Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_s8qlfeM9VNtjsrifgpiQhrqmuA.roa
File: _s8qlfeM9VNtjsrifgpiQhrqmuA.roa (raw, json)
Hash identifier: sa7lrdxMZSqs/xtpAJtKH66qPgEnGYlwJPBwl/ULUAo=
Subject key identifier: FE:CF:2A:95:F7:8C:F5:53:6D:8E:CA:E2:7E:0A:62:42:1A:EA:9A:E0
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0187C293888BDCE58DB22D66EC75E1D4F4C4
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_s8qlfeM9VNtjsrifgpiQhrqmuA.roa
Signing time: Thu 27 Apr 2023 11:57:41 +0000
ROA not before: Thu 27 Apr 2023 11:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196695
IP address blocks: 5.183.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:93:88:8b:dc:e5:8d:b2:2d:66:ec:75:e1:d4:f4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 27 11:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fecf2a95f78cf5536d8ecae27e0a62421aea9ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0f:fa:0a:a2:ae:63:b6:4c:03:3a:da:5d:b1:
77:3e:0c:ce:b6:35:98:60:ff:9b:5c:18:1c:aa:d0:
76:a9:63:58:59:7d:20:4a:1b:36:81:be:fd:66:4a:
0e:d8:1d:d9:5f:3c:d5:51:62:b5:4b:f4:3b:87:1c:
15:67:9b:9c:4a:77:12:07:31:e0:19:57:e5:a6:6b:
8c:31:0d:f6:e4:f7:83:0f:17:dc:b4:ac:54:c7:e7:
5f:0a:b5:b3:e5:5c:75:6a:ae:14:b0:32:aa:24:7e:
53:f4:8a:60:cd:de:d0:3b:c4:be:4f:aa:9d:d2:b3:
21:03:15:54:1f:70:1a:e5:cd:c8:5d:c5:07:a8:c6:
d8:26:d7:c1:53:a2:24:c3:92:50:fc:fe:43:91:fb:
83:bf:96:cb:cb:60:0d:34:5a:ae:ed:c9:11:c9:fa:
e1:21:38:b4:9a:9f:6e:63:eb:cc:15:3a:9e:25:dc:
d9:85:7c:bb:af:25:d8:4e:92:fe:9a:cd:1a:70:b8:
23:8b:f4:6d:89:26:57:52:2e:18:b0:ed:39:25:3c:
cc:d8:24:a0:b2:e5:79:72:f0:30:94:ad:ca:dc:5d:
c8:1c:60:d4:24:32:8c:33:6d:09:a5:90:4d:d1:49:
70:7a:c2:9e:d1:6b:ec:03:1f:15:ec:a0:8f:f2:63:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CF:2A:95:F7:8C:F5:53:6D:8E:CA:E2:7E:0A:62:42:1A:EA:9A:E0
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_s8qlfeM9VNtjsrifgpiQhrqmuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.154.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b1:15:03:a1:4e:8c:33:eb:3d:72:47:37:95:78:34:1e:05:
9f:5c:a8:b6:d4:8a:ef:73:90:de:b8:32:dc:22:09:13:8e:e0:
b2:23:9d:70:e6:3d:9a:42:09:90:97:78:f9:d2:cb:eb:a4:e5:
ed:b1:91:1e:f5:e0:99:8d:f2:14:71:99:83:45:c0:55:02:d3:
b6:95:6d:d8:a0:b0:32:59:8f:57:75:de:38:14:93:d6:2b:ad:
51:a5:96:6b:8a:0f:d8:68:81:60:f9:95:7b:61:3d:9b:81:30:
89:fd:87:02:cf:5a:d3:62:60:14:bd:db:67:3c:6e:1e:38:32:
c7:d0:08:77:09:36:5d:2e:51:a4:38:e1:2a:c5:80:50:9b:61:
0c:95:56:df:86:9a:6c:82:92:63:8e:30:cb:6f:d2:a9:93:01:
28:6d:67:95:b8:0c:44:88:11:f3:50:d4:cf:15:b0:f3:30:c1:
38:de:97:1d:ac:1d:73:0f:64:4d:78:fa:2c:c5:0d:f7:26:ed:
cc:3c:16:87:70:d0:41:1c:47:82:b7:79:c9:d7:92:c6:d2:3b:
3b:03:6d:d0:a4:99:a1:d5:f2:b6:ea:1f:e9:fd:bb:4d:80:06:
40:57:5d:4b:4c:58:23:5d:e6:3d:6b:8f:e1:f9:02:98:a4:99:
0d:ec:67:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:58 2024 by rpki-client on console-fra.rpki-client.org