Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/tJP-0v6QNdTfFQsTcO5pwwYvyAI.roa
File: tJP-0v6QNdTfFQsTcO5pwwYvyAI.roa (raw, json)
Hash identifier: HXFjYE7SIkepNI/RYvpvWjjaWF45rZnVrT2eVba1z1M=
Subject key identifier: B4:93:FE:D2:FE:90:35:D4:DF:15:0B:13:70:EE:69:C3:06:2F:C8:02
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 018CC9BC3E4ACA2128F3EDDD26A250792C67
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/tJP-0v6QNdTfFQsTcO5pwwYvyAI.roa
Signing time: Tue 02 Jan 2024 10:33:26 +0000
ROA not before: Tue 02 Jan 2024 10:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56987
IP address blocks: 5.180.57.0/24 maxlen: 24
5.180.58.0/23 maxlen: 23
2a0c:3d00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 10 Jan 2024 08:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3e:4a:ca:21:28:f3:ed:dd:26:a2:50:79:2c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Jan 2 10:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b493fed2fe9035d4df150b1370ee69c3062fc802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:48:ab:b2:db:46:96:80:78:04:81:3a:20:69:
31:06:02:60:fc:b7:29:99:ae:e0:ec:3e:c3:7d:f6:
30:9d:13:25:d8:a6:7d:18:2b:5a:c0:3e:a7:80:73:
e6:99:45:df:17:5f:00:4d:60:b4:45:de:25:11:7a:
6d:b6:15:e8:0a:cf:30:af:f1:50:73:f0:d6:71:d6:
20:60:7e:01:0e:a9:99:79:d0:98:67:0a:49:44:77:
cd:c4:8f:99:4a:fd:64:0c:74:6e:82:11:66:56:7c:
b7:68:e9:cd:0f:4a:00:57:1a:aa:df:65:a9:c1:ec:
c5:78:ae:f3:24:bd:54:b6:85:74:fa:dc:f2:b9:c5:
68:23:1d:bf:04:8d:f2:c6:4f:46:a9:d2:cb:b9:80:
b3:88:b4:e1:aa:e0:e4:d4:cd:60:f3:78:b8:df:cf:
61:6f:cc:9b:09:f4:0d:57:f3:2f:8a:23:93:aa:b2:
e0:ef:46:b1:29:2c:3e:d8:63:f6:78:6a:25:a5:be:
bf:11:63:0b:e4:39:84:87:04:56:85:80:76:6b:bd:
2f:35:75:6f:ae:c4:f5:7b:5e:5d:d9:dd:d1:09:07:
37:9b:e7:8b:78:f4:10:ae:42:77:08:96:17:75:1c:
b9:e4:d4:b4:3f:54:5b:78:16:0c:d3:ab:1e:be:eb:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:93:FE:D2:FE:90:35:D4:DF:15:0B:13:70:EE:69:C3:06:2F:C8:02
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/tJP-0v6QNdTfFQsTcO5pwwYvyAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.57.0-5.180.59.255
IPv6:
2a0c:3d00::/29
Signature Algorithm: sha256WithRSAEncryption
3b:ff:79:c9:0d:63:ed:91:d2:42:e5:e9:48:ec:8d:c1:52:b2:
25:be:44:cd:22:01:fd:6e:fb:96:c5:32:07:b6:17:89:39:6a:
bf:3b:32:86:a5:9a:1c:0d:0c:9f:7b:b8:95:6b:28:c5:ae:11:
98:0a:be:56:25:2e:cc:10:c3:e0:2f:81:24:51:ed:c0:59:87:
b1:ae:ae:9d:40:25:a4:99:44:11:02:fe:f2:c6:e4:1c:14:97:
da:dc:df:d5:9c:a7:f2:8e:dc:ed:bf:c7:14:24:09:61:1a:9e:
fc:69:7e:51:31:9c:02:d8:c6:aa:08:83:1d:c8:0a:3e:76:e1:
57:ad:13:cd:a7:62:40:bb:7f:1d:b6:af:a4:7e:a3:2e:d0:ef:
09:b3:bc:0c:5e:4d:29:07:7e:e4:96:99:70:cb:57:05:fa:f2:
b3:9d:41:a8:5a:11:1e:ee:bb:4a:80:05:d7:91:7c:ab:bc:cd:
fd:3d:13:39:44:a5:b7:2f:19:49:83:2f:a5:fe:69:5b:cb:e8:
66:63:ee:0e:cc:95:3c:be:d6:0d:42:03:58:b4:5a:15:aa:ed:
ea:44:cf:07:6d:fc:3d:23:0c:37:6c:46:c6:d2:03:92:2e:9c:
cb:b6:2d:b8:61:5a:91:50:48:d5:03:66:b7:ee:da:75:04:e1:
98:50:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:03 2024 by rpki-client on console-ams.rpki-client.org