Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vck9Wt0kn6KVxV9rwsNMlxNE3q4.roa
File: vck9Wt0kn6KVxV9rwsNMlxNE3q4.roa (raw, json)
Hash identifier: Jcv5tVpbyYn3SuBQyX6b8MjX8cVT3PSBzh7JO/+zOlc=
Subject key identifier: BD:C9:3D:5A:DD:24:9F:A2:95:C5:5F:6B:C2:C3:4C:97:13:44:DE:AE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01879DE4F9937E3844498158955D6AF16306
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vck9Wt0kn6KVxV9rwsNMlxNE3q4.roa
Signing time: Thu 20 Apr 2023 09:00:41 +0000
ROA not before: Thu 20 Apr 2023 09:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.253.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:e4:f9:93:7e:38:44:49:81:58:95:5d:6a:f1:63:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 20 09:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdc93d5add249fa295c55f6bc2c34c971344deae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:70:66:77:4d:c5:3b:05:82:32:ac:4b:61:
ea:25:fe:cf:87:ea:13:79:70:07:08:5e:3e:49:dc:
92:8f:9c:56:75:7b:0d:43:a1:c3:d9:32:de:47:01:
77:7f:7b:32:a1:28:66:69:0e:2f:44:d8:61:b3:03:
b5:96:54:0c:90:5c:f8:79:67:78:6e:a7:e1:4e:50:
b8:2c:4a:eb:82:d6:77:7e:37:2a:b4:a7:ac:7e:1e:
0b:3d:44:fd:69:b2:4e:6c:97:81:f1:76:3e:59:08:
44:86:27:10:38:05:52:f4:94:84:a9:46:72:51:75:
43:d6:f0:9a:50:a6:1c:08:ba:93:c4:21:cb:7f:11:
28:2f:e2:94:3f:1e:e9:54:bc:ce:92:5f:00:ca:93:
fd:0b:58:5f:66:c4:0f:ff:04:fd:3b:58:e2:0b:4f:
7c:de:ca:8e:dd:22:18:17:1e:5c:20:02:35:a1:8a:
44:a6:31:c4:73:f0:0f:9f:8b:dc:a7:4d:af:7a:95:
1a:8b:a6:c6:b3:7e:11:37:dc:5e:23:03:3d:33:d6:
48:fe:35:7f:09:0b:fa:8d:15:d5:6e:59:50:c1:11:
17:0e:02:de:95:a6:b2:f5:ca:a1:1b:db:b8:09:d6:
d2:1b:2b:04:49:95:6e:d5:c3:ac:72:03:cd:8f:6f:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C9:3D:5A:DD:24:9F:A2:95:C5:5F:6B:C2:C3:4C:97:13:44:DE:AE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vck9Wt0kn6KVxV9rwsNMlxNE3q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f1:57:c8:57:4a:19:e3:4e:05:f4:48:96:e7:29:b6:c2:95:
60:94:cb:9f:4f:b1:e0:96:60:d1:69:aa:70:ac:7a:88:0d:ff:
75:4f:6d:dc:ad:36:b9:33:85:db:2e:db:cb:24:1d:9f:23:82:
e9:d5:7f:67:07:4e:da:88:fe:84:54:92:2d:52:08:7f:58:71:
4f:4f:17:6b:93:b3:6d:de:2d:b7:d7:80:c5:bd:26:f7:d9:b2:
1b:a9:7e:a8:cc:7e:47:d8:88:ed:a4:6c:6a:21:48:a3:13:0e:
c6:62:af:95:df:23:3d:81:26:f8:18:af:00:a7:13:6f:47:d1:
e0:03:9f:c5:e8:c7:dd:c9:33:b5:64:4f:e1:e4:93:bf:5a:cd:
93:14:28:82:88:dc:3d:37:f8:97:7e:f8:70:61:cb:f9:7d:1d:
5a:54:3d:07:2b:a2:b7:f5:18:52:8e:80:f9:38:09:ce:19:48:
be:ca:66:f2:56:2a:fb:99:c3:e4:fe:a1:12:0a:8e:1c:04:cc:
d0:02:7d:83:f3:90:de:64:a3:7d:d5:e6:7a:bf:77:40:ef:ff:
78:c4:9b:a4:61:14:c3:ee:0a:a6:48:b0:54:b4:52:72:f5:d2:
f2:80:56:1c:2d:59:48:5e:e2:be:03:03:ec:5b:e2:f0:a7:af:
7a:de:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org