Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/nD3LoEzfI4fjNJ7TEyk5cQbhAxc.roa
File: nD3LoEzfI4fjNJ7TEyk5cQbhAxc.roa (raw, json)
Hash identifier: g7AmavumJV2WwLjIZw0yuPElig80WCgfuwCoQ5DmgI4=
Subject key identifier: 9C:3D:CB:A0:4C:DF:23:87:E3:34:9E:D3:13:29:39:71:06:E1:03:17
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 0186E5A8725E5E85B831FAEEE73A16FC19F3
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/nD3LoEzfI4fjNJ7TEyk5cQbhAxc.roa
Signing time: Wed 15 Mar 2023 14:24:27 +0000
ROA not before: Wed 15 Mar 2023 14:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 5.56.133.0/24 maxlen: 24
87.236.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:a8:72:5e:5e:85:b8:31:fa:ee:e7:3a:16:fc:19:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Mar 15 14:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c3dcba04cdf2387e3349ed31329397106e10317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:6f:90:fa:60:78:bc:d5:27:ab:59:38:43:
30:d1:79:c5:22:ea:6f:f6:8a:16:69:86:46:cc:0a:
f8:49:d0:fc:1c:96:91:05:06:c5:86:27:cc:3a:f8:
c5:36:91:d3:de:5c:09:ed:e3:1d:a7:d2:d4:f9:86:
fc:82:c8:ff:7c:7d:3f:fb:fe:a5:51:d4:87:b9:32:
93:98:ce:1f:7b:af:73:78:70:d8:bf:fa:03:ab:9e:
66:d7:f0:0f:e7:5c:5a:7c:31:4f:d8:5a:ce:81:bb:
dc:a3:54:fb:5e:5e:99:46:99:1d:d1:f9:7a:8d:f1:
fa:19:ce:ed:3a:80:ec:66:04:da:ab:9a:62:8e:82:
12:86:a4:19:ce:0a:e5:94:7e:3e:64:4d:ec:c5:41:
4f:94:af:a4:6f:23:a5:66:34:4d:69:7f:3c:5b:c9:
77:06:66:9e:07:99:86:99:aa:9d:31:05:0a:fd:d9:
35:f7:3e:11:b9:64:fe:ce:30:00:47:d3:e9:92:25:
6c:2e:54:a0:34:a9:fa:cf:e2:4a:6d:13:d6:3a:0f:
8c:b1:87:2b:3b:71:0e:e6:41:09:b5:0a:9b:ce:41:
b1:1c:b9:90:33:2b:b7:1e:77:79:21:52:98:4f:08:
9f:31:ba:b6:90:fb:6b:73:3b:c8:79:c7:00:60:b1:
01:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3D:CB:A0:4C:DF:23:87:E3:34:9E:D3:13:29:39:71:06:E1:03:17
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/nD3LoEzfI4fjNJ7TEyk5cQbhAxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.133.0/24
87.236.212.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:b9:67:b3:e8:ce:39:6b:6f:8c:70:b2:c2:e3:2c:97:84:a5:
06:31:42:34:6b:a5:82:33:7b:eb:e1:25:c8:9a:ef:74:90:52:
4c:a1:c2:d6:49:99:7b:51:37:ea:f8:15:3c:9c:64:b5:1b:90:
75:e2:ea:af:86:fb:a4:11:a8:b9:a5:6b:7c:b0:8d:95:a6:ea:
8a:d9:d3:4b:99:2b:35:61:e6:89:5b:b7:12:f6:8d:37:be:6d:
7d:b6:5b:d5:68:5c:6a:d3:6a:20:10:71:09:68:6d:b6:b4:dd:
01:55:8d:11:61:aa:8e:0e:d9:41:dc:bf:2e:ad:10:48:02:d2:
11:b5:ad:43:2a:06:e6:6c:ff:1f:f6:18:30:f9:9b:03:ed:d2:
59:b4:76:44:98:26:e5:5d:c5:2f:41:d3:01:f0:d7:e4:0a:49:
dc:77:8e:48:32:c6:43:34:1f:1f:0c:07:75:cb:a2:fc:64:72:
44:00:b7:21:8b:59:35:b8:38:cc:da:9f:be:d7:62:4e:f7:87:
48:14:a3:48:e5:2c:f4:ea:b5:1f:83:24:0d:f3:50:d2:6e:36:
8a:d2:10:ad:38:ac:aa:7e:14:7c:fc:69:ab:f3:ff:4b:64:aa:
58:54:8e:b2:8f:78:a3:e6:a4:27:49:bd:16:41:35:2a:85:f5:
49:a2:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:27 2024 by rpki-client on console-ams.rpki-client.org