:c4:fe:8b:71:40:ec:67:2d:82:f6:
95:08:1c:2c:ea:14:9b:a5:04:15:98:e3:56:39:7c:
ae:f3:8d:27:c7:f4:15:57:70:9d:e1:74:90:46:55:
44:80:39:17:ab:f7:fa:18:fd:7b:04:66:42:56:5c:
7f:e7:e5:8f:38:07:65:97:07:5f:16:dd:4b:d1:01:
3a:d8:bb:1d:cf:f0:df:d7:ad:d2:61:01:9f:8b:c2:
65:e7:95:5b:9c:8b:3e:48:93:54:0a:9c:8a:c1:73:
a0:57:db:76:ca:49:5f:03:5f:9b:43:f4:00:2f:70:
08:12:e9:1d:79:d5:7b:e6:33:cf:11:d9:b1:e0:69:
69:e9:12:ad:af:b1:90:5e:f9:87:37:64:aa:ca:c0:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:49:E2:15:DA:A9:71:26:5D:34:49:74:78:30:4F:49:9C:14:BB
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bW9J4hXaqXEmXTRJdHgwT0mcFLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.36.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:22:02:5f:6b:dc:e3:c1:f8:66:87:63:fb:57:2a:c8:34:21:
ca:06:bd:0e:aa:a6:00:01:76:c7:d5:1f:da:b3:18:c5:d8:68:
8f:fe:fb:6b:77:6d:26:78:ff:b3:a9:2f:56:e7:e5:20:d7:b2:
52:c0:af:04:8e:34:f3:e7:aa:5a:37:54:db:99:aa:2a:69:40:
ca:d6:d2:ac:3a:8d:fe:eb:6f:ac:d4:ba:95:75:57:56:39:0f:
bf:f1:2f:2f:3f:6d:50:19:11:81:2b:a0:a4:03:61:06:d5:d5:
a7:bf:fa:c8:ac:9b:46:d4:ee:27:22:92:cb:1b:db:1e:7d:85:
f0:d3:0c:8c:87:0a:76:27:f1:ea:c0:55:3d:c4:d2:ae:37:ae:
50:00:28:03:bc:20:e9:29:bc:bd:f2:b6:13:a9:f2:15:ad:68:
7d:9f:42:d8:9b:5b:ec:8d:07:01:81:95:1c:cc:c5:90:7f:b3:
93:8b:c2:be:53:0c:3b:cb:89:ab:36:2d:14:2a:84:76:47:87:
a0:78:cd:c0:72:3f:ac:cf:78:74:f5:e1:58:0e:48:e1:3e:b8:
69:f3:3e:b9:67:aa:25:9b:53:1b:27:41:48:e3:fa:8f:6d:49:
39:e9:a7:a9:fc:ea:37:9c:f2:0d:1a:d3:21:d0:39:06:b3:a3:
0e:0e:65:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org