Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-9XE61POnSct2Qb9VTyX8KObA28.roa
File: 1-9XE61POnSct2Qb9VTyX8KObA28.roa (raw, json)
Hash identifier: tAfhNmWWEKaQpSOF4xB8Lye++Jh29WvbbrMCySobpQ8=
Subject key identifier: FB:D5:C4:EB:53:CE:9D:27:2D:D9:06:FD:55:3C:97:F0:A3:9B:03:6F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0189CC3FC258F53F633431009D8F05EEB9C6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-9XE61POnSct2Qb9VTyX8KObA28.roa
Signing time: Sun 06 Aug 2023 19:07:57 +0000
ROA not before: Sun 06 Aug 2023 19:07:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.49.0/24 maxlen: 24
5.180.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:3f:c2:58:f5:3f:63:34:31:00:9d:8f:05:ee:b9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 6 19:07:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbd5c4eb53ce9d272dd906fd553c97f0a39b036f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:d1:28:73:90:49:63:0a:2b:e8:f4:4f:a9:
e8:6c:9a:51:98:d5:19:74:10:d7:5d:04:c9:54:5b:
94:95:b2:22:f9:92:51:77:8c:7f:b0:b6:32:de:73:
fa:46:cf:3c:5d:f8:3c:f2:05:6b:ab:b6:b2:72:46:
da:f4:ac:8e:bb:01:c7:c3:39:e5:a6:0c:a8:e7:fe:
c9:f0:ae:2e:f4:b8:2d:8f:ab:dd:c0:01:42:35:6a:
22:b7:07:d4:66:2d:07:13:f8:e1:cc:54:83:e0:92:
d3:0e:0a:ae:86:2a:ef:48:de:26:aa:84:69:18:81:
31:1c:83:f9:e0:1b:92:08:3d:21:3a:50:12:95:bf:
94:c2:53:5c:eb:d5:c6:8f:8a:fb:56:ca:75:ff:d0:
eb:c7:49:c3:85:52:3a:9e:52:fc:fe:37:6b:13:f5:
71:bf:ad:93:2c:bf:c6:17:c8:e9:16:ee:c5:96:78:
ae:c4:5f:36:f0:fb:2e:05:3f:2e:88:da:7f:33:57:
4c:46:a4:ba:2b:c5:64:c7:d4:87:ee:5c:e9:0e:e0:
d6:cd:27:e4:13:34:bf:43:2c:f9:8d:40:da:cd:a4:
c5:4d:a8:a3:97:e4:a3:0c:67:9d:3c:07:24:1f:df:
c9:0b:57:0a:6d:80:a3:f8:4b:40:86:33:38:1f:b2:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D5:C4:EB:53:CE:9D:27:2D:D9:06:FD:55:3C:97:F0:A3:9B:03:6F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-9XE61POnSct2Qb9VTyX8KObA28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.49.0/24
5.180.82.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:4e:7e:20:97:d7:59:f0:41:e3:6a:fa:09:b3:ca:ce:8a:91:
9f:fe:fe:1d:35:f8:bd:b6:f5:6e:90:b2:41:b3:42:62:1d:79:
30:ca:8b:95:b8:6f:10:c8:17:95:9c:94:fc:5d:e8:19:fd:0a:
4a:32:0c:49:21:fd:a5:92:28:08:b1:50:45:a9:0c:86:61:43:
1d:e3:65:d7:2a:e8:15:d3:36:4c:8d:30:06:5e:b8:58:b9:65:
88:41:5c:4c:f1:a9:7b:d9:98:d6:da:5f:21:81:59:29:54:97:
f0:76:8c:69:a3:9b:53:3c:ab:02:a6:f5:18:9d:e4:61:40:7d:
09:66:a8:d2:47:5a:33:e4:ae:aa:4f:0d:80:45:09:b5:7a:62:
1d:ff:1a:2f:ee:6d:fa:0e:af:c4:a6:19:83:60:3c:27:71:a3:
53:fd:8c:5d:da:66:94:3d:66:9c:f1:ec:eb:ea:9f:a7:6c:d0:
a8:87:df:36:5f:32:3f:cb:2f:30:4a:cf:52:48:c4:ec:1b:52:
4a:14:1f:05:e4:95:3c:a2:de:de:e1:3a:e1:5c:5e:24:5b:ee:
77:2c:8b:00:d0:d2:2b:06:fc:ec:c3:d9:fc:8d:3f:b4:38:62:
a1:dd:24:a0:f9:0c:b8:75:8c:85:cf:a2:f1:ae:65:3c:55:80:
18:0f:1b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 08:09:33 2023 by rpki-client on console-ams.rpki-client.org