Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/5JSSvUcq5jFpO_9Q4QVJ7-RnqeA.roa
File: 5JSSvUcq5jFpO_9Q4QVJ7-RnqeA.roa (raw, json)
Hash identifier: epxT+sLt+VrRVD0bzvFnC/xNHFTaRGyN3qUQxN7Cpag=
Subject key identifier: E4:94:92:BD:47:2A:E6:31:69:3B:FF:50:E1:05:49:EF:E4:67:A9:E0
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 018C64751DFB84B8D13CB16F88E41A6EF2D3
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/5JSSvUcq5jFpO_9Q4QVJ7-RnqeA.roa
Signing time: Wed 13 Dec 2023 18:34:06 +0000
ROA not before: Wed 13 Dec 2023 18:34:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 130.180.224.0/19 maxlen: 19
130.180.224.0/22 maxlen: 22
130.180.240.0/21 maxlen: 21
130.180.248.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:75:1d:fb:84:b8:d1:3c:b1:6f:88:e4:1a:6e:f2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Dec 13 18:34:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e49492bd472ae631693bff50e10549efe467a9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:30:3b:c3:4e:8d:aa:45:82:e0:28:4c:ab:
b1:22:ed:68:15:cd:ae:ca:f0:af:04:8c:bc:ff:c8:
e3:c4:40:aa:12:ab:8a:8e:de:83:71:68:70:3d:4d:
38:aa:1d:72:5e:8e:86:1d:b7:69:ff:72:92:35:ae:
83:e6:61:bc:e0:20:ca:5e:fb:18:1a:ed:5f:49:af:
1a:6d:7e:37:a5:4b:8c:d5:84:6c:21:2b:20:c4:be:
eb:b2:fb:f3:fe:3d:c5:b5:7b:62:de:70:15:ff:f1:
0d:9c:4d:f9:68:58:82:bc:46:6f:b2:c3:62:7e:d7:
0f:06:ef:3a:dd:52:af:c2:f4:49:5d:cc:1a:93:d1:
a4:c5:70:fb:d6:ea:ed:45:6c:0c:84:24:7b:05:38:
a1:7a:b3:ee:de:ce:81:9d:18:c1:3c:52:dc:cd:f7:
73:5f:23:b0:43:2d:40:4b:5b:8c:61:c6:8c:9a:e7:
64:b1:26:3f:4a:1f:57:71:0a:ef:1a:f1:d4:2f:98:
f5:2c:12:66:dd:98:84:d7:ef:32:d0:34:75:94:d4:
de:07:1e:31:a5:62:f8:b2:c7:a7:5b:bb:58:78:fc:
9e:9e:f1:6a:f5:2c:82:87:2b:eb:a8:13:ea:20:8e:
f8:5c:f6:3e:24:09:58:89:fc:08:3c:ca:ac:20:54:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:94:92:BD:47:2A:E6:31:69:3B:FF:50:E1:05:49:EF:E4:67:A9:E0
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/5JSSvUcq5jFpO_9Q4QVJ7-RnqeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.180.224.0/19
Signature Algorithm: sha256WithRSAEncryption
15:d3:90:c2:aa:d0:13:0e:a3:ed:0e:b0:a2:85:16:06:85:30:
49:58:db:fb:7e:b6:d4:5a:69:4e:eb:3f:7f:7b:95:81:5d:8f:
39:74:9a:ce:dd:7d:af:12:a3:18:f9:69:aa:04:1e:83:44:1b:
ca:1f:0b:f2:75:20:40:0e:d2:e3:6e:53:71:e7:bc:6f:b5:65:
ae:c5:58:f0:d9:88:07:ce:98:d3:c7:2c:76:6f:b4:0f:f9:d8:
f0:f0:74:d7:6c:ec:05:86:f4:79:d3:57:71:c7:4a:86:7f:e5:
b4:dd:9e:36:75:95:07:c2:67:e4:c2:f7:3e:3a:1a:5a:32:37:
6a:65:ec:29:4d:b3:b2:2e:bf:9d:70:4e:c4:74:eb:0b:72:a0:
39:2b:3c:09:5f:46:34:2c:21:68:81:eb:72:6b:ab:bd:79:72:
31:4a:ab:b6:05:31:c0:47:f9:2d:45:e2:c7:94:e5:4f:e6:65:
23:ab:79:be:44:ee:58:99:04:98:7d:28:02:65:eb:67:f8:bf:
ca:20:4b:d1:a2:4f:d1:f1:a7:74:62:2a:0a:0d:6c:ca:94:94:
13:a0:55:ac:69:f9:9a:c0:93:92:27:b9:c5:9a:a8:c4:2a:f8:
de:b2:3b:26:5a:44:4a:e1:26:9d:db:e4:a9:e5:51:aa:35:eb:
d5:2b:91:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxkdR37hLjRPLFviOQabvLTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MmRiOWI4MGRmYjljOTU2NzhiMDdlZjJjOTUzZDYzMTA3
ZjVmNjIwHhcNMjMxMjEzMTgzNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDk0OTJiZDQ3MmFlNjMxNjkzYmZmNTBlMTA1NDllZmU0NjdhOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CQwO8NOjapFguAoTKuxIu1oFc2u
yvCvBIy8/8jjxECqEquKjt6DcWhwPU04qh1yXo6GHbdp/3KSNa6D5mG84CDKXvsY
Gu1fSa8abX43pUuM1YRsISsgxL7rsvvz/j3FtXti3nAV//ENnE35aFiCvEZvssNi
ftcPBu863VKvwvRJXcwak9GkxXD71urtRWwMhCR7BTiherPu3s6BnRjBPFLczfdz
XyOwQy1AS1uMYcaMmudksSY/Sh9XcQrvGvHUL5j1LBJm3ZiE1+8y0DR1lNTeBx4x
pWL4ssenW7tYePyenvFq9SyChyvrqBPqII74XPY+JAlYifwIPMqsIFTBywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOSUkr1HKuYxaTv/UOEFSe/kZ6ngMB8GA1UdIwQY
MBaAFKktubgN+5yVZ4sH7yyVPWMQf19iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDIt
Y2I3YTVmZDFhYzQ3LzEvNUpTU3ZVY3E1akZwT185UTRRVko3LVJucWVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDItY2I3YTVmZDFhYzQ3
LzEvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgrTgMA0G
CSqGSIb3DQEBCwUAA4IBAQAV05DCqtATDqPtDrCihRYGhTBJWNv7frbUWmlO6z9/
e5WBXY85dJrO3X2vEqMY+WmqBB6DRBvKHwvydSBADtLjblNx57xvtWWuxVjw2YgH
zpjTxyx2b7QP+djw8HTXbOwFhvR501dxx0qGf+W03Z42dZUHwmfkwvc+OhpaMjdq
ZewpTbOyLr+dcE7EdOsLcqA5KzwJX0Y0LCFogetya6u9eXIxSqu2BTHAR/ktReLH
lOVP5mUjq3m+RO5YmQSYfSgCZetn+L/KIEvRok/R8ad0YioKDWzKlJQToFWsafma
wJOSJ7nFmqjEKvjesjsmWkRK4Sad2+Sp5VGqNevVK5Fw
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:34 2024 by rpki-client on console-fra.rpki-client.org