Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/jUcDRDdWQnA7-6RACF3jz_D58gI.roa
File: jUcDRDdWQnA7-6RACF3jz_D58gI.roa (raw, json)
Hash identifier: ikEXdnNqFyEk+6+nCYijgk5XhEaDGpvFfXQHBH0Lel0=
Subject key identifier: 8D:47:03:44:37:56:42:70:3B:FB:A4:40:08:5D:E3:CF:F0:F9:F2:02
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 01857002801FC38AC2F6F5AB66C6B28C850E
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/jUcDRDdWQnA7-6RACF3jz_D58gI.roa
Signing time: Mon 02 Jan 2023 01:04:50 +0000
ROA not before: Mon 02 Jan 2023 01:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39383
IP address blocks: 5.183.171.0/24 maxlen: 24
5.183.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:80:1f:c3:8a:c2:f6:f5:ab:66:c6:b2:8c:85:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jan 2 01:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d470344375642703bfba440085de3cff0f9f202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cd:f4:94:8c:20:1e:79:2b:68:b2:e8:fa:ef:
8b:60:2d:41:21:47:68:5d:e4:9e:c7:01:c6:60:ad:
39:6f:9c:93:04:59:a0:84:33:22:b2:35:69:57:a1:
91:52:b6:58:41:51:75:84:10:c1:17:ca:93:15:61:
b7:5e:93:78:93:0f:82:ff:42:26:8b:c7:0e:fd:8f:
d7:ce:39:5a:7c:90:c9:b2:a5:6f:ec:0f:0f:8b:ee:
02:a0:dc:b1:0f:20:01:0a:ce:af:7c:08:cf:97:93:
d0:69:06:37:4a:88:b6:8b:d9:7f:e2:c7:3f:81:f0:
ce:96:13:41:ac:f9:f6:69:eb:c4:12:13:4b:2a:de:
e8:44:f2:79:d1:69:34:f8:d1:8d:f7:22:a0:9c:cb:
59:c8:3a:f9:ec:cc:b5:bd:e8:15:14:1c:05:a3:9e:
cd:01:c1:4a:22:1d:69:3c:e4:dc:0e:93:f8:63:c3:
fe:fd:6a:c6:89:9d:62:82:55:6e:d5:e8:12:8f:e3:
63:7d:a9:2f:5e:e2:5d:f5:3e:05:ae:4f:9f:2e:d5:
2e:cf:ce:45:51:ba:0d:39:48:a3:85:67:bd:23:b7:
2b:20:78:98:13:8a:d3:cf:73:6a:1a:f6:2c:b7:7d:
8b:72:94:fa:48:ad:63:f4:62:48:84:bd:ac:e9:5e:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:47:03:44:37:56:42:70:3B:FB:A4:40:08:5D:E3:CF:F0:F9:F2:02
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/jUcDRDdWQnA7-6RACF3jz_D58gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.170.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:03:a1:48:a2:e9:ff:38:66:5d:3b:3b:b5:f3:0b:1f:82:c5:
f4:40:18:0e:bd:b0:e0:2f:2c:92:3a:ab:c1:39:9f:2d:b4:f1:
22:ee:c5:d7:0b:63:3c:39:45:4a:43:fd:01:d5:94:ac:bc:0a:
06:61:33:c4:ca:ee:93:5a:13:99:a8:e4:d6:ed:9f:66:dc:90:
2c:82:8a:60:aa:8c:5e:9c:8c:79:79:53:87:aa:3f:cb:23:1a:
68:41:57:71:28:2f:1d:c1:46:6b:61:49:07:29:c4:8e:c2:22:
96:ae:99:f3:d7:4b:25:a8:a7:e7:43:10:a2:97:00:28:96:68:
a1:66:a3:5e:ec:77:ed:c8:69:a3:1f:43:67:49:5c:2a:f9:0e:
9b:f5:1d:db:9c:77:b8:27:dd:2e:ef:fb:8c:62:42:f7:f5:b6:
ee:0c:c8:53:a0:3b:8b:df:22:d3:80:be:5a:29:c6:3b:ce:58:
72:de:12:0f:50:a1:b7:45:98:4b:b9:82:e2:f0:fe:59:f4:35:
6f:ad:2c:96:71:de:29:24:a3:dd:b5:b2:3b:e5:aa:39:71:c3:
f1:9a:7d:25:66:3a:90:26:81:ed:7f:63:a4:17:71:e9:16:3c:
89:62:77:29:22:2b:d9:b2:2b:ca:ec:4c:3c:34:dd:e6:cf:38:
bf:5c:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:28 2024 by rpki-client on console.sobornost.net