Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/5hUVKQ_-oAuCeHRVtawyN2vmQl8.roa
File: 5hUVKQ_-oAuCeHRVtawyN2vmQl8.roa (raw, json)
Hash identifier: e7esGv/YZ//DsFMpHNQQbsDtm5YiHIdXrjiOOQtPcnk=
Subject key identifier: E6:15:15:29:0F:FE:A0:0B:82:78:74:55:B5:AC:32:37:6B:E6:42:5F
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0188504564C88D3D126E90076EDBBBBC28AA
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/5hUVKQ_-oAuCeHRVtawyN2vmQl8.roa
Signing time: Thu 25 May 2023 00:18:25 +0000
ROA not before: Thu 25 May 2023 00:18:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 84.247.20.0/24 maxlen: 24
89.47.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:50:45:64:c8:8d:3d:12:6e:90:07:6e:db:bb:bc:28:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: May 25 00:18:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e61515290ffea00b82787455b5ac32376be6425f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:dd:4a:b6:f4:03:5a:8a:47:81:63:2a:16:
06:c7:06:f2:5f:c6:79:a7:1a:fb:7a:8f:85:e5:41:
f3:fd:7e:4c:0f:42:3b:77:a7:5e:8a:29:1e:9b:a2:
b6:3a:65:d1:92:eb:13:c6:a9:32:9a:1e:2e:9a:fc:
6c:ee:9e:dd:c3:51:8e:07:ac:fe:88:c4:ed:71:a3:
f5:48:04:fb:7c:ab:78:d7:d5:9c:8d:e3:5d:ab:46:
6d:27:e6:9c:5f:72:4b:16:1a:4b:9f:b3:6a:e3:1f:
39:38:b1:60:66:b0:d9:15:80:40:26:4c:df:57:3d:
cd:90:63:72:df:b3:35:26:40:98:29:c9:44:90:b2:
88:71:8d:5c:44:3d:60:41:68:09:6d:2b:18:50:3f:
82:64:96:6c:9e:84:7c:39:98:a7:45:5b:b3:69:4d:
65:5c:9a:7d:85:ab:14:26:39:d5:95:b6:c2:cd:be:
4b:35:99:c9:c5:f8:e2:7d:8b:85:35:e5:c9:1f:a2:
11:c9:82:aa:67:cd:01:a7:72:28:85:98:71:ab:6c:
da:be:3c:98:50:d5:48:0b:e0:57:d9:29:48:ba:06:
15:31:20:07:8d:db:10:f0:4e:a8:f9:84:12:3f:3e:
50:5f:23:48:dd:14:37:f4:dc:e5:f1:2c:d3:63:fe:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:15:15:29:0F:FE:A0:0B:82:78:74:55:B5:AC:32:37:6B:E6:42:5F
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/5hUVKQ_-oAuCeHRVtawyN2vmQl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.20.0/24
89.47.249.0/24
Signature Algorithm: sha256WithRSAEncryption
92:54:94:b8:ca:7d:0a:ec:94:0e:b7:69:59:ac:c9:11:f0:2f:
2b:42:e6:da:36:0a:76:8b:2a:7a:46:a7:2e:2a:90:a6:08:1e:
24:cb:c3:86:9e:1a:d2:b9:7f:19:dc:4f:1c:c9:a3:77:5d:1b:
c8:0b:33:bb:a8:50:5a:45:21:83:50:a5:5b:75:34:35:0a:a8:
d0:ce:5d:86:13:98:38:a1:a5:07:ba:fc:a1:b5:a6:02:22:c3:
29:41:3a:06:5a:e5:f7:7a:49:46:f4:39:20:a8:ca:91:ec:7d:
3c:e5:df:24:d0:a7:5e:7e:5d:ca:10:fd:c3:1e:20:86:c8:66:
8f:6a:fa:cc:d4:35:36:ae:a1:96:02:84:83:4d:4c:c3:82:15:
d5:38:08:8c:bb:94:2f:f8:e7:77:5a:84:4c:37:b9:ff:4a:5c:
ba:11:fb:85:d0:f4:eb:a4:37:46:10:13:07:96:0f:f4:9b:30:
d6:71:0e:12:38:89:eb:84:c7:41:84:7e:30:a5:9c:64:b1:dc:
71:d0:e4:1d:90:87:07:e6:87:4f:6a:d9:5e:ef:d9:95:e2:58:
c4:59:7f:9c:2b:0d:55:0b:97:5b:b9:3e:d8:b7:8d:86:a3:a9:
a0:2a:14:d4:96:a3:22:20:3b:20:02:5c:8d:94:e0:0f:24:ea:
ae:9c:0c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org