Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/LTEHLjaICTTEAEkgE5eHbSJT2UE.roa
File: LTEHLjaICTTEAEkgE5eHbSJT2UE.roa (raw, json)
Hash identifier: xCcf7VS4Kv/tjhB5RbR8j2b3/8u4SgTZ2KlM7eVVyRU=
Subject key identifier: 2D:31:07:2E:36:88:09:34:C4:00:49:20:13:97:87:6D:22:53:D9:41
Certificate issuer: /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Certificate serial: 01856FD4FDA4ACB3B6DF637BE5DA4E96337C
Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/LTEHLjaICTTEAEkgE5eHbSJT2UE.roa
Signing time: Mon 02 Jan 2023 00:15:07 +0000
ROA not before: Mon 02 Jan 2023 00:15:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212523
IP address blocks: 5.133.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:fd:a4:ac:b3:b6:df:63:7b:e5:da:4e:96:33:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Validity
Not Before: Jan 2 00:15:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d31072e36880934c40049201397876d2253d941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:35:cb:a1:0f:14:c9:83:94:c7:41:40:a2:
85:8a:f5:1c:fc:94:be:9c:8c:b8:62:6e:48:d9:e1:
f6:84:1a:c5:d6:b8:ef:fa:9d:49:23:4b:af:7b:1c:
be:c6:b5:2f:61:6a:a9:d0:d0:5e:34:ba:40:8f:fa:
4f:a8:1d:8f:b6:d9:e5:91:33:55:0d:65:ce:6a:43:
e4:8c:8b:d6:bd:1e:70:fc:da:5e:ed:70:60:0e:07:
e9:44:ca:d8:a7:f5:82:1a:45:6b:bf:6a:80:d9:0e:
2c:53:d8:6b:be:8b:56:29:33:9f:ee:e8:0f:65:5f:
44:9a:86:80:63:d6:b2:4c:00:5c:b5:54:a9:82:4c:
d1:df:bf:68:13:fb:f8:39:dd:66:ac:fe:a1:75:24:
0b:63:42:4a:01:8a:a9:05:c3:d2:f9:da:fe:ad:b5:
be:c6:ea:e1:80:3f:1e:e0:d3:5e:3f:a7:cb:e2:7d:
92:c2:4e:10:63:0e:06:19:98:46:b8:22:a8:3f:6b:
c3:ba:74:cd:b2:2b:d1:af:5a:63:24:54:9c:c8:f2:
0d:2d:98:13:11:56:e2:fd:1f:f3:94:59:14:1d:b9:
bf:92:9e:db:02:61:2e:9c:13:7b:5d:27:38:25:3e:
72:d2:50:d8:0c:f0:83:6b:45:95:01:1a:f0:fe:48:
a3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:31:07:2E:36:88:09:34:C4:00:49:20:13:97:87:6D:22:53:D9:41
X509v3 Authority Key Identifier:
keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/LTEHLjaICTTEAEkgE5eHbSJT2UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.115.0/24
Signature Algorithm: sha256WithRSAEncryption
80:23:d1:c1:f2:e9:65:b0:1c:22:b2:11:b6:37:4f:8c:f8:eb:
8b:fc:47:e8:af:04:4d:54:86:2d:cf:ed:73:cd:f4:39:de:08:
0f:11:f3:0c:0c:7d:68:ed:a6:71:66:00:68:cc:4a:27:92:a6:
f2:0f:14:b1:40:c7:4a:5b:7a:34:35:68:7a:1d:67:f8:af:d9:
e1:6c:56:0c:b2:3e:c7:17:d1:59:7a:8f:c8:37:cb:9b:6d:c6:
3c:02:32:c4:23:bd:1e:4a:92:68:3e:db:db:b0:43:1c:20:5c:
47:29:77:ab:95:8f:a1:b7:a2:60:d1:ea:1d:cc:ee:f5:ca:2b:
b2:ce:f0:3f:46:38:7a:c1:46:c2:71:3e:fb:57:68:3e:58:27:
a2:8a:4d:ef:55:99:32:56:8f:3f:36:9f:bf:a6:2c:54:46:c0:
1d:e3:89:bb:64:08:3c:0b:1a:61:22:f2:be:21:a4:6f:22:a0:
ad:4e:c6:2d:55:aa:57:16:e9:1e:8b:47:77:a1:1d:c1:d5:70:
20:44:95:00:3e:00:9f:78:ba:00:72:4e:01:df:a7:ec:38:1a:
e0:d8:6a:27:34:31:26:76:e5:b0:63:4f:74:fb:5c:67:32:e6:
d8:95:7b:9c:69:ef:95:23:4f:4f:c3:8d:07:28:58:3b:62:6b:
58:e0:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:21 2024 by rpki-client on console-fra.rpki-client.org