Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/jPZDPdEn8PmrzolqTIwiJKD4y90.roa
File: jPZDPdEn8PmrzolqTIwiJKD4y90.roa (raw, json)
Hash identifier: c0Y+2gL1gfAfMYkasIH03osj5m0Wx6XiyAWBPZx9uhc=
Subject key identifier: 8C:F6:43:3D:D1:27:F0:F9:AB:CE:89:6A:4C:8C:22:24:A0:F8:CB:DD
Certificate issuer: /CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Certificate serial: 0185724C69BF9D21D2D306DB07C95201D711
Authority key identifier: 28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/jPZDPdEn8PmrzolqTIwiJKD4y90.roa
Signing time: Mon 02 Jan 2023 11:44:48 +0000
ROA not before: Mon 02 Jan 2023 11:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34569
IP address blocks: 5.181.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:69:bf:9d:21:d2:d3:06:db:07:c9:52:01:d7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Validity
Not Before: Jan 2 11:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cf6433dd127f0f9abce896a4c8c2224a0f8cbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8d:29:66:b4:84:fd:34:d1:56:0f:52:b5:bb:
c2:74:85:93:e3:28:bf:46:69:43:42:07:94:52:66:
45:8a:12:32:4b:ba:7d:84:30:c3:15:0d:49:bf:4a:
8a:b6:1e:02:39:68:ab:aa:2e:4a:b9:76:f2:35:10:
cc:62:ed:fc:f1:76:9b:92:fc:49:a6:10:4c:e2:8f:
22:93:f8:1f:b4:87:d9:06:5e:95:81:a1:20:c0:e4:
e5:a8:c8:97:6d:41:cf:df:a6:86:54:c3:28:0d:a3:
09:1b:c8:db:60:57:59:71:31:c6:20:8c:5e:d2:e8:
23:8e:c6:61:a7:aa:5c:c0:c5:4e:08:0a:86:0d:90:
d8:0f:65:f2:cf:89:5d:89:84:62:a7:94:98:0f:0c:
86:29:61:6f:eb:9c:a5:b4:a2:6b:e2:95:31:33:22:
80:4a:8c:e8:76:79:af:7a:5a:b7:76:a9:2f:3a:89:
6b:44:d4:db:3f:8d:36:3b:6e:7f:a0:0b:18:44:66:
bb:d8:ba:24:0d:ff:9c:68:d5:e0:49:52:88:d7:0c:
80:ad:54:f2:33:05:50:94:0f:b2:98:ed:cd:31:8d:
73:71:3e:10:75:05:db:c3:3e:2d:e2:65:6f:52:56:
06:b2:35:f1:38:fe:ac:90:43:d3:0f:a8:4e:09:c7:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F6:43:3D:D1:27:F0:F9:AB:CE:89:6A:4C:8C:22:24:A0:F8:CB:DD
X509v3 Authority Key Identifier:
keyid:28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/jPZDPdEn8PmrzolqTIwiJKD4y90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.19.0/24
Signature Algorithm: sha256WithRSAEncryption
49:08:3f:0e:e3:41:16:e1:63:c5:98:4c:9c:31:4c:c9:62:0f:
30:de:c9:35:02:be:ba:ac:ef:cd:f7:8d:4e:c3:b9:1d:fe:dd:
09:16:90:36:c3:bd:6e:da:87:56:98:bd:31:9c:d4:87:b1:0e:
53:46:e3:da:b0:4e:72:6c:e4:48:61:da:8f:df:04:dd:23:9a:
4e:2f:80:c3:e1:9b:22:f7:5d:ec:e0:72:3b:93:fe:9a:21:e9:
ce:da:01:e2:69:bb:9e:16:cd:49:f5:2b:c9:70:01:cf:21:4d:
fb:b1:8e:4d:e9:d6:91:b0:84:47:67:e9:11:b1:74:6b:69:80:
a5:d0:f6:df:79:05:4e:ef:c5:22:7e:b2:c8:1a:e0:84:85:fa:
4c:25:08:42:da:41:06:bf:b4:f6:7b:8b:56:37:59:c0:e0:b6:
37:14:d8:4b:4c:66:06:5c:2d:dc:d3:99:b6:63:8d:05:e4:4b:
47:2c:c2:2c:d2:c8:2f:b8:df:3c:8a:93:1a:e0:08:69:ba:b2:
60:29:a4:ec:d2:b8:44:12:e5:51:5d:1c:e3:ef:65:9f:22:2e:
f3:99:bb:f5:27:34:7b:05:ce:42:0b:4e:96:57:c4:da:a5:9b:
62:62:e0:49:c0:97:66:f0:43:5a:6e:a6:42:f6:43:b8:3d:35:
0d:f4:a6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:56 2023 by rpki-client on console.sobornost.net