Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-4UB7i-yao0dKj8Wo_I3dYz84Hw.roa
File: 1-4UB7i-yao0dKj8Wo_I3dYz84Hw.roa (raw, json)
Hash identifier: fiEM56MqT2l/nHkw7cFbK3otZLsfzT0ZuCdnZ83/yGk=
Subject key identifier: FB:85:01:EE:2F:B2:6A:8D:1D:2A:3F:16:A3:F2:37:75:8C:FC:E0:7C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018891E08FA68FD08BC91A20E280B119E07C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-4UB7i-yao0dKj8Wo_I3dYz84Hw.roa
Signing time: Tue 06 Jun 2023 18:03:13 +0000
ROA not before: Tue 06 Jun 2023 18:03:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399686
IP address blocks: 5.180.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:e0:8f:a6:8f:d0:8b:c9:1a:20:e2:80:b1:19:e0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 6 18:03:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb8501ee2fb26a8d1d2a3f16a3f237758cfce07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:15:7c:12:8b:19:d5:ea:b8:b1:97:5e:c3:
95:ff:a9:7d:d9:cc:4c:cd:79:ca:56:da:5c:4d:56:
31:05:22:10:90:90:a3:68:53:ab:0c:af:09:04:93:
35:3a:38:52:5c:49:00:bc:e6:b4:37:1f:bb:1b:07:
7a:e0:72:23:c6:d1:f6:16:87:3d:2d:c0:f5:b3:56:
13:19:93:9b:74:8a:a1:86:6e:18:22:b0:3b:21:4f:
84:77:77:5a:44:51:10:57:bf:5d:95:5e:3f:eb:1c:
53:12:48:b8:be:ce:4b:c6:63:72:77:6a:bb:37:6d:
9f:23:87:9f:58:3b:61:47:06:a8:11:6d:b8:0b:06:
36:24:14:70:31:00:9a:ba:3b:5f:c6:09:7a:87:48:
f2:be:2b:5c:c1:b6:8a:c3:ad:51:3f:8a:96:7c:dc:
17:80:4f:dd:49:9a:4f:1c:16:c0:7d:36:9c:27:95:
46:99:52:25:34:40:81:86:9e:1c:20:c3:22:98:fc:
78:05:f2:14:d8:47:16:78:3f:32:50:f3:bf:8f:9a:
de:2e:14:a3:88:08:d9:23:29:13:8c:e4:ff:f4:f0:
b7:9a:9b:2d:ad:0a:d9:56:8c:af:fd:53:03:f3:6c:
a7:ca:01:13:46:aa:b5:0a:5c:61:25:0c:e6:0a:fa:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:85:01:EE:2F:B2:6A:8D:1D:2A:3F:16:A3:F2:37:75:8C:FC:E0:7C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-4UB7i-yao0dKj8Wo_I3dYz84Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:46:26:80:f3:56:6e:f6:b3:f4:9d:2e:bb:70:20:0c:71:dc:
6e:29:a1:68:36:16:19:8f:cc:b1:15:d8:f8:af:a0:83:93:a3:
91:5a:ff:28:eb:49:e2:12:ac:8d:6c:4b:29:81:a0:df:ac:e2:
e6:eb:ca:a7:a4:23:6b:c4:e6:35:7e:41:ad:3b:66:1a:c7:b5:
e3:51:8b:1d:7c:a8:fb:7c:8d:b2:7e:88:5f:80:9a:89:73:a8:
6e:11:0b:b1:3d:b5:17:01:6a:d6:a4:eb:42:59:8b:00:c6:f8:
cd:7a:e0:ff:2e:8e:b3:eb:41:0b:d9:4f:c7:dc:37:06:34:16:
a0:37:04:6c:3b:bc:9d:a8:e2:14:7b:97:89:96:b4:66:63:ad:
40:32:8b:7a:41:27:be:41:b4:35:57:65:95:52:1a:4d:0e:e9:
fd:b1:0c:cb:bd:04:1a:30:88:fc:51:87:be:7f:ce:84:01:36:
a3:97:b2:74:e6:a3:65:b0:0a:2d:dc:23:d6:f5:cb:d6:b8:fa:
87:25:8b:99:57:15:02:17:95:58:46:54:bc:86:9a:3f:37:d1:
43:71:5b:fd:3b:0c:52:77:86:37:64:39:62:03:86:22:17:32:
f6:0c:e8:52:78:fd:42:b6:8c:61:91:4b:f0:b5:1d:3e:61:32:
7d:20:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 6 10:51:20 2023 by rpki-client on console-ams.rpki-client.org