Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/qK5xhyTuJT814_ab-flDvAA9ufU.roa
File: qK5xhyTuJT814_ab-flDvAA9ufU.roa (raw, json)
Hash identifier: W4IXpf/896+SmT5Nq4WyV3xONoNAfcM8rpA3EtqNUhQ=
Subject key identifier: A8:AE:71:87:24:EE:25:3F:35:E3:F6:9B:F9:F9:43:BC:00:3D:B9:F5
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018572CCAAB29BCB5587810FCD393379122C
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/qK5xhyTuJT814_ab-flDvAA9ufU.roa
Signing time: Mon 02 Jan 2023 14:04:53 +0000
ROA not before: Mon 02 Jan 2023 14:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 5.180.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jan 2023 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:aa:b2:9b:cb:55:87:81:0f:cd:39:33:79:12:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 2 14:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8ae718724ee253f35e3f69bf9f943bc003db9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a8:60:3a:2e:35:6b:3d:c3:3e:1a:4b:88:14:
7c:0c:3c:38:d1:c0:1a:ec:b3:44:67:c5:7e:8a:11:
9a:69:91:4f:ce:97:64:bf:e6:f0:d2:7d:50:69:19:
ab:e9:59:95:58:b6:6d:95:f8:b0:c4:57:9b:5a:d7:
13:58:fd:d7:cb:e2:47:0d:ac:97:55:7c:10:55:a4:
0f:fb:3e:73:42:78:54:79:f8:3a:0a:8a:1e:5b:7c:
f2:16:cb:ef:5c:59:27:5c:9f:00:58:9d:94:fe:c0:
e9:5f:63:5e:a0:4f:4b:5b:f1:64:db:0d:dc:83:6f:
c7:7a:ea:43:a4:f5:7c:9d:a1:53:15:bd:37:e3:3e:
fb:de:48:7b:dc:2e:4f:61:e0:af:90:c2:b9:92:2d:
0e:d3:4e:09:95:ec:63:c8:a0:b1:7b:e5:69:c3:59:
07:08:07:a7:43:4f:f7:98:6a:e5:82:54:6c:43:b3:
82:4a:f9:b9:48:82:4b:17:9e:ba:48:e1:c2:13:3d:
97:32:97:94:5f:07:0e:09:6f:e4:bf:83:c0:6f:bc:
50:5b:48:31:c8:d1:32:10:95:50:85:63:53:bd:50:
24:00:38:7f:f3:40:8e:ca:7a:25:6e:14:5f:53:b6:
2e:01:31:57:b8:2a:9d:b9:f0:ed:31:8f:bb:4c:0a:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AE:71:87:24:EE:25:3F:35:E3:F6:9B:F9:F9:43:BC:00:3D:B9:F5
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/qK5xhyTuJT814_ab-flDvAA9ufU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:9a:cb:1a:ea:0c:c3:1e:97:c4:fb:1f:73:b4:59:54:14:4b:
b4:ee:a7:ba:a3:a8:c8:59:ec:30:d7:77:9e:0f:89:32:d9:5b:
fe:15:1f:92:7c:a8:b1:9a:76:54:10:53:8b:87:7d:19:e8:4f:
c4:a8:0a:03:19:d6:09:f1:be:a6:7c:82:1e:13:e2:29:5b:08:
f4:ee:2a:b7:1d:8a:0a:76:6c:83:df:b8:d3:ef:46:f9:66:3b:
88:99:e3:7d:0e:b4:91:b3:9f:bc:28:87:cf:cf:33:f7:28:91:
7d:37:b1:74:39:50:81:7f:49:83:e0:b1:70:da:c7:b8:2c:1e:
dd:75:48:39:26:11:60:5b:74:eb:0c:68:89:34:cf:c8:c5:f2:
30:50:50:8c:63:23:e7:0f:79:45:be:26:9e:46:06:a5:6d:f8:
2c:e5:e3:c8:08:64:83:df:d8:11:39:81:83:4e:48:eb:e8:dd:
65:f1:28:c6:10:e8:1f:31:bd:44:95:f5:f4:3a:02:f0:3e:0e:
a0:bc:b9:dc:9b:67:c3:b1:3d:89:ea:d5:69:92:66:42:e4:5e:
5d:5e:ee:70:eb:32:ff:f4:0e:05:14:39:37:a1:44:2c:53:ca:
66:ca:b3:df:d4:7e:15:a4:28:09:fd:78:4a:7c:e4:8d:04:4b:
0b:fb:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:06 2024 by rpki-client on console-ams.rpki-client.org