Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/cCCkkEUAeU4aqM9eyjIKAmMMn3k.roa
File: cCCkkEUAeU4aqM9eyjIKAmMMn3k.roa (raw, json)
Hash identifier: km0XCua9jPzFA7TSB4VlIL+kvccEyK5nHmapOHwMYTo=
Subject key identifier: 70:20:A4:90:45:00:79:4E:1A:A8:CF:5E:CA:32:0A:02:63:0C:9F:79
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018659CE89634C7008E436636CBEB1CEECEA
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/cCCkkEUAeU4aqM9eyjIKAmMMn3k.roa
Signing time: Thu 16 Feb 2023 10:39:13 +0000
ROA not before: Thu 16 Feb 2023 10:39:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210992
IP address blocks: 5.104.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:ce:89:63:4c:70:08:e4:36:63:6c:be:b1:ce:ec:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Feb 16 10:39:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7020a4904500794e1aa8cf5eca320a02630c9f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:c3:05:18:bc:d6:bf:16:18:13:7c:0b:de:
79:cf:4f:fc:b9:92:b2:b2:08:76:62:bb:4c:64:62:
7b:bd:8d:58:fd:2d:77:00:eb:72:8a:de:de:a8:ee:
01:2c:69:02:60:aa:53:fe:eb:a0:2d:b0:4a:ed:41:
7d:64:c8:a6:c7:ed:dc:d2:bd:1b:76:39:a1:62:41:
41:5c:16:4b:50:83:fb:f9:58:a5:40:27:c6:d5:71:
4c:18:4c:c8:58:35:97:fa:08:17:49:8d:f5:d4:ac:
c0:4c:0c:51:fa:3b:80:5c:24:e8:9c:01:3f:11:77:
17:1e:ae:cf:22:79:32:ec:81:c2:31:ef:5d:79:7a:
f4:1d:60:8d:12:e2:8c:3d:34:61:ef:df:b5:a8:97:
e1:f2:4f:7d:91:04:c7:73:71:59:4f:a4:21:78:dd:
08:d0:78:2c:ce:53:d6:41:9e:b1:d8:fb:94:6e:26:
9f:e8:e7:81:65:2b:2d:67:01:f4:82:ad:15:ad:fb:
58:e7:93:7e:8a:2e:85:2e:dd:f5:67:19:e4:97:1e:
2a:6c:16:f2:af:12:9d:d6:fb:42:aa:c1:25:51:b1:
c2:eb:dd:38:a6:e2:19:6d:7b:50:2a:09:ce:4f:91:
69:c4:69:79:82:2a:3f:43:ee:95:c9:47:98:f6:8b:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:20:A4:90:45:00:79:4E:1A:A8:CF:5E:CA:32:0A:02:63:0C:9F:79
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/cCCkkEUAeU4aqM9eyjIKAmMMn3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.182.0/24
Signature Algorithm: sha256WithRSAEncryption
39:24:be:2b:d6:2e:5a:f0:96:c1:35:d4:c7:14:91:16:f5:9e:
34:59:20:16:53:ea:43:bf:f8:b3:e7:aa:c6:6b:78:e4:7d:4a:
7e:86:dc:0b:5d:d1:be:f8:a0:06:b3:dd:b6:1c:52:ac:15:53:
b8:ff:21:da:ec:56:1b:b0:91:dc:e3:8c:33:36:38:59:9b:80:
52:ba:eb:c6:e9:c5:42:dd:07:03:a4:4d:6c:2c:43:28:c1:30:
ce:d2:da:cb:25:05:67:b9:76:1a:67:9b:40:22:40:97:87:76:
69:9d:e7:fc:e5:86:97:99:b4:af:96:d4:4c:ec:1d:cf:c7:c1:
1c:f0:ce:ac:ee:54:d7:ea:0b:1d:a1:2f:ae:3e:80:ff:66:e6:
54:db:8c:17:0b:aa:b0:bc:77:15:1f:36:70:ac:c1:a7:44:27:
f3:3a:8c:c0:41:1a:0b:25:3d:59:6b:dc:bf:30:ae:fb:a1:c6:
63:09:b6:19:36:34:4b:1d:f5:8c:7f:90:e6:75:9f:1d:25:ac:
3b:af:32:03:a9:71:ba:01:2f:d0:59:0b:b3:68:d5:7f:76:d3:
fa:a3:0b:8a:67:61:27:a5:0b:68:9c:b4:93:72:db:8a:67:96:
58:d2:fb:07:38:96:f8:3a:1a:5b:e0:6c:24:a1:12:68:65:93:
fe:59:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:15 2024 by rpki-client on console-fra.rpki-client.org