Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1aAv0qahQExqUacFF__PLV2juUg.roa
File: 1aAv0qahQExqUacFF__PLV2juUg.roa (raw, json)
Hash identifier: jpLmyLORemPJbETUDeBuxzDPY9DNjiPVERM/m9ep7mw=
Subject key identifier: D5:A0:2F:D2:A6:A1:40:4C:6A:51:A7:05:17:FF:CF:2D:5D:A3:B9:48
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019317AD1F214EE2604E3C8846D7D6F31DC2
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1aAv0qahQExqUacFF__PLV2juUg.roa
Signing time: Sun 10 Nov 2024 20:04:01 +0000
ROA not before: Sun 10 Nov 2024 20:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.180.82.0/24 maxlen: 24
45.9.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 07:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:17:ad:1f:21:4e:e2:60:4e:3c:88:46:d7:d6:f3:1d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 10 20:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5a02fd2a6a1404c6a51a70517ffcf2d5da3b948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:03:a8:99:38:4d:f3:40:74:5e:4d:b9:19:
8c:25:2c:b8:ae:75:2d:dc:93:27:a3:8c:f4:d1:f3:
a0:e6:c0:23:b3:28:74:1b:35:bf:31:ab:16:23:e2:
73:0c:88:ea:08:68:85:41:5a:ed:b6:50:1e:3d:bd:
fd:0b:42:fd:2b:8f:b6:af:a7:09:d4:9f:f7:50:05:
72:32:11:23:e6:e8:7b:b9:7d:1b:cf:e2:ff:e5:f3:
ae:72:61:51:93:a3:87:7e:a9:5d:c3:37:f7:c1:d1:
64:e3:fd:28:54:d3:29:6e:09:92:66:b6:f8:90:89:
34:60:47:34:34:00:43:56:df:53:d2:a3:01:ca:61:
a2:78:e5:0e:d2:3a:e7:03:cb:9b:1d:99:42:dd:ab:
b8:90:3e:7f:d9:07:fb:fd:f1:e0:b2:24:32:79:44:
f7:3d:63:95:e8:f1:ae:2e:59:e3:7a:1b:a7:dc:31:
a2:30:d3:a3:6b:88:d4:02:01:a3:d8:52:6e:d0:cc:
f2:6e:89:71:42:a4:55:e4:8e:64:e7:07:14:30:92:
5c:e5:fa:12:91:07:b5:b9:b7:1b:6b:f8:fc:18:bf:
94:ec:0d:53:d6:dc:1f:e7:9c:e9:0a:d2:31:6c:25:
ef:47:6b:5b:3f:3b:90:76:0a:f4:d2:d8:1f:bc:3c:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A0:2F:D2:A6:A1:40:4C:6A:51:A7:05:17:FF:CF:2D:5D:A3:B9:48
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1aAv0qahQExqUacFF__PLV2juUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.82.0/24
45.9.2.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:11:6e:2a:c2:64:9c:4b:c7:d4:0b:6b:ad:fe:da:a7:50:63:
ca:23:50:83:2b:32:ea:2a:1a:74:75:7d:31:cb:38:f5:49:5d:
87:d2:e2:31:7c:cd:5e:f8:b4:f4:d9:ea:76:d7:ad:4b:78:55:
9b:4f:29:0a:9f:95:74:c5:9e:e9:9a:2b:b5:13:40:b7:f6:d6:
d4:d1:15:0b:e2:03:19:64:a3:05:d5:5d:24:18:89:58:99:fe:
b7:c4:e0:3c:f8:8b:51:a5:63:08:2e:71:5f:ad:2d:2c:6b:2c:
a5:31:ff:8f:6b:c3:bb:2f:42:21:30:94:1d:f1:5b:11:54:ab:
df:9d:1b:dd:c1:30:00:57:dd:35:ea:2d:e6:e4:6b:41:b2:92:
42:75:ee:c1:d0:31:11:d7:5b:48:62:e0:13:f0:ef:36:66:93:
3e:d1:02:39:2f:dd:ed:1a:49:1f:f2:27:11:ad:77:39:f9:3e:
4d:4d:15:3d:66:36:c3:14:2c:74:c3:5b:84:c8:a8:f8:33:5c:
51:81:97:18:29:7f:dd:58:88:0c:5f:20:a4:85:9d:a0:34:44:
32:c1:c3:ce:0f:a9:12:e5:8c:b5:d3:4d:16:6c:b4:06:68:69:
4b:70:72:9c:40:b9:0f:3f:96:90:3d:5e:a8:1a:d4:ea:50:4e:
44:4f:67:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 09:50:29 2024 by rpki-client on console-fra.rpki-client.org