Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-bcRv34_zYTACwjdhgh19MonEBI.roa
File: 1-bcRv34_zYTACwjdhgh19MonEBI.roa (raw, json)
Hash identifier: xjdpV1BjIdx5dBAjL16eAUTp7zsg9SsgorCAfYiUCR8=
Subject key identifier: F9:B7:11:BF:7E:3F:CD:84:C0:0B:08:DD:86:08:75:F4:CA:27:10:12
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B44670F0BDA8BA7881A8458C757332FC9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-bcRv34_zYTACwjdhgh19MonEBI.roa
Signing time: Wed 18 Oct 2023 20:08:06 +0000
ROA not before: Wed 18 Oct 2023 20:08:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212514
IP address blocks: 5.180.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:67:0f:0b:da:8b:a7:88:1a:84:58:c7:57:33:2f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 18 20:08:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9b711bf7e3fcd84c00b08dd860875f4ca271012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:14:78:a1:35:21:1f:8c:55:c1:84:04:9c:
3c:05:8a:87:5d:7a:5e:fd:fa:30:c8:f1:be:f4:a6:
85:16:5e:06:39:8a:b2:cd:c7:1e:83:98:c2:ef:33:
3b:19:83:27:9b:62:ea:7a:25:f5:22:24:a6:c1:9f:
c5:3a:a1:36:f1:08:69:ed:18:1c:18:62:7d:d8:16:
19:b6:b9:0c:ec:be:9c:57:28:2f:fd:c0:97:71:35:
7c:b4:92:0c:24:0b:ad:3d:ee:85:9f:e9:30:fd:c0:
ef:e4:2c:aa:72:00:d7:fe:24:6b:88:3c:70:15:1d:
bc:b1:f8:60:4e:1d:95:39:dc:13:b3:12:9e:f4:e9:
1a:0d:7f:9c:f3:37:03:c6:de:3c:b8:63:38:62:e1:
0f:94:9c:81:47:d3:90:ff:fc:ba:93:91:e2:e6:1e:
c1:8d:64:69:bd:08:47:3f:93:f6:77:4b:8f:58:f4:
f5:c6:94:41:e4:e2:81:9e:16:ab:40:e8:5e:c7:5e:
6b:17:7f:3f:f2:18:d1:d0:b0:75:9e:78:df:5c:c6:
e0:ac:78:cb:19:19:81:af:c8:57:15:9f:f9:65:2a:
a0:8e:25:1c:a9:09:dc:e4:42:9c:ea:16:86:4d:b4:
ae:29:a1:8c:fb:99:1a:9c:28:a8:93:24:ec:21:9f:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B7:11:BF:7E:3F:CD:84:C0:0B:08:DD:86:08:75:F4:CA:27:10:12
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-bcRv34_zYTACwjdhgh19MonEBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.83.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7d:a9:ee:84:df:e7:85:c5:c5:96:06:80:50:50:8e:16:32:
5c:d4:be:9d:70:7a:4a:d3:0f:a9:6d:97:b6:23:ae:c8:31:d1:
f9:e5:8e:a8:da:f8:75:3b:b9:cb:ba:93:73:1d:04:f5:c1:6c:
eb:db:54:a9:70:b6:b4:2b:99:12:dd:9c:96:a5:f6:b1:41:46:
67:c0:ee:2a:66:da:ac:19:42:20:e6:c0:8f:57:5e:3a:23:72:
67:95:80:3c:1d:5d:26:8c:f1:21:50:6b:3e:73:c4:7f:83:e0:
5f:37:09:d8:3b:54:58:8f:be:d3:b5:76:82:c6:8c:e8:32:8b:
73:9d:06:cd:80:3a:d3:99:f9:39:cb:16:b3:11:b6:c8:71:03:
ea:29:90:67:cc:af:66:ea:f4:40:a6:f8:ba:9f:8c:53:e5:53:
24:38:27:cd:68:ca:5d:8d:f5:32:4d:a4:6d:d7:10:e6:a0:e6:
83:24:6f:e4:ec:04:a4:66:8e:96:a6:60:8e:59:6b:73:fa:63:
73:ec:e2:c3:e0:e8:11:6e:92:a4:91:4a:02:a6:34:5b:27:48:
2e:7c:3c:23:45:85:f2:50:e2:32:e4:7f:3f:b2:c3:29:75:c6:
29:43:a6:6f:f0:fb:7c:b2:8f:f2:97:27:90:5c:2d:dc:2a:7a:
f7:f1:2b:e5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYtEZw8L2ouniBqEWMdXMy/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMxMDE4MjAwODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWI3MTFiZjdlM2ZjZDg0YzAwYjA4ZGQ4NjA4NzVmNGNhMjcxMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWwUeKE1IR+MVcGEBJw8BYqHXXpe
/fowyPG+9KaFFl4GOYqyzcceg5jC7zM7GYMnm2LqeiX1IiSmwZ/FOqE28Qhp7Rgc
GGJ92BYZtrkM7L6cVygv/cCXcTV8tJIMJAutPe6Fn+kw/cDv5CyqcgDX/iRriDxw
FR28sfhgTh2VOdwTsxKe9OkaDX+c8zcDxt48uGM4YuEPlJyBR9OQ//y6k5Hi5h7B
jWRpvQhHP5P2d0uPWPT1xpRB5OKBnharQOhex15rF38/8hjR0LB1nnjfXMbgrHjL
GRmBr8hXFZ/5ZSqgjiUcqQnc5EKc6haGTbSuKaGM+5kanCiokyTsIZ98RwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPm3Eb9+P82EwAsI3YYIdfTKJxASMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvMS1iY1J2MzRfellUQUN3amRoZ2gxOU1vbkVCSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjIvNzA0MDcxLThkYzAtNGVkNi05NDU3LWU4NjEyMWM1OTRk
Zi8xL1l2MjJkbFRmWVlUbjFneEJVT3FWTThMUGx3US5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW0UzAN
BgkqhkiG9w0BAQsFAAOCAQEAiH2p7oTf54XFxZYGgFBQjhYyXNS+nXB6StMPqW2X
tiOuyDHR+eWOqNr4dTu5y7qTcx0E9cFs69tUqXC2tCuZEt2clqX2sUFGZ8DuKmba
rBlCIObAj1deOiNyZ5WAPB1dJozxIVBrPnPEf4PgXzcJ2DtUWI++07V2gsaM6DKL
c50GzYA605n5OcsWsxG2yHED6imQZ8yvZur0QKb4up+MU+VTJDgnzWjKXY31Mk2k
bdcQ5qDmgyRv5OwEpGaOlqZgjllrc/pjc+ziw+DoEW6SpJFKAqY0WydILnw8I0WF
8lDiMuR/P7LDKXXGKUOmb/D7fLKP8pcnkFwt3Cp69/Er5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:24 2024 by rpki-client on console-fra.rpki-client.org