Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/5Uzbh7cxQYwjwAhzwEfZURoWkMA.roa
File: 5Uzbh7cxQYwjwAhzwEfZURoWkMA.roa (raw, json)
Hash identifier: vYeaIjLbfzDpiiHblTvO/xbg86J0TA8wVmVyA/kY8Ec=
Subject key identifier: E5:4C:DB:87:B7:31:41:8C:23:C0:08:73:C0:47:D9:51:1A:16:90:C0
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 01856FDDC7A07D77E215A3A5A2090D9A3355
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/5Uzbh7cxQYwjwAhzwEfZURoWkMA.roa
Signing time: Mon 02 Jan 2023 00:24:43 +0000
ROA not before: Mon 02 Jan 2023 00:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200751
IP address blocks: 80.247.92.0/23 maxlen: 23
80.247.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:c7:a0:7d:77:e2:15:a3:a5:a2:09:0d:9a:33:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jan 2 00:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e54cdb87b731418c23c00873c047d9511a1690c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:52:d7:a8:45:5c:6a:3b:89:8e:c2:3b:ac:
9a:27:5e:8b:25:5a:62:c0:1b:1e:10:49:6b:84:39:
52:c8:92:f8:77:37:6f:3a:ec:7d:5d:e6:a0:d3:28:
05:bb:79:35:74:1e:39:a9:11:fb:a3:9d:b7:45:1b:
89:0d:20:77:e2:83:96:97:b9:8e:4c:a7:c3:c1:30:
a8:fa:8f:fd:fb:8d:70:ed:90:c5:70:f9:1a:81:d0:
ba:46:f5:f6:bc:eb:58:85:5a:1b:09:60:01:7f:aa:
22:23:74:f0:2e:c9:b5:c1:e1:b6:83:f5:52:61:cd:
c3:47:67:4c:dd:05:cc:03:87:30:54:d0:1b:15:06:
29:94:74:e7:05:59:a9:b8:c5:ed:fb:1f:69:28:22:
57:6c:f1:f0:4f:4b:c6:79:64:d5:80:4f:1f:98:a9:
38:03:9f:67:88:6a:72:56:ee:c7:27:7a:13:35:e5:
2c:13:42:79:62:4e:8d:0b:cc:c3:75:32:bb:34:d6:
22:a0:80:9a:7c:d4:c0:94:4f:be:a1:27:2a:65:41:
30:ee:a3:f5:32:50:b8:39:8e:47:58:b0:61:1a:af:
51:8e:17:33:2c:9e:cf:de:e4:da:85:1d:24:c2:5c:
fc:52:58:a9:da:10:8c:3d:a4:50:38:7f:bf:4f:c4:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4C:DB:87:B7:31:41:8C:23:C0:08:73:C0:47:D9:51:1A:16:90:C0
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/5Uzbh7cxQYwjwAhzwEfZURoWkMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.92.0-80.247.94.255
Signature Algorithm: sha256WithRSAEncryption
99:cf:3e:ca:ef:6f:a8:c2:3a:25:9b:79:d1:13:d9:47:cc:2f:
f8:ce:c7:21:50:6f:4f:be:26:f0:35:40:63:1f:b9:ed:d8:7c:
b8:d2:25:fa:92:be:5f:49:d0:25:f9:5a:f3:77:cd:67:01:c4:
98:aa:71:4c:57:ad:97:77:11:17:f5:d4:08:83:02:48:87:b6:
d6:41:24:69:60:0b:40:77:0f:1a:4f:af:46:d8:7e:29:38:2a:
45:43:1c:85:77:73:00:39:7d:ba:0d:89:f3:49:b8:e2:77:78:
1d:1b:53:38:fa:6a:1c:d9:ee:d0:97:c1:14:66:6e:0e:6a:2a:
2a:c1:cd:ed:6b:cb:cd:af:3d:8e:1a:5c:34:c9:07:7c:d1:9b:
e4:2e:7c:ac:af:c0:f1:07:61:32:d8:fd:ba:73:1c:11:f7:fd:
68:f8:5a:0d:d3:7a:a1:2d:b3:b9:b2:ee:f9:80:5f:88:09:41:
62:05:a7:df:fe:71:e3:80:00:82:2e:9f:40:47:54:b8:da:fe:
82:de:38:2d:4d:47:bc:1f:4f:22:a3:a2:84:bd:68:d3:0a:94:
5a:8f:ed:14:79:a0:b7:e2:a6:7a:85:58:fb:56:69:ea:be:21:
09:4e:6f:12:7f:53:97:05:eb:6a:7b:b2:4a:47:e3:20:c9:29:
a8:96:07:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-ams.rpki-client.org