Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/mvmwcWjrYZ4JJmUkrtQD3MZ7Uxo.roa
File: mvmwcWjrYZ4JJmUkrtQD3MZ7Uxo.roa (raw, json)
Hash identifier: Qrih6kpS9c35dSjd6217vdz9XjphFbdNmudXKLuN99c=
Subject key identifier: 9A:F9:B0:71:68:EB:61:9E:09:26:65:24:AE:D4:03:DC:C6:7B:53:1A
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 01856E5428F8D86984B55AF9D1E3CD7A7E95
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/mvmwcWjrYZ4JJmUkrtQD3MZ7Uxo.roa
Signing time: Sun 01 Jan 2023 17:14:47 +0000
ROA not before: Sun 01 Jan 2023 17:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58267
IP address blocks: 5.145.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:54:28:f8:d8:69:84:b5:5a:f9:d1:e3:cd:7a:7e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Jan 1 17:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9af9b07168eb619e09266524aed403dcc67b531a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2b:c8:61:4d:8c:75:1f:3f:2b:06:ae:18:90:
67:b8:49:ec:7e:52:ef:db:81:a7:55:52:7f:1a:9a:
22:50:10:8b:f1:43:ee:a1:21:0f:4c:f8:de:3a:6c:
ed:af:7b:d8:c3:fe:55:db:3b:40:2e:35:db:5a:e6:
4a:15:ab:60:e4:5c:6c:49:d0:0e:7d:4f:a8:ba:71:
8b:a7:88:cd:80:db:85:fa:c5:fb:21:5d:af:ce:1d:
96:c1:2d:97:29:ca:b3:5d:91:db:c4:1b:24:0d:d8:
52:d9:c6:ee:1c:87:bc:b5:16:c5:1f:31:9b:d8:e5:
4e:8b:4d:88:35:b5:e9:08:2a:df:e5:7f:bc:16:85:
df:13:3f:08:30:73:da:5d:b4:bd:d3:5c:5f:27:f6:
7b:c9:50:8a:fc:b7:23:2e:81:50:58:97:d2:5c:33:
fd:1b:59:8c:94:71:9f:0a:dd:69:25:c9:1f:69:09:
58:2a:09:0f:91:e3:c2:f9:f0:90:fd:ca:cd:b2:f2:
51:9b:eb:b8:75:73:9a:3c:79:30:6d:f4:a4:73:6e:
54:d1:71:0e:28:95:59:b1:af:24:a0:95:7d:b4:91:
7c:0b:90:50:65:79:6a:40:c0:d8:73:94:0c:92:63:
d3:ef:ed:b3:54:2e:70:dc:ce:0b:64:93:a8:0d:d3:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F9:B0:71:68:EB:61:9E:09:26:65:24:AE:D4:03:DC:C6:7B:53:1A
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/mvmwcWjrYZ4JJmUkrtQD3MZ7Uxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:9e:3a:7f:79:32:50:77:c5:68:e7:c6:48:cc:35:54:34:dc:
14:5e:b7:fd:76:f8:56:f6:ae:b2:97:40:91:43:70:b4:fd:a9:
36:82:8c:29:e7:e2:b7:f1:08:4e:1d:de:f6:3e:b9:29:e7:26:
d7:3d:53:c9:f2:a2:5a:28:a1:f4:58:11:8a:35:8b:68:90:b8:
1f:c1:2c:c3:49:d7:a5:d9:08:c8:10:70:fc:c2:89:f3:e2:73:
a5:4d:25:12:36:8b:29:9b:8f:e7:d0:e6:d3:2c:44:cf:ef:aa:
36:18:61:8f:90:05:51:b4:11:3f:65:a2:2d:07:19:0d:35:49:
d2:7f:df:95:a9:80:0a:5c:63:2d:b0:d7:e5:ee:1b:f7:60:f3:
c5:0c:8a:30:37:c7:f8:b0:47:9f:1b:85:be:ed:7c:6f:8c:03:
cc:9f:71:70:8c:a4:37:1a:d4:f7:cf:08:c9:5c:96:cc:4a:53:
03:0f:dc:a8:05:ca:80:e1:1f:ea:7b:fd:20:58:96:a8:fc:6e:
c3:1d:78:d9:82:65:43:9e:4e:64:8b:9e:a0:d3:db:c4:d9:ad:
ad:0f:a2:88:5e:2c:49:c1:75:1b:84:d7:6f:a7:27:b9:41:a4:
89:60:63:7a:c2:a3:a0:2a:6b:c3:ce:49:6c:da:88:a2:5b:44:
ba:13:82:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:44 2024 by rpki-client on console-fra.rpki-client.org