Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bXnFIm4NGToAF2hwH-7zwJntlH0.roa
File: bXnFIm4NGToAF2hwH-7zwJntlH0.roa (raw, json)
Hash identifier: ixVpbK7n+NYGdF85jdzBUyOdcWaEytgjirgVYmEHJPc=
Subject key identifier: 6D:79:C5:22:6E:0D:19:3A:00:17:68:70:1F:EE:F3:C0:99:ED:94:7D
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01875AC832B5CA51EAC7FDCE5CD3C9FDB0B7
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bXnFIm4NGToAF2hwH-7zwJntlH0.roa
Signing time: Fri 07 Apr 2023 08:14:42 +0000
ROA not before: Fri 07 Apr 2023 08:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212607
IP address blocks: 5.10.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:c8:32:b5:ca:51:ea:c7:fd:ce:5c:d3:c9:fd:b0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Apr 7 08:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d79c5226e0d193a001768701feef3c099ed947d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:ba:7e:5a:3c:f9:8b:15:4c:03:38:62:30:
dd:50:77:31:97:1c:c5:2e:27:1e:35:86:0f:43:ef:
4d:f1:c3:95:e7:c2:37:60:ad:9e:16:b0:9c:6b:c0:
98:63:02:fb:94:d6:6b:49:b9:69:7f:a5:e7:c6:21:
61:51:77:cd:78:bb:e7:09:fe:cd:e5:f3:e5:7e:1f:
e3:7e:15:6c:43:2a:eb:84:4d:b9:1f:22:29:ec:b6:
ae:8d:91:e1:36:2b:75:5b:ff:36:bd:1e:e8:b2:ec:
52:cb:64:c9:aa:cf:79:dc:6e:53:30:24:20:30:a0:
b6:30:51:c7:a7:54:c0:13:d9:97:53:83:94:85:04:
14:a3:18:0d:3a:5e:da:f5:7b:01:8c:a5:ce:6c:1e:
ac:0c:9f:59:c5:ca:cc:dc:f1:59:26:d4:73:16:a8:
e0:a7:14:1c:8a:ee:b4:70:df:8b:48:8e:e2:5c:34:
0e:4e:b9:da:fc:59:c2:00:be:92:b6:47:ed:e1:20:
f6:74:51:58:38:91:d7:df:9e:4c:49:3c:e1:cb:86:
f2:fe:1d:6e:07:4d:26:40:fc:3e:b0:54:11:d0:68:
ea:9a:60:46:92:ea:55:5f:cb:50:50:0b:72:b2:aa:
28:d2:09:b7:57:bb:02:10:73:d0:4f:1d:aa:13:b1:
0f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:79:C5:22:6E:0D:19:3A:00:17:68:70:1F:EE:F3:C0:99:ED:94:7D
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bXnFIm4NGToAF2hwH-7zwJntlH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.248.0/24
Signature Algorithm: sha256WithRSAEncryption
79:6c:47:f6:8b:a8:00:b4:38:0b:9d:17:80:a9:55:14:46:50:
73:74:c9:b2:4b:68:e4:5c:90:ac:82:af:0a:35:a8:60:8f:39:
43:56:c4:09:1a:fd:b9:37:36:2c:1a:51:07:2a:c5:7a:fa:bc:
bf:8f:93:3e:6d:8f:9a:74:c3:c6:1e:b6:1a:5b:24:a7:4f:bf:
61:98:f7:8f:d8:cb:e2:38:f0:dd:04:6e:cf:4f:13:1e:97:14:
0e:38:c1:ba:76:b1:88:32:f3:3e:0f:97:06:90:00:33:e7:d3:
f1:5d:36:b7:28:09:cb:0a:f4:87:bf:20:14:12:5c:9f:57:65:
73:bd:2c:b3:ba:6f:df:97:f6:4c:e8:34:f9:1b:29:44:75:47:
6c:37:9e:6a:a1:3e:c2:34:52:e8:25:0d:74:bb:b6:c0:5b:34:
b5:a1:05:aa:a9:c4:6a:e8:86:fc:0e:7a:df:17:fb:c0:07:eb:
3c:ab:0b:58:a7:f6:74:91:8f:d3:7b:d4:27:c2:85:a8:cb:20:
65:34:49:9b:ee:82:6f:da:39:14:b8:3b:db:d5:39:2a:92:83:
cf:06:66:5b:8d:8f:61:0a:88:e7:e8:d3:9f:77:d9:57:63:ae:
74:e1:ae:b2:dc:b0:7e:ac:1f:f2:f4:27:dc:a5:46:1f:9f:a8:
94:a0:c2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:09 2024 by rpki-client on console-ams.rpki-client.org