Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/POapBUVQsbtQ0IwNBXceloLFd4g.roa
File: POapBUVQsbtQ0IwNBXceloLFd4g.roa (raw, json)
Hash identifier: 8jA9/ludXcb4UEHqNSUacYbLnjr9RJSyyh6ZR7hoUiw=
Subject key identifier: 3C:E6:A9:05:45:50:B1:BB:50:D0:8C:0D:05:77:1E:96:82:C5:77:88
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01883403CE5E72BC7C5166470169793D217B
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/POapBUVQsbtQ0IwNBXceloLFd4g.roa
Signing time: Fri 19 May 2023 12:37:24 +0000
ROA not before: Fri 19 May 2023 12:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 12:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:03:ce:5e:72:bc:7c:51:66:47:01:69:79:3d:21:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: May 19 12:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ce6a9054550b1bb50d08c0d05771e9682c57788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:7f:ef:a5:8c:f4:6a:1b:1d:d8:97:2a:bf:
12:16:ee:94:b1:ac:15:1d:b0:e1:80:e7:b8:eb:0c:
7c:a5:c8:4f:8e:ae:a3:20:c0:12:05:cf:e0:8e:05:
df:a9:4f:64:3f:c3:e6:09:99:be:a9:32:1e:28:85:
5f:e1:7b:b1:0e:9c:04:b9:1f:a4:83:e1:1b:63:0d:
ff:e0:e2:bc:d1:b1:ef:10:98:e5:00:a5:e6:9e:c9:
65:04:30:c2:e1:83:03:b4:49:20:07:fb:29:0c:5b:
18:09:c9:5c:79:04:9d:7f:f3:86:a4:2c:28:32:bd:
47:23:7f:8e:0d:50:6f:48:b6:87:fa:72:d2:13:c2:
27:e4:da:2e:90:92:67:91:7a:13:63:db:3d:f5:3c:
92:39:6b:95:4a:02:2b:0c:dc:f1:df:4f:37:86:a7:
da:a9:95:19:92:d0:6f:20:0a:65:fe:81:d0:78:bd:
b9:f8:52:27:d2:8d:08:c5:b5:32:14:21:9e:62:63:
52:42:68:3c:37:51:ec:84:d2:2c:55:a5:7d:a3:bd:
6b:ee:24:8f:26:83:32:33:ce:1f:46:5a:7c:84:3d:
f6:13:8f:53:40:94:e2:5b:56:7f:b0:93:a8:66:22:
fa:b6:8d:be:38:ee:c9:0a:81:a9:37:31:ea:8a:4b:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E6:A9:05:45:50:B1:BB:50:D0:8C:0D:05:77:1E:96:82:C5:77:88
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/POapBUVQsbtQ0IwNBXceloLFd4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.179.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f2:f6:6b:b1:6c:1f:ea:ab:c6:fa:11:10:d0:eb:fb:b9:79:
72:62:90:ca:94:18:4c:c1:60:88:05:e7:9d:2c:6c:81:e9:f7:
60:1d:f2:8b:86:eb:25:5c:4b:c6:5e:8b:e6:f7:36:7b:72:99:
46:dd:a4:39:81:7f:70:b9:6f:90:6c:eb:19:e6:cb:e5:95:ec:
d7:ac:9c:92:bd:c7:89:60:12:cb:5d:89:21:1a:86:24:60:80:
bf:3a:b1:0e:d0:45:74:7c:17:41:19:a4:61:c4:43:0d:a4:80:
4d:2e:62:86:98:62:b2:d7:21:47:1e:71:e5:30:79:1f:78:74:
ed:4f:62:9b:37:29:12:19:33:6d:e2:1f:88:4a:d0:8f:c9:86:
58:ab:b8:0e:7c:eb:28:9b:72:2e:5a:68:31:ac:1d:bc:f0:16:
29:11:fe:df:7a:6a:d8:78:1e:b5:da:cd:1c:73:b9:49:20:b9:
cf:44:f9:1a:c9:2c:24:39:04:d4:bd:1a:77:51:96:00:c1:f3:
da:94:7a:cf:8a:c4:2e:f0:40:c0:44:20:6f:c1:57:44:37:e7:
c5:75:cd:c9:7c:eb:cc:5a:36:50:02:92:c1:19:26:22:70:fa:
fd:38:4d:c2:1c:c4:f7:8c:3c:bd:6f:04:30:97:4e:1e:1f:ee:
30:7a:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:14 2024 by rpki-client on console-fra.rpki-client.org