Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/w7_p1aD9aLiHHhYsQbJ3WCOZIoA.roa
File: w7_p1aD9aLiHHhYsQbJ3WCOZIoA.roa (raw, json)
Hash identifier: 4tjpeMiKIflw7XM5rcF+FT7kazr7omxBiJaR8Qs7ezI=
Subject key identifier: C3:BF:E9:D5:A0:FD:68:B8:87:1E:16:2C:41:B2:77:58:23:99:22:80
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018570FBB60B230E8DA5D2AA2E4165D05999
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/w7_p1aD9aLiHHhYsQbJ3WCOZIoA.roa
Signing time: Mon 02 Jan 2023 05:37:02 +0000
ROA not before: Mon 02 Jan 2023 05:37:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16125
IP address blocks: 5.1.82.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:b6:0b:23:0e:8d:a5:d2:aa:2e:41:65:d0:59:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 2 05:37:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3bfe9d5a0fd68b8871e162c41b2775823992280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f3:95:a7:97:f2:7c:5b:7e:ea:07:3f:7c:a9:
95:e0:18:49:a9:7e:c0:33:2e:30:3e:76:a3:c1:68:
87:66:f0:a7:70:cc:e0:8b:d1:86:e1:87:2c:1f:61:
b9:ae:25:88:e7:7a:61:a0:8c:ec:4d:ad:5c:09:ce:
b4:87:92:70:32:1b:ce:44:39:a4:41:e5:8c:90:30:
fd:b5:af:b3:a5:f2:3c:22:48:de:c8:4f:94:ab:c7:
70:96:26:94:00:42:fa:7b:8b:17:92:bc:a9:36:50:
b6:8d:cf:d5:b0:5e:20:44:ec:1b:e2:e7:05:e8:82:
3c:a0:2f:6f:2f:46:34:67:4c:43:07:7d:f5:ae:34:
6e:75:07:36:89:a0:6e:a4:11:63:61:a5:a9:4a:08:
c1:d4:62:ff:12:5c:de:fe:cd:e8:d2:b8:df:99:1b:
8d:de:87:a0:b2:76:c4:ab:d8:8f:48:93:a9:29:13:
28:56:ee:b4:a7:1e:aa:be:29:7a:58:c4:57:22:9a:
fd:66:43:fb:38:34:b4:8d:4c:46:4d:6d:da:53:19:
2d:8f:2e:23:a8:26:a5:ba:0f:04:a7:e2:e5:0a:be:
0d:a7:d6:fe:c4:3d:4f:6d:a4:4f:75:c8:fa:0a:f2:
a0:bb:a8:51:ff:de:0f:76:32:50:4d:21:48:d3:34:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BF:E9:D5:A0:FD:68:B8:87:1E:16:2C:41:B2:77:58:23:99:22:80
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/w7_p1aD9aLiHHhYsQbJ3WCOZIoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.82.0/24
Signature Algorithm: sha256WithRSAEncryption
81:38:5b:b3:f0:1d:40:74:78:47:1e:0d:5b:1f:f4:e3:67:e9:
87:85:d0:2f:78:d3:38:31:43:b5:b1:6a:68:5a:7e:72:99:ac:
c6:50:03:40:38:5c:d0:a1:e6:bc:a1:d4:b7:ce:d6:19:af:d6:
f5:4c:5c:58:81:35:81:13:84:32:53:ac:26:31:9e:bf:b9:0e:
46:71:16:ba:15:d1:00:c9:46:67:d9:0f:d1:e7:2f:a2:c7:36:
19:3e:b4:26:2d:68:55:09:3c:65:7f:b4:04:6f:21:9f:f6:54:
a4:a6:33:a7:a6:86:87:f1:ce:fd:4a:0f:6e:70:24:09:b3:42:
32:35:c6:7a:b0:b6:a9:74:c5:11:23:3f:f2:9a:08:03:f7:d0:
8c:0a:4d:33:88:ff:c3:6c:64:9b:58:24:58:16:bc:62:53:46:
69:f6:cb:96:a7:83:a0:83:16:30:47:15:f8:fb:95:0b:f6:e3:
cb:d0:d1:cc:fc:b1:0f:bc:cc:30:f9:77:b3:83:9a:1d:9d:03:
8d:e3:ee:92:04:a4:c0:cc:6a:c4:f5:6e:8f:24:97:fc:98:86:
df:f4:af:78:97:9b:44:46:6c:38:99:f1:5a:6c:50:69:66:b4:
5c:d9:ca:69:10:dc:c7:49:92:31:52:66:34:5d:b0:98:72:c1:
ad:ed:8f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org