Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/J79FyGYDF5dGmb_we0w_LHp4gcU.roa
File: J79FyGYDF5dGmb_we0w_LHp4gcU.roa (raw, json)
Hash identifier: 7eVtaoFH8o4ZppvR1Ebn4uw0hikhV1aM2JSRXsyDdN4=
Subject key identifier: 27:BF:45:C8:66:03:17:97:46:99:BF:F0:7B:4C:3F:2C:7A:78:81:C5
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 0191C3C6F925425130E07081CF0C48ED7095
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/J79FyGYDF5dGmb_we0w_LHp4gcU.roa
Signing time: Thu 05 Sep 2024 20:01:22 +0000
ROA not before: Thu 05 Sep 2024 20:01:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52000
IP address blocks: 5.180.97.0/24 maxlen: 24
45.81.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 10:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c3:c6:f9:25:42:51:30:e0:70:81:cf:0c:48:ed:70:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Sep 5 20:01:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27bf45c8660317974699bff07b4c3f2c7a7881c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ab:9f:06:52:8b:78:be:a1:eb:52:df:bc:3c:
58:39:9f:1b:c9:c3:1b:fa:32:8b:03:2e:0e:b8:69:
9d:ca:d5:a3:10:e9:93:a0:a4:c8:c6:02:5a:76:72:
22:ea:55:43:20:36:91:60:04:1f:8f:99:d2:9f:f1:
9a:3d:6d:af:fc:fe:75:a7:75:37:d1:d4:9a:d8:09:
52:26:a8:29:ba:f2:50:11:56:cf:63:4a:fc:db:89:
e0:f8:b4:33:e5:96:a5:53:f9:a0:9f:70:f2:a1:cf:
9b:3f:19:8e:b5:cc:84:2d:53:01:2f:27:a5:ac:07:
9e:72:f9:c5:b0:90:eb:5f:ba:ab:2d:c8:90:ee:bc:
8d:33:47:47:89:18:57:74:53:dc:9b:fb:71:5e:12:
38:3a:7c:7f:0e:d6:ff:25:d4:43:05:bd:14:f3:8d:
cb:90:9e:59:d1:05:21:2c:2d:16:0f:eb:c6:25:4f:
7a:a1:ff:ca:77:cc:01:36:3a:d2:bf:b3:17:22:68:
28:d6:1a:5a:5e:9c:51:7e:b5:61:01:5e:2f:32:b9:
47:af:8a:e8:49:ca:52:f4:6c:d9:fc:e7:fd:e0:de:
52:6a:45:7e:c3:fd:83:c4:5d:5e:f0:00:bc:6c:8c:
00:58:6b:03:30:37:32:3e:7f:64:cd:ca:ae:9c:56:
69:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BF:45:C8:66:03:17:97:46:99:BF:F0:7B:4C:3F:2C:7A:78:81:C5
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/J79FyGYDF5dGmb_we0w_LHp4gcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.97.0/24
45.81.35.0/24
Signature Algorithm: sha256WithRSAEncryption
22:21:a5:af:1b:ba:01:4c:91:17:85:e9:e9:b3:16:c1:63:12:
c9:d0:fd:42:b3:1b:75:bf:44:89:bd:12:07:3b:dd:fb:62:e8:
27:0e:20:17:22:28:f4:f2:13:77:e9:1a:d7:fe:bf:04:aa:6d:
3a:d2:11:85:94:38:ce:c3:57:4a:e7:b2:4e:7e:e9:2e:c7:ab:
92:3c:43:1e:16:99:3b:38:c5:6e:5a:3a:40:00:2b:6b:3c:6b:
77:c5:73:88:95:00:3c:a7:04:5a:9f:ab:5b:43:be:9c:90:a2:
b2:05:77:19:b9:32:2e:37:5c:26:e6:cc:cb:35:8c:34:85:57:
09:e2:34:0d:e0:d2:26:66:38:94:5b:e9:96:16:dc:7f:49:21:
2e:1a:fe:1f:83:03:98:ef:08:57:ad:98:d8:83:b3:0e:37:ac:
1a:6a:f8:23:d1:d3:6e:83:18:0f:f2:a4:da:f2:18:d4:2a:24:
34:dd:a2:fb:fd:d0:07:1c:ff:fa:a5:74:be:f6:9c:ad:93:18:
cf:69:a4:fa:30:82:42:1e:63:ad:ce:89:4e:5c:22:e9:31:ff:
a5:27:e9:87:07:cf:a9:47:8d:6e:f4:32:96:f8:c3:f1:77:66:
45:de:5d:69:4c:4d:17:4f:77:a4:66:42:81:69:e7:c1:d3:3f:
2a:ed:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 12:37:51 2024 by rpki-client on console-ams.rpki-client.org