Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/5tvWgv15p_U8tOwXTtFHWtK9SMU.roa
File: 5tvWgv15p_U8tOwXTtFHWtK9SMU.roa (raw, json)
Hash identifier: vvuDaHc3K2gZlCLa3AkURxGhX5jFx/B6cp8ZudNppAc=
Subject key identifier: E6:DB:D6:82:FD:79:A7:F5:3C:B4:EC:17:4E:D1:47:5A:D2:BD:48:C5
Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial: 0185C931D21F0846CFDE654FB445519274D3
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/5tvWgv15p_U8tOwXTtFHWtK9SMU.roa
Signing time: Thu 19 Jan 2023 08:42:43 +0000
ROA not before: Thu 19 Jan 2023 08:42:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206801
IP address blocks: 5.180.168.0/24 maxlen: 24
5.180.170.0/24 maxlen: 24
5.180.168.0/23 maxlen: 23
5.180.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 27 Feb 2023 08:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:31:d2:1f:08:46:cf:de:65:4f:b4:45:51:92:74:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Validity
Not Before: Jan 19 08:42:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6dbd682fd79a7f53cb4ec174ed1475ad2bd48c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7d:62:45:34:62:e6:2a:ae:e2:57:12:c9:da:
67:12:c2:7b:bd:20:a2:a2:75:af:62:63:9a:8b:cd:
ff:08:d6:af:49:1f:3c:16:0f:0f:9d:dd:cf:8b:cc:
e2:ac:e8:6e:6c:0d:49:de:b4:df:87:1f:ba:8c:92:
de:ef:be:6c:b2:8a:e1:d1:5a:54:8c:03:5a:a5:e3:
5b:1a:b0:af:95:26:65:2c:80:0b:eb:13:ac:6d:41:
ac:57:15:cd:f1:73:a1:be:5c:0f:65:23:33:8e:4d:
0c:50:9f:65:98:27:b8:05:be:9f:ef:2c:ff:eb:37:
48:66:16:f3:38:a9:ea:7f:93:25:29:9c:67:48:be:
10:0e:0d:65:4a:fb:a3:4c:a8:19:40:b8:8a:38:44:
ee:8f:aa:dc:b5:5a:65:a2:12:25:5f:54:bf:33:97:
bd:99:6d:10:23:b0:09:a5:47:e0:36:e2:74:6c:61:
b8:b9:6c:dd:ba:a3:f9:b1:c0:59:72:32:74:e2:bc:
40:90:59:9b:16:2c:3f:a7:71:3c:71:c9:76:95:50:
00:5b:fc:ff:cd:99:07:e2:4d:11:2f:00:79:95:fb:
f8:ce:32:78:1f:7b:ac:57:75:2f:07:08:1d:21:1a:
0b:2d:87:bc:9f:5e:ad:b9:c0:01:76:7e:fd:ce:d2:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DB:D6:82:FD:79:A7:F5:3C:B4:EC:17:4E:D1:47:5A:D2:BD:48:C5
X509v3 Authority Key Identifier:
keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/5tvWgv15p_U8tOwXTtFHWtK9SMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:f9:10:41:71:67:6d:37:1b:39:8e:7c:52:ca:69:92:65:d8:
d3:b4:38:f4:ff:71:5f:f4:c1:dc:60:85:2e:5b:7a:1a:3f:d6:
1c:3f:b1:fa:ee:c1:1f:fd:b7:71:07:3c:df:d3:53:40:1f:88:
3f:4e:bf:f4:8c:07:92:68:3c:91:ce:62:06:60:3f:1a:9e:8e:
d5:aa:af:e7:c9:f8:ec:6e:9e:46:4c:c4:68:1a:91:ab:7b:00:
a7:ff:77:a5:bf:9c:8f:46:0c:df:b7:28:93:c2:f3:83:55:bc:
fa:2b:70:58:3f:0e:4b:d2:02:ea:c1:16:9a:02:5f:73:0b:57:
db:a5:7a:f5:53:d7:26:3f:db:cb:2a:1c:80:9e:70:53:bc:3b:
66:6b:3a:76:e5:9c:12:5d:56:29:09:19:d9:16:b5:5f:93:36:
5b:36:e2:68:1b:4e:f4:5f:4c:d9:2b:49:ec:d3:68:da:a4:33:
26:dd:59:f7:02:08:1b:18:3f:84:03:91:6c:5e:e1:98:b3:a0:
a4:9f:bd:9f:f4:25:55:1d:ed:6b:dd:8e:c4:06:21:7a:52:81:
4a:19:b3:ca:2c:fc:41:c4:7c:86:12:4e:04:12:59:2f:cb:f4:
6d:96:a0:d4:4c:75:ff:4e:2e:66:5f:55:0f:d9:91:eb:e5:df:
84:44:12:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXJMdIfCEbP3mVPtEVRknTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODAxMmZhMTRhY2U3YTBjM2JkMmU4MmUwYTI5ZDlhNDRi
ZmUyOTAwHhcNMjMwMTE5MDg0MjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmRiZDY4MmZkNzlhN2Y1M2NiNGVjMTc0ZWQxNDc1YWQyYmQ0OGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi31iRTRi5iqu4lcSydpnEsJ7vSCi
onWvYmOai83/CNavSR88Fg8Pnd3Pi8zirOhubA1J3rTfhx+6jJLe775ssorh0VpU
jANapeNbGrCvlSZlLIAL6xOsbUGsVxXN8XOhvlwPZSMzjk0MUJ9lmCe4Bb6f7yz/
6zdIZhbzOKnqf5MlKZxnSL4QDg1lSvujTKgZQLiKOETuj6rctVplohIlX1S/M5e9
mW0QI7AJpUfgNuJ0bGG4uWzduqP5scBZcjJ04rxAkFmbFiw/p3E8ccl2lVAAW/z/
zZkH4k0RLwB5lfv4zjJ4H3usV3UvBwgdIRoLLYe8n16tucABdn79ztIHPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFObb1oL9eaf1PLTsF07RR1rSvUjFMB8GA1UdIwQY
MBaAFD2AEvoUrOegw70uguCinZpEv+KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lZjVlZDEtYmRlZS00NjM5LTkyNDgt
NzdmODRjNTYyYTVmLzEvNXR2V2d2MTVwX1U4dE93WFR0RkhXdEs5U01VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lZjVlZDEtYmRlZS00NjM5LTkyNDgtNzdmODRjNTYyYTVm
LzEvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbSoMA0G
CSqGSIb3DQEBCwUAA4IBAQAf+RBBcWdtNxs5jnxSymmSZdjTtDj0/3Ff9MHcYIUu
W3oaP9YcP7H67sEf/bdxBzzf01NAH4g/Tr/0jAeSaDyRzmIGYD8ano7Vqq/nyfjs
bp5GTMRoGpGrewCn/3elv5yPRgzftyiTwvODVbz6K3BYPw5L0gLqwRaaAl9zC1fb
pXr1U9cmP9vLKhyAnnBTvDtmazp25ZwSXVYpCRnZFrVfkzZbNuJoG070X0zZK0ns
02japDMm3Vn3AggbGD+EA5FsXuGYs6Ckn72f9CVVHe1r3Y7EBiF6UoFKGbPKLPxB
xHyGEk4EElkvy/RtlqDUTHX/Ti5mX1UP2ZHr5d+ERBIm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-fra.rpki-client.org