Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2sBQDugj_FgJx9loHEuo-kuhNrU.roa
File: 2sBQDugj_FgJx9loHEuo-kuhNrU.roa (raw, json)
Hash identifier: okvU+gTPAtqoeECGqrY4QtR5sNvBa3cl6TMAseHJcPE=
Subject key identifier: DA:C0:50:0E:E8:23:FC:58:09:C7:D9:68:1C:4B:A8:FA:4B:A1:36:B5
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A6E84D7E50AAEE295DCAAD4B4E9869E4F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2sBQDugj_FgJx9loHEuo-kuhNrU.roa
Signing time: Thu 07 Sep 2023 07:21:54 +0000
ROA not before: Thu 07 Sep 2023 07:21:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.253.38.0/24 maxlen: 24
45.15.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:84:d7:e5:0a:ae:e2:95:dc:aa:d4:b4:e9:86:9e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 7 07:21:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dac0500ee823fc5809c7d9681c4ba8fa4ba136b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:e7:72:f0:a6:26:75:ae:c9:eb:af:a0:d7:
9c:db:c3:e7:b2:fb:fa:ee:c6:c6:a4:0e:e3:c1:81:
e8:bb:79:13:df:9a:93:db:ac:fb:4b:45:7c:f1:4c:
2f:ab:4c:1a:0d:a5:76:ca:34:af:a8:1f:96:a4:a7:
76:d8:9f:29:90:e7:c7:ee:5c:2f:49:cc:49:4f:34:
60:04:d3:a7:9c:87:ba:7d:33:a8:e5:ad:48:74:79:
0c:b1:d6:42:9a:f5:51:bc:5e:4f:d9:0c:15:4b:0c:
8f:52:56:be:9f:b0:86:db:13:8d:5e:da:88:5d:04:
aa:7c:80:fa:2d:53:39:57:1e:bb:4c:6e:c3:dd:ec:
9d:8f:8d:87:39:da:26:0d:ba:57:88:e2:37:25:04:
13:f3:22:ac:ba:1f:4a:5a:2b:8f:e3:30:31:7b:7e:
32:0c:e4:be:1c:0b:55:79:1f:06:91:e7:23:a7:ef:
98:aa:39:cd:b7:72:1e:e8:0a:0c:98:71:ed:79:a4:
be:3a:ba:46:34:a0:55:87:87:3a:d2:72:3c:7f:51:
ae:8d:ed:fc:a4:bc:de:cb:0f:cc:62:8f:43:46:33:
9f:60:65:9d:b4:c9:f0:75:33:e1:d4:a1:39:fb:65:
c8:e0:d1:51:2e:03:3f:f0:79:d3:e1:ae:22:d2:20:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C0:50:0E:E8:23:FC:58:09:C7:D9:68:1C:4B:A8:FA:4B:A1:36:B5
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2sBQDugj_FgJx9loHEuo-kuhNrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.38.0/24
45.15.177.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:02:fc:b7:14:e0:b9:f6:68:d4:3e:b6:f5:92:91:17:3a:0b:
70:e1:50:a9:de:d5:cc:7c:f4:4c:f1:29:b3:16:2d:19:51:7a:
f9:50:47:87:6d:e1:c4:c0:c2:a0:70:6b:fe:48:7b:35:5b:f6:
f2:44:4e:6b:4c:0d:04:33:39:ee:d0:ac:4e:38:8c:b7:78:2e:
0b:e2:b9:82:5f:b2:2b:d4:bb:4c:9f:c7:7e:56:0e:0f:8d:e9:
10:55:ab:4a:5d:03:83:46:be:4a:d5:85:a2:de:07:a1:39:6a:
1f:a8:86:1b:41:0e:46:eb:e7:bf:62:de:c1:6b:02:56:45:16:
c6:3a:3f:cf:c0:ec:d4:48:4e:76:3b:06:fc:34:31:73:a2:00:
13:d7:b7:04:b4:a2:68:b1:ce:81:58:aa:ac:a5:29:a4:9a:92:
cc:63:20:60:c6:ad:8c:81:8b:71:44:11:da:ab:31:bb:33:83:
30:c6:87:a4:86:20:5a:10:cd:7e:65:f8:63:7d:89:bb:e1:21:
cd:9b:c8:1d:a2:bf:25:63:d9:65:1b:9b:40:aa:4a:2d:81:16:
b2:39:c0:bf:22:6e:06:07:c8:6e:a9:ba:aa:eb:c9:7c:5a:ff:
95:a4:3b:d6:e1:32:6a:89:98:14:bc:a7:ed:9c:2e:c9:d2:12:
fd:91:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 04:51:23 2023 by rpki-client on console-fra.rpki-client.org