Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-fXVnsgBueCIAIPKgrEtd43yxqQ.roa
File: 1-fXVnsgBueCIAIPKgrEtd43yxqQ.roa (raw, json)
Hash identifier: l3VkOESE3H3T1F0Nbd2IqBZgrzZMNRDlQ0dd6vQ5SVw=
Subject key identifier: F9:F5:D5:9E:C8:01:B9:E0:88:00:83:CA:82:B1:2D:77:8D:F2:C6:A4
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0189CC3FC2C7D8A35ED6B9734E2A2BA5BFF4
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-fXVnsgBueCIAIPKgrEtd43yxqQ.roa
Signing time: Sun 06 Aug 2023 19:07:57 +0000
ROA not before: Sun 06 Aug 2023 19:07:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 5.180.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:3f:c2:c7:d8:a3:5e:d6:b9:73:4e:2a:2b:a5:bf:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 6 19:07:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9f5d59ec801b9e0880083ca82b12d778df2c6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:1d:dc:77:9d:95:47:1b:aa:76:8b:43:6c:
96:3a:52:cd:0c:cf:b9:b0:df:d4:45:61:15:1e:6d:
43:67:cf:6c:55:66:c7:91:68:f3:0e:b9:97:92:05:
83:30:31:10:ba:69:57:15:ab:cb:3e:fa:52:9f:d1:
15:d4:15:9b:4b:e6:7a:df:39:4a:5d:c1:15:c2:36:
6e:34:08:76:d6:07:f9:c6:23:01:b7:8a:63:ee:a2:
52:be:ff:cb:d9:2d:ce:80:38:33:e2:83:68:b8:2b:
c4:83:be:27:4a:72:41:10:00:23:13:d9:5f:81:2d:
7d:20:67:19:9c:7f:90:70:db:84:0a:94:39:52:43:
a2:3b:96:6a:6b:5b:b8:86:31:98:c8:8b:0b:4c:34:
cb:27:74:48:57:81:95:2d:9f:02:20:0c:6b:6d:ec:
e3:08:9a:8a:6a:58:be:b5:e3:31:08:5c:07:89:b3:
09:05:fb:04:bd:be:64:ca:40:a1:f4:6c:a4:8e:77:
b9:85:12:52:fa:be:65:17:13:29:21:8d:64:7e:fe:
3f:a6:ea:6e:a4:3c:47:54:cc:5d:59:77:bd:6f:50:
db:2d:53:4a:af:b1:71:2d:0a:77:2a:9c:c8:75:e0:
48:a0:14:7f:e3:e7:bc:61:41:1f:f9:3a:d8:9f:de:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F5:D5:9E:C8:01:B9:E0:88:00:83:CA:82:B1:2D:77:8D:F2:C6:A4
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-fXVnsgBueCIAIPKgrEtd43yxqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:87:75:da:2b:32:17:1c:c1:c3:c4:0a:5f:9a:41:6b:51:0e:
68:e2:e8:c0:89:f2:17:c2:4a:75:3e:39:66:ec:61:02:bd:de:
e8:b7:5e:a3:8b:48:3f:44:6f:0b:25:3c:09:83:37:fa:5a:d3:
aa:c7:74:7a:2f:a7:3a:90:af:80:c8:dc:5a:63:e5:a9:a5:a0:
61:36:b1:d7:9c:be:1e:1a:bc:39:8f:51:5d:c0:1a:e3:86:2e:
f8:9d:be:69:da:a4:8b:5e:59:57:2b:73:7f:7c:78:56:95:df:
23:56:d9:1f:e3:12:d9:98:ea:27:97:23:85:e8:a8:59:f0:87:
7e:0e:97:9e:5d:77:86:7c:76:34:98:f5:cf:5d:c2:e5:63:56:
72:94:b7:bf:82:f9:e2:b8:6e:19:80:a0:46:8c:a4:82:b2:5a:
38:fb:54:92:62:f3:c2:e6:fa:87:17:c6:53:48:89:61:14:60:
ab:fe:19:92:21:5b:97:f5:0c:cf:04:af:b7:dd:26:3f:66:9f:
c1:3e:06:ef:d4:0e:b0:e2:ed:a4:da:13:47:12:16:da:9d:5d:
9a:ed:82:ac:8e:a7:1e:84:8a:a4:c3:26:bb:33:a3:12:c8:51:
ed:a1:2e:4b:7b:f3:fa:15:b6:ed:39:30:3a:26:6f:5d:b9:8b:
d2:ba:f2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:03 2024 by rpki-client on console-ams.rpki-client.org