Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1466d7-d877-47a9-a36a-39d03edc17a4/1/eRlGWJBE4aFVqVLp0do2DqECw2g.roa
File: eRlGWJBE4aFVqVLp0do2DqECw2g.roa (raw, json)
Hash identifier: 3qMgOKsQugZvvitCG9Cj8OmvfYiVlJLdoUMlh0gebQE=
Subject key identifier: 79:19:46:58:90:44:E1:A1:55:A9:52:E9:D1:DA:36:0E:A1:02:C3:68
Certificate issuer: /CN=7efd087431db127c15ce75fdd176d3b6f857d7ec
Certificate serial: 01856FD50E39504C23D07B03C3E9AEE7D55E
Authority key identifier: 7E:FD:08:74:31:DB:12:7C:15:CE:75:FD:D1:76:D3:B6:F8:57:D7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fv0IdDHbEnwVznX90XbTtvhX1-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1466d7-d877-47a9-a36a-39d03edc17a4/1/eRlGWJBE4aFVqVLp0do2DqECw2g.roa
Signing time: Mon 02 Jan 2023 00:15:11 +0000
ROA not before: Mon 02 Jan 2023 00:15:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200356
IP address blocks: 5.42.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:0e:39:50:4c:23:d0:7b:03:c3:e9:ae:e7:d5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7efd087431db127c15ce75fdd176d3b6f857d7ec
Validity
Not Before: Jan 2 00:15:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=791946589044e1a155a952e9d1da360ea102c368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:17:8e:8b:75:81:6e:31:41:4a:1f:45:5e:
9f:15:19:a5:92:28:39:59:fe:cf:0a:0c:11:60:32:
cd:01:5a:4f:a8:20:f9:b3:8c:4c:cb:ef:4c:3e:12:
36:22:75:bb:52:12:34:da:77:09:e1:03:52:22:c1:
18:e0:91:c8:0c:1c:95:0f:55:17:dc:7d:00:17:bb:
a9:00:7c:85:d3:d0:a3:70:fc:f8:49:17:44:35:fa:
9e:91:b7:dc:45:54:1d:f1:49:dc:a2:54:22:12:c4:
10:90:ec:ef:0e:a5:75:eb:ff:fc:63:0f:3c:ae:0b:
c5:0c:e0:e6:f8:9b:9b:42:4b:ea:c6:e2:ee:f6:9a:
9d:c2:b2:f3:dc:e6:23:18:76:3d:23:84:e8:d3:b8:
1e:a7:be:88:94:2a:ae:d9:26:1b:ba:86:c7:06:79:
43:cf:64:32:6a:54:6e:53:b2:c4:ba:ce:11:67:b3:
e5:ae:87:50:1f:89:8f:7f:84:e8:67:29:37:67:5e:
67:6d:f7:59:9e:6c:da:db:dd:c7:d7:71:7a:7f:c7:
cb:93:f0:45:cc:4d:20:02:36:e5:95:0f:3b:ef:54:
20:02:df:be:dd:15:c8:fc:03:e0:f6:19:76:d2:59:
16:6b:e6:81:e4:c5:ca:f4:11:62:28:64:b7:36:2d:
4e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:46:58:90:44:E1:A1:55:A9:52:E9:D1:DA:36:0E:A1:02:C3:68
X509v3 Authority Key Identifier:
keyid:7E:FD:08:74:31:DB:12:7C:15:CE:75:FD:D1:76:D3:B6:F8:57:D7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fv0IdDHbEnwVznX90XbTtvhX1-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1466d7-d877-47a9-a36a-39d03edc17a4/1/eRlGWJBE4aFVqVLp0do2DqECw2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1466d7-d877-47a9-a36a-39d03edc17a4/1/fv0IdDHbEnwVznX90XbTtvhX1-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.197.0/24
Signature Algorithm: sha256WithRSAEncryption
94:99:f7:12:93:77:7b:88:b6:39:2a:71:93:8c:5d:c2:57:78:
df:fa:31:f6:8d:ee:29:e3:ec:c1:6f:a2:ec:8c:a2:71:bf:7a:
d1:b2:ef:b8:e9:d1:26:ea:37:bd:55:06:6d:da:cf:60:10:08:
22:c7:9a:47:06:d2:1f:07:ec:8a:dd:e9:ad:1d:6a:17:34:47:
ef:75:71:79:c5:46:b9:3e:1e:23:45:f6:2c:a8:01:3a:30:64:
aa:e7:64:75:e5:f8:a4:46:a1:2f:ad:b4:5d:02:05:28:95:cd:
1d:dc:75:df:93:74:49:2f:ae:36:d5:31:e6:8e:52:09:10:13:
58:ae:fb:5a:81:92:09:1e:1c:2a:12:6a:f3:db:a6:e2:6c:c2:
7d:bf:c4:df:7d:62:0b:ff:fa:46:29:f3:fd:12:64:72:d7:4c:
7e:80:dc:2f:e0:c4:d3:1f:74:1f:2e:20:a8:93:e4:11:4b:ac:
4e:ed:2e:31:3a:6d:ec:a1:9a:7c:d2:3c:99:17:c5:2e:f5:55:
87:e3:3f:be:62:ad:66:e3:b7:05:53:e2:29:f5:f4:d8:ce:c6:
8b:b4:3f:30:9c:39:55:51:2c:3d:bf:62:3a:3b:06:5c:27:65:
ff:65:de:12:0c:a6:b1:7a:ab:f7:00:09:53:15:00:28:39:31:
a0:a5:00:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:56 2024 by rpki-client on console-ams.rpki-client.org