Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5dnlBUTfMC_fVAWH-0bDEsqweJ8.roa
File: 5dnlBUTfMC_fVAWH-0bDEsqweJ8.roa (raw, json)
Hash identifier: VR0AAtjE7OsR5gadL4AR54FeRujM3iEIK+qOyEN5/w0=
Subject key identifier: E5:D9:E5:05:44:DF:30:2F:DF:54:05:87:FB:46:C3:12:CA:B0:78:9F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0185B964FBA5C980252CEC49112BD8808B6C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5dnlBUTfMC_fVAWH-0bDEsqweJ8.roa
Signing time: Mon 16 Jan 2023 07:04:40 +0000
ROA not before: Mon 16 Jan 2023 07:04:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8926
IP address blocks: 81.180.72.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:64:fb:a5:c9:80:25:2c:ec:49:11:2b:d8:80:8b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 16 07:04:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5d9e50544df302fdf540587fb46c312cab0789f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:27:ea:49:70:01:42:51:7f:08:b5:ef:e0:
ad:14:ef:7d:7c:3e:e5:ee:6c:a8:93:ae:16:6b:91:
a4:ae:14:03:cd:93:9a:75:92:74:cb:50:4e:d1:8b:
8a:dd:2b:eb:ca:23:e5:23:fe:ad:7b:f9:67:70:1e:
6c:34:9b:50:a7:99:16:8f:dd:f0:19:93:d7:a5:9c:
b6:8a:d6:77:d0:2f:84:0f:e2:84:e3:79:31:da:56:
ff:14:df:47:cf:e5:c9:03:e7:31:8c:21:47:34:1c:
2c:2c:0a:c9:8e:32:05:db:12:5a:93:69:cd:c4:5c:
6c:d6:57:c8:8f:7a:41:6f:b6:a9:0a:04:df:e7:3c:
0a:54:f3:0e:ec:0c:14:b4:dd:ed:5e:20:44:c3:cc:
cc:d2:84:5c:c5:56:69:29:c1:27:c8:42:bc:bf:f1:
c9:34:c6:6f:e4:c3:94:60:22:1b:8b:76:75:f7:5b:
4f:21:bd:5b:f3:33:7d:d2:a4:b0:e2:bc:c6:29:e3:
35:20:49:dd:d0:f5:e1:e2:e7:c6:6e:18:21:92:63:
14:84:7d:ca:d2:98:ed:ce:5c:3b:72:36:55:fb:57:
57:57:7f:00:24:f8:4a:b0:fa:c5:00:b9:ba:58:76:
73:99:6d:89:44:35:87:84:0f:b4:8e:d0:07:f2:41:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:E5:05:44:DF:30:2F:DF:54:05:87:FB:46:C3:12:CA:B0:78:9F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5dnlBUTfMC_fVAWH-0bDEsqweJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.72.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:22:3a:f6:b8:90:a1:81:93:da:e0:01:7f:89:1d:9c:8e:f9:
9e:1f:60:6b:85:71:13:cf:5e:b2:ad:8a:40:90:7e:6d:a0:c5:
31:f9:f0:1f:d8:5c:e1:a9:69:7a:8c:23:08:56:83:3d:13:ad:
e2:e3:45:25:51:6f:ed:ab:18:fb:2a:a2:d2:9a:7c:c0:17:f7:
5c:62:a8:9a:12:2f:f3:14:3e:22:d7:a4:75:31:1d:70:40:1c:
b8:c8:43:f7:76:1d:32:3b:56:8b:d2:37:4f:dc:cf:60:b8:c3:
48:84:b2:00:70:db:55:7b:1a:cd:ad:ca:60:9b:9b:b1:0c:9e:
67:57:e4:ac:0a:d7:bc:e3:0e:d6:6d:25:28:64:cf:67:af:d7:
25:ad:b4:a8:d1:4c:df:a2:a2:f3:94:31:d7:56:00:43:f0:fd:
25:f1:54:f4:3e:14:5c:8e:7d:dd:03:54:16:08:d0:0e:df:ab:
6c:4a:28:15:51:f6:9a:2b:27:67:0a:02:66:5a:f2:8e:31:89:
26:3d:0a:23:5f:9e:5c:c8:bb:56:33:7e:86:51:ad:d8:7f:cb:
54:07:8b:84:d3:58:a6:dd:34:b4:fe:79:0a:b2:7a:ed:e9:86:
b8:9a:11:04:e1:1d:07:bb:77:ac:1e:1c:bd:50:01:9e:3c:52:
7e:38:ce:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:48 2024 by rpki-client on console-ams.rpki-client.org