Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/N1EpSQJ-99Kf64frqJZJ8D2ZDoc.roa
File: N1EpSQJ-99Kf64frqJZJ8D2ZDoc.roa (raw, json)
Hash identifier: B/efatyWdhLF8OjVlHbgpUVHlrqogMiYqJoM5GhIysI=
Subject key identifier: 37:51:29:49:02:7E:F7:D2:9F:EB:87:EB:A8:96:49:F0:3D:99:0E:87
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 018A83485D4682953CB09A2872FA640C3994
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/N1EpSQJ-99Kf64frqJZJ8D2ZDoc.roa
Signing time: Mon 11 Sep 2023 08:07:52 +0000
ROA not before: Mon 11 Sep 2023 08:07:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42705
IP address blocks: 5.11.23.0/24 maxlen: 24
5.11.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:48:5d:46:82:95:3c:b0:9a:28:72:fa:64:0c:39:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Sep 11 08:07:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37512949027ef7d29feb87eba89649f03d990e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2f:c2:69:65:99:9a:15:74:e2:d7:2f:37:07:
02:8f:cd:51:33:44:fa:f9:b2:f9:c8:7f:f2:03:6d:
48:3d:cf:1a:00:d4:e5:35:2e:c5:5e:02:6d:c7:5c:
eb:3f:d0:92:9b:9c:2e:4b:10:8f:c9:93:1b:06:f7:
dd:67:45:c3:4b:49:f3:af:85:c3:9d:91:66:82:b6:
fc:c6:e6:58:47:f9:d2:c4:70:ba:cc:ff:4f:6d:b5:
ea:4e:6d:87:71:a3:32:80:b6:56:08:30:07:37:1b:
ce:15:f3:11:3e:3a:16:36:2c:2f:27:bc:38:68:0e:
76:e1:f8:c1:de:5c:12:ef:63:a2:4f:41:1d:31:43:
1e:cb:9c:c1:3e:da:84:95:e8:54:8c:5c:71:9d:1e:
e8:d3:9b:a5:6c:eb:0d:3b:44:6a:93:d4:35:bc:de:
d9:ae:54:18:d6:e3:8f:2a:bd:d3:b1:68:66:8d:6b:
5d:f1:58:1d:72:97:ec:dc:dc:f3:bc:dc:4a:08:ac:
38:bc:65:7c:40:7d:55:eb:99:91:70:c4:71:2c:54:
61:90:c1:d7:71:82:03:61:26:94:9d:d6:b8:00:f6:
41:b0:ba:9e:53:c8:81:ab:bd:b2:1d:78:a4:e9:31:
a4:4e:02:ce:c6:01:4d:2f:f2:4a:21:77:fd:e3:d1:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:51:29:49:02:7E:F7:D2:9F:EB:87:EB:A8:96:49:F0:3D:99:0E:87
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/N1EpSQJ-99Kf64frqJZJ8D2ZDoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.20.0/24
5.11.23.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a7:e3:5b:f7:85:77:a9:ae:21:7f:7e:bd:a7:56:00:9f:46:
01:bc:78:0b:09:df:dc:9e:4c:f2:f0:8e:65:55:24:33:29:31:
ad:f4:49:00:ee:fd:6e:44:2a:f0:c9:9e:d2:1e:bc:f6:db:9a:
84:c8:80:b1:d9:0d:8e:d9:34:15:c5:e0:a2:a0:79:55:36:af:
26:4a:ff:f6:cf:60:0a:01:ae:3b:d8:d9:0e:69:e8:8d:72:d6:
39:26:8c:bb:cd:21:3c:f5:ae:ee:37:df:82:e4:f6:13:79:75:
70:7d:b1:5e:6a:ae:14:87:a4:b8:7a:95:fb:d5:6d:a9:f1:99:
54:9b:86:71:32:25:99:5b:1e:8e:b6:18:9d:db:78:3a:c2:f0:
fb:c8:43:2f:29:9f:d5:06:aa:8c:a6:24:a5:7b:27:ec:ec:d2:
6a:17:38:66:a1:76:5f:ba:3b:33:d7:18:20:be:1b:9d:c8:62:
af:f7:c5:89:e6:61:4f:1e:06:4b:52:ad:e7:99:dd:4e:94:26:
93:3e:37:fd:05:a8:70:03:28:d1:7c:5e:82:1a:a8:5b:47:23:
38:bc:12:ad:7c:9a:ff:d4:6f:ea:f2:d5:6f:04:64:dc:93:03:
26:28:78:7a:74:45:cc:eb:cf:4e:1e:c9:56:cc:5a:a8:4d:a2:
20:5b:19:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 14:18:25 2023 by rpki-client on console-fra.rpki-client.org