Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/KZlZbPq3NHGzu1qNmBkePsoNZ_8.roa
File: KZlZbPq3NHGzu1qNmBkePsoNZ_8.roa (raw, json)
Hash identifier: XavRfDvy8QChZWqpCQt9Pnfy7sS1UHwgicsCxedx+ek=
Subject key identifier: 29:99:59:6C:FA:B7:34:71:B3:BB:5A:8D:98:19:1E:3E:CA:0D:67:FF
Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial: 01881E61BE48D4A599A000033ED090927335
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/KZlZbPq3NHGzu1qNmBkePsoNZ_8.roa
Signing time: Mon 15 May 2023 07:48:22 +0000
ROA not before: Mon 15 May 2023 07:48:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56553
IP address blocks: 5.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:61:be:48:d4:a5:99:a0:00:03:3e:d0:90:92:73:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Validity
Not Before: May 15 07:48:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2999596cfab73471b3bb5a8d98191e3eca0d67ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:b8:83:93:48:b8:58:19:0b:14:2b:a0:1e:
4e:4e:b0:d9:a3:9c:a1:88:22:9a:36:a7:4e:02:9d:
b8:8a:7f:45:bd:0c:09:85:ed:5e:8e:6f:1c:f2:e3:
18:11:fe:ec:1f:d8:eb:a5:8a:bd:02:79:a9:68:32:
2f:1f:b9:7c:b7:81:61:7b:7d:46:ae:01:4b:10:6b:
46:a0:bc:cb:87:c4:97:ef:26:27:0b:c8:12:43:6d:
02:dc:25:7b:41:a4:80:1c:7d:36:38:6c:a5:ba:5f:
7b:f4:61:71:39:2b:f6:6d:7e:2e:c7:98:89:10:e5:
d0:a1:19:41:6c:4c:b3:98:1e:c4:20:b2:d2:19:b0:
a0:14:21:fc:e6:2f:58:9e:44:21:ff:e1:22:6d:f9:
fe:c0:71:13:fd:4f:90:a0:9c:78:dc:b0:dc:13:8f:
4d:0f:d6:65:fd:3e:52:b2:d1:59:2d:3f:08:a9:f3:
36:44:f3:02:59:df:50:11:89:b8:37:07:9a:cd:d9:
f1:30:8e:a7:98:83:30:90:1b:9f:8a:b5:e8:f1:06:
e0:00:e3:e5:45:fb:28:92:b6:e7:7f:13:c8:a3:4c:
c7:cc:49:e0:ed:d9:5c:d8:b7:da:bd:8b:34:b5:0e:
42:bf:a3:0c:12:33:5c:02:18:0e:07:bb:c8:5b:ae:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:99:59:6C:FA:B7:34:71:B3:BB:5A:8D:98:19:1E:3E:CA:0D:67:FF
X509v3 Authority Key Identifier:
keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/KZlZbPq3NHGzu1qNmBkePsoNZ_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:98:46:88:e9:15:ad:c5:d1:91:1c:83:af:d6:f6:01:52:26:
26:5a:a4:76:ef:47:6e:85:3f:31:72:f8:5f:b0:56:a1:29:69:
69:27:8d:28:d0:31:fb:3b:e1:bf:ba:7f:e4:bb:97:36:2f:35:
0c:cb:94:55:70:e6:9b:91:61:b4:35:e8:b1:d5:98:af:9c:90:
fe:5d:51:8a:d3:da:67:e3:65:0f:2e:3e:4e:cc:31:94:7a:c1:
11:f1:56:b1:e9:79:6f:cf:e6:c8:95:94:af:aa:d7:f3:47:8a:
48:48:e0:34:98:a0:81:a5:f9:d3:d9:62:3b:c3:90:fd:d4:04:
81:51:6c:02:07:92:56:90:18:3b:15:ad:5f:21:bf:bc:dc:ef:
04:e3:7e:4a:29:1f:68:d4:9b:50:39:53:f7:b1:d9:a0:46:b3:
c0:9e:82:89:e3:7d:9d:3a:81:3c:7b:41:97:04:11:a3:f5:7b:
2c:96:aa:19:98:58:62:16:7a:f4:65:18:90:02:a5:6a:38:1d:
e5:80:15:b8:df:21:e5:86:9c:dc:d7:16:00:40:7b:ad:7e:80:
08:a9:da:1b:e5:48:82:7d:76:72:d1:79:41:2a:26:ca:e8:f4:
d2:d5:21:f7:63:03:39:76:1f:e0:20:c7:32:ed:11:46:e1:11:
ef:18:7e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:45 2024 by rpki-client on console-fra.rpki-client.org