Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/RpXPXND2eGR_ee4UIieuRBLt0mY.roa
File: RpXPXND2eGR_ee4UIieuRBLt0mY.roa (raw, json)
Hash identifier: r+zIgZv2Ws30yiVP9HfYL9UN40OMtp3R/fvfiVAnr6Y=
Subject key identifier: 46:95:CF:5C:D0:F6:78:64:7F:79:EE:14:22:27:AE:44:12:ED:D2:66
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 0185706719DFB6694E33848CEBF5E541303B
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/RpXPXND2eGR_ee4UIieuRBLt0mY.roa
Signing time: Mon 02 Jan 2023 02:54:42 +0000
ROA not before: Mon 02 Jan 2023 02:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39364
IP address blocks: 5.202.44.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:19:df:b6:69:4e:33:84:8c:eb:f5:e5:41:30:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 2 02:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4695cf5cd0f678647f79ee142227ae4412edd266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:94:dd:4a:32:e9:b2:1a:a3:60:be:0a:a8:
d2:92:0b:af:82:89:4b:38:3e:ca:0d:36:5e:0d:fb:
3b:9a:7d:fe:9b:81:f1:84:73:06:49:15:f9:19:19:
11:3c:a6:2f:af:35:ba:7d:a8:ad:bc:1c:57:97:10:
49:07:43:38:91:d7:7c:b2:8c:14:99:56:62:4c:90:
37:f7:ad:de:46:b2:9a:42:8e:e4:cd:0a:bf:1f:f9:
08:b4:11:67:14:b5:d3:2d:5b:a2:b0:01:88:80:9d:
ea:3f:73:07:a1:7e:28:51:79:0c:32:fc:04:8f:dd:
73:4c:dc:62:8c:27:a3:b0:63:e7:44:cd:8f:cd:8e:
3f:e4:98:ef:e7:01:9c:fd:6e:19:c2:a3:6f:6c:6e:
e4:ae:c3:b7:24:d7:c2:cd:74:65:43:9d:33:3b:70:
d1:0d:20:59:2e:93:ca:62:c0:8e:3c:a7:2f:46:67:
d1:98:ec:03:f1:99:82:6b:18:9c:b2:35:e9:3b:0f:
40:08:28:a7:37:8f:3e:8f:05:2a:f6:24:62:10:65:
79:42:d5:64:b2:16:35:0b:89:72:f0:17:16:96:20:
ae:50:7f:34:8f:fa:73:eb:2c:00:66:e6:88:e7:a7:
6b:c1:76:c2:f7:32:7b:68:64:07:fb:56:a0:10:ea:
1e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:CF:5C:D0:F6:78:64:7F:79:EE:14:22:27:AE:44:12:ED:D2:66
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/RpXPXND2eGR_ee4UIieuRBLt0mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.44.0/22
Signature Algorithm: sha256WithRSAEncryption
16:c6:f1:1e:d8:3d:ff:90:d8:25:c0:af:6c:fa:c4:c6:1e:06:
db:7a:85:65:d3:da:ac:4e:58:90:b5:32:1f:08:48:07:c9:28:
9f:84:75:6a:f6:3f:a7:92:18:da:48:4d:9d:fe:11:8f:6c:3d:
ba:e5:89:ac:c0:63:b9:9c:4c:6c:cb:87:f6:bb:67:c1:42:d4:
af:39:e4:b0:10:39:45:57:12:c1:e6:9c:f2:68:3a:27:6d:f3:
46:77:4f:27:97:c6:77:db:7d:97:e2:88:4f:d1:4b:40:4e:7d:
98:53:90:2e:b0:9f:26:71:a3:62:6c:2d:2b:6f:02:2e:41:8e:
55:25:ac:10:a3:63:96:e1:81:74:d4:1a:d4:9a:c2:e1:e5:f7:
9e:f1:63:83:d7:24:79:17:84:82:2d:29:8d:29:2b:e1:d4:2e:
81:9f:4e:55:af:1f:8f:f5:5c:9a:f7:01:f7:78:d2:4b:39:04:
fd:0c:92:16:b5:79:bb:17:4f:b2:24:fb:50:0d:d1:dd:de:15:
fa:21:ac:7c:31:d2:3a:35:18:99:f4:bf:f9:d4:b2:57:88:dd:
23:30:a8:60:94:e9:d7:84:25:d7:6b:12:eb:23:7e:1d:91:b2:
1f:f0:c7:68:81:d2:d5:a4:2f:08:10:40:f6:94:31:87:0c:75:
54:f9:72:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:00 2024 by rpki-client on console-ams.rpki-client.org