Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/SE88kQYyTqaUyE8MlDZVXaZOsKE.roa
File: SE88kQYyTqaUyE8MlDZVXaZOsKE.roa (raw, json)
Hash identifier: ZKTKAAZrE5+rfkG6HpnxuHn648OPf8BG9s/dWeNcwmw=
Subject key identifier: 48:4F:3C:91:06:32:4E:A6:94:C8:4F:0C:94:36:55:5D:A6:4E:B0:A1
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 018B8B940719FFCBC84D49343E9A2E566927
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/SE88kQYyTqaUyE8MlDZVXaZOsKE.roa
Signing time: Wed 01 Nov 2023 15:50:16 +0000
ROA not before: Wed 01 Nov 2023 15:50:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205516
IP address blocks: 5.35.81.0/24 maxlen: 24
5.35.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:94:07:19:ff:cb:c8:4d:49:34:3e:9a:2e:56:69:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Nov 1 15:50:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=484f3c9106324ea694c84f0c9436555da64eb0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:2e:e7:ad:3b:65:4a:2d:0f:4c:85:7d:35:
80:8c:d5:f8:b8:1a:eb:bb:b5:63:44:a5:3e:36:43:
d2:32:ba:f8:89:ab:35:b3:89:64:82:fd:82:f2:51:
ca:f9:79:26:b4:51:4c:13:46:e8:5a:32:35:28:62:
45:58:3a:d8:4a:18:93:3b:ef:0d:90:b2:68:ff:2f:
fb:a7:8c:8b:85:09:a0:cd:e6:4f:43:be:30:1e:20:
31:52:8b:a1:9e:af:b1:9e:ab:cc:60:19:e3:2c:b6:
99:8e:8f:20:fa:49:df:f9:7b:ef:c5:87:39:75:5d:
c6:6a:db:ee:d3:19:d5:a8:a8:71:68:b2:4c:a7:06:
15:c3:0d:67:59:e3:47:86:8a:66:0e:45:1e:6c:99:
35:b3:6c:13:62:54:d5:41:36:1a:50:22:09:c5:fb:
72:ff:07:55:5e:ca:5b:ab:2b:b1:63:33:ac:93:a5:
fc:55:4a:74:d3:ca:24:04:bb:04:be:7e:54:8f:6f:
4b:e3:b0:b6:b1:b6:4e:d3:ab:27:65:3a:0b:05:23:
7a:36:44:89:d7:2b:6a:d3:a8:c5:01:d3:39:5c:a1:
97:c8:2d:cd:a2:c3:c0:a8:94:d3:66:cc:5c:17:88:
3c:a3:5f:65:db:ea:aa:5c:c6:e3:ef:47:18:cc:26:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:3C:91:06:32:4E:A6:94:C8:4F:0C:94:36:55:5D:A6:4E:B0:A1
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/SE88kQYyTqaUyE8MlDZVXaZOsKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/23
Signature Algorithm: sha256WithRSAEncryption
58:77:08:a5:f5:85:04:18:e7:b1:b9:ec:16:65:c5:b8:95:7f:
1a:7d:be:f2:ad:90:1f:e5:be:52:93:bc:b5:07:20:22:de:81:
a6:69:36:fd:e1:d2:0c:91:21:71:5b:1b:78:82:95:b8:e0:73:
dd:76:d9:ab:4d:bc:c9:7a:a8:6f:4c:79:f7:5d:15:92:1a:1a:
3c:3e:87:3d:47:25:8b:e4:92:10:27:7f:0a:17:e7:f4:cc:9b:
9b:51:52:10:bf:23:0b:b0:02:45:c2:81:ac:5c:b0:bf:ec:fa:
34:8b:4b:3f:6c:28:77:01:b5:31:07:72:5c:9c:a8:ab:d3:9b:
fb:42:38:1c:89:ed:d1:d4:6a:47:23:07:1f:85:71:a6:3a:a2:
1f:b4:d2:89:e9:1d:8c:eb:36:76:c2:43:20:07:cd:c6:0e:29:
79:f3:47:18:cf:07:7c:a5:88:ad:50:aa:26:33:89:fd:d8:f1:
d3:c9:7f:2e:bc:28:cf:ee:ac:aa:66:05:73:cc:2e:1a:03:f3:
6b:9e:f4:90:98:8d:a4:50:dc:fc:0e:f4:84:e5:8a:db:c0:ca:
bb:73:b2:41:d3:5e:69:0e:70:c2:d9:91:d3:90:ac:ac:78:4c:
1f:9a:22:ad:d1:81:08:c3:54:0c:d8:a1:1c:93:a1:d2:2d:f2:
39:89:23:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:34 2024 by rpki-client on console-fra.rpki-client.org