Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/voTc-C-IicbWN7dCShjRLmmC14Y.roa
File: voTc-C-IicbWN7dCShjRLmmC14Y.roa (raw, json)
Hash identifier: Sa2pcEXVNuJNM2m8kXkfONsaH9PlQimDRElNCEvAiS0=
Subject key identifier: BE:84:DC:F8:2F:88:89:C6:D6:37:B7:42:4A:18:D1:2E:69:82:D7:86
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 018B5130380A280B003ACFCF21E5AEC3182A
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/voTc-C-IicbWN7dCShjRLmmC14Y.roa
Signing time: Sat 21 Oct 2023 07:43:16 +0000
ROA not before: Sat 21 Oct 2023 07:43:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 5.202.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 25 Oct 2023 09:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:51:30:38:0a:28:0b:00:3a:cf:cf:21:e5:ae:c3:18:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Oct 21 07:43:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be84dcf82f8889c6d637b7424a18d12e6982d786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:b2:81:6e:95:70:d4:37:36:7b:e3:76:3a:
7a:49:17:6f:24:bb:c8:1d:8c:ee:39:a3:2e:bf:4e:
a4:1f:34:e7:0e:67:d9:b3:94:58:f5:0c:42:d6:a6:
aa:d3:b9:96:ba:67:64:d3:0f:0e:64:0a:4c:1c:d5:
44:b7:87:a6:94:08:67:a9:32:50:cc:aa:c7:33:70:
50:53:49:94:bf:d1:e0:4b:a4:7d:fc:63:d0:67:57:
f1:32:85:3c:32:3c:eb:b2:c3:29:67:a6:d7:b9:c2:
d4:24:eb:7e:8e:b0:db:13:39:0a:f9:36:bf:ff:ef:
03:48:34:ba:d0:2b:cd:f5:96:d3:3b:94:d2:c1:6d:
a0:27:be:60:eb:d8:70:28:4f:38:ad:41:47:15:14:
69:7b:44:e8:7c:f4:ef:33:24:53:f8:1a:37:84:32:
bc:1c:63:3c:71:06:52:68:d2:d2:93:c4:77:bf:3d:
d5:96:23:9b:7c:58:e2:82:a6:ce:7e:0f:20:6d:61:
1d:53:62:26:94:df:55:6f:fc:c9:b6:b2:8d:e8:01:
bd:2b:62:84:9e:86:1f:9a:3e:c1:5b:68:ee:85:29:
45:0b:be:56:29:53:07:5f:f4:98:20:44:5f:9b:80:
6b:a6:fd:4b:f4:89:cb:07:24:65:63:f1:b8:e2:73:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:84:DC:F8:2F:88:89:C6:D6:37:B7:42:4A:18:D1:2E:69:82:D7:86
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/voTc-C-IicbWN7dCShjRLmmC14Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.136.0/22
Signature Algorithm: sha256WithRSAEncryption
73:6a:7c:95:82:d3:ae:81:74:6a:a6:8e:89:6c:97:18:fd:8f:
a0:a4:b9:b3:a2:af:38:24:c7:02:0d:33:bb:eb:a4:03:38:f5:
27:21:bf:fd:9f:bd:f3:bd:eb:72:c1:87:52:b4:ab:5f:be:0b:
35:19:e6:95:d4:3d:dc:e4:35:f0:a1:1c:ee:37:62:13:77:5d:
1f:83:4c:dc:cb:60:a3:b7:1b:5e:68:58:a3:aa:f1:37:27:6a:
2f:02:af:d4:fa:90:2d:24:09:a7:6e:52:d3:00:67:15:58:10:
69:b0:8e:e2:93:18:ba:98:c1:3d:27:fd:cd:fe:01:2f:1a:db:
fe:7a:4f:ff:72:b5:2d:15:94:eb:10:10:d4:f5:54:bb:3f:77:
92:d3:a0:2b:02:08:77:2d:a1:64:7b:19:69:01:c0:4c:b8:20:
2e:74:49:54:44:33:01:9f:07:72:ff:1b:1c:3e:fc:d5:5f:c9:
41:31:a6:1f:51:3d:22:a6:5c:51:85:31:57:bd:71:64:6e:72:
55:90:25:46:9e:9c:95:57:e3:40:ba:0a:5f:dc:a7:7f:67:31:
fa:14:99:5b:21:f4:5b:5a:f4:40:16:09:7d:d3:11:ac:2c:0a:
f9:38:94:70:7f:db:fd:f5:df:60:ae:f0:78:0d:cf:9e:24:b9:
9f:2d:eb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:10 2024 by rpki-client on console-fra.rpki-client.org