Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/xjgU_qdpkFW6MH7E7tri0_9okhE.roa
File: xjgU_qdpkFW6MH7E7tri0_9okhE.roa (raw, json)
Hash identifier: 0zhETuK+fcBkpVdgNvMBFB9zHqsIJ4ZD/0hdeZI28tY=
Subject key identifier: C6:38:14:FE:A7:69:90:55:BA:30:7E:C4:EE:DA:E2:D3:FF:68:92:11
Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial: 018570B08A49B69B124F181062D4F216375E
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/xjgU_qdpkFW6MH7E7tri0_9okhE.roa
Signing time: Mon 02 Jan 2023 04:14:55 +0000
ROA not before: Mon 02 Jan 2023 04:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209137
IP address blocks: 5.180.168.0/23 maxlen: 23
5.180.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jan 2023 08:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:8a:49:b6:9b:12:4f:18:10:62:d4:f2:16:37:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Validity
Not Before: Jan 2 04:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c63814fea7699055ba307ec4eedae2d3ff689211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:d7:79:73:16:11:03:04:04:50:d3:b0:1b:
98:ae:e8:de:8b:23:8f:f7:c5:ed:6b:d5:d9:95:e5:
a9:63:ed:2f:f8:77:93:9b:b2:50:26:65:78:d6:83:
9b:c0:00:ba:85:0e:a5:99:ad:a1:90:d3:de:c7:24:
fd:42:37:95:d1:14:c3:4e:3e:dc:1a:dd:38:38:bd:
25:3c:91:00:09:45:52:62:fa:5a:e9:d3:5f:71:21:
31:e5:d0:04:70:ad:a1:48:a9:ff:e0:5b:45:76:43:
81:f0:f3:51:b9:38:4b:80:ee:17:bb:ca:4b:90:87:
1c:7c:b7:4e:25:5a:09:05:8e:03:d0:c1:17:66:74:
6a:90:74:72:01:cd:92:5c:f0:2b:35:03:27:b1:bc:
4b:bc:c1:fc:2d:56:af:6e:85:c2:34:34:40:8b:8b:
fe:da:5c:67:d1:0f:ad:71:bc:54:99:23:38:d9:91:
ce:ed:88:de:73:c6:a4:92:4b:bd:d4:58:e2:fa:90:
90:c7:c0:5f:be:27:d6:cd:5d:18:8e:af:45:a6:f8:
54:fe:c2:e9:e2:e9:fa:24:d2:5c:50:52:b2:15:93:
63:28:e5:a0:34:1f:44:db:61:7c:ee:bd:53:17:9c:
53:21:85:fb:cf:67:56:08:8c:6f:e5:45:6e:4a:62:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:38:14:FE:A7:69:90:55:BA:30:7E:C4:EE:DA:E2:D3:FF:68:92:11
X509v3 Authority Key Identifier:
keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/xjgU_qdpkFW6MH7E7tri0_9okhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.168.0-5.180.170.255
Signature Algorithm: sha256WithRSAEncryption
7a:49:af:54:96:4a:7c:f9:2b:20:a9:50:c3:e9:9f:5d:df:ab:
31:bf:7f:b8:9a:e0:66:cc:9d:7d:97:78:74:3e:da:88:2c:18:
73:ba:53:15:68:bd:bf:da:63:0d:05:9b:1b:0c:3f:c0:b2:cd:
5b:b1:b2:0b:d3:92:7c:5e:40:c8:b2:2f:c1:3c:34:1f:7f:9d:
20:78:90:98:1c:6b:d3:1b:5d:a9:cc:10:31:7e:56:53:2d:5d:
bd:50:f9:90:ad:c8:a4:6f:02:54:6d:9c:bd:b2:f8:ed:a5:47:
79:1b:e2:8f:83:bf:56:c6:05:bc:20:48:47:23:c2:ee:4c:33:
a2:6f:c0:37:9c:25:43:db:ce:b3:a8:0d:cb:e6:e9:b4:b2:49:
2f:9b:ea:fc:02:be:99:a6:42:0b:38:9c:f0:81:5b:dc:ca:0a:
5a:c9:6e:29:c0:0d:c6:f5:40:cd:88:de:f4:06:d2:e2:34:7b:
c8:e8:dc:42:fa:44:f4:01:57:2a:75:41:77:02:80:8e:84:c6:
69:0a:12:06:6e:8b:7e:60:eb:ba:57:da:29:12:c6:58:05:a7:
cb:dd:b1:d2:69:1d:e1:2d:6f:96:a9:8c:cb:b2:a4:c2:03:3a:
a5:48:01:d3:01:2a:02:df:4b:de:39:0e:7c:25:80:c8:0d:4c:
7f:a9:ca:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:04 2024 by rpki-client on console-ams.rpki-client.org