Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5NUmmDHyU-8OHB3BmyD0a_ckadA.roa
File: 5NUmmDHyU-8OHB3BmyD0a_ckadA.roa (raw, json)
Hash identifier: jQRXi0fOaR9m/+9pNGN8yoyjG10RFWFErAQCoeSebzw=
Subject key identifier: E4:D5:26:98:31:F2:53:EF:0E:1C:1D:C1:9B:20:F4:6B:F7:24:69:D0
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0189271BA8B4F3474A638C1A698745307D23
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5NUmmDHyU-8OHB3BmyD0a_ckadA.roa
Signing time: Wed 05 Jul 2023 17:31:11 +0000
ROA not before: Wed 05 Jul 2023 17:31:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 5.180.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:27:1b:a8:b4:f3:47:4a:63:8c:1a:69:87:45:30:7d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 5 17:31:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4d5269831f253ef0e1c1dc19b20f46bf72469d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9d:ef:80:d6:bd:9d:90:6e:bd:04:e1:9a:1a:
72:af:70:e6:47:e7:0d:86:38:7f:64:1e:d9:12:99:
24:45:b5:b6:99:96:db:43:b2:8b:53:84:d6:ff:db:
17:78:26:6f:ea:89:29:57:89:14:87:b2:22:d3:d7:
e0:ab:1b:57:6d:78:9c:0c:ad:d5:31:7b:11:0e:2c:
b8:cb:7b:15:15:d7:21:98:11:48:cd:9d:cb:c9:31:
da:bb:ed:30:f2:f8:e9:98:2f:61:38:f4:3f:98:c0:
4d:61:48:a3:30:36:24:57:19:cd:2d:16:18:6b:e9:
d5:87:18:5e:73:65:b7:bc:67:1f:1b:24:91:70:c0:
1a:cf:2a:43:22:03:7c:b7:61:f0:8b:26:ac:92:0c:
5e:0a:07:63:ec:d4:8c:14:f5:a0:9f:b3:97:ec:2b:
92:bb:4e:99:06:14:59:b6:50:bd:d2:e2:9a:e9:72:
76:7a:c1:34:e5:6e:6c:0f:51:a8:57:f1:51:a0:8c:
36:30:d0:37:d9:d4:f5:fd:f7:a6:51:c6:4b:35:35:
8a:01:9a:50:82:68:56:6d:fe:af:17:c5:8e:e7:ed:
d3:e2:80:ef:61:1b:2e:be:80:36:86:13:df:1e:9d:
03:66:3f:76:49:d3:84:0f:15:9d:4a:cc:5f:9b:6d:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D5:26:98:31:F2:53:EF:0E:1C:1D:C1:9B:20:F4:6B:F7:24:69:D0
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5NUmmDHyU-8OHB3BmyD0a_ckadA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.232.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:ed:46:d5:7f:c2:4c:e4:9e:5f:f3:b9:7d:1c:d5:37:4a:1f:
d5:f6:7f:b7:62:6d:a0:96:54:1d:c0:87:36:b5:6e:ea:53:e8:
51:bc:d7:ea:fa:79:f3:4b:66:ae:57:ec:83:72:b6:b3:c1:c6:
df:7a:11:6e:5f:5f:4a:6f:5a:a9:9e:e2:8c:33:12:84:75:c8:
e6:19:ea:ca:31:0a:8e:8f:ed:18:e3:c3:c6:41:a9:4a:3f:c5:
7f:cf:d9:f4:6b:6d:ca:99:71:3a:54:62:26:b6:66:ef:99:b9:
a3:18:ce:c4:95:f4:80:b2:f9:cf:74:6c:36:ab:4b:4c:11:a7:
0a:7d:cf:2a:59:e3:9f:60:5a:bb:aa:0f:9c:29:4f:cd:58:44:
67:07:d9:22:20:45:74:8e:39:ad:03:5d:d9:5a:5a:a8:cd:79:
ba:19:ea:84:f1:d1:a0:b4:72:05:84:18:87:e4:37:2b:97:08:
d6:1a:45:68:2a:97:d4:44:b3:3a:7e:06:4b:37:b3:a5:92:67:
f2:6a:f3:93:2f:19:3e:e2:6b:66:84:d1:59:16:29:3f:78:f8:
d0:eb:29:e7:a0:9f:67:e4:75:a2:48:01:28:ce:be:13:ab:39:
59:04:6e:57:e3:44:34:29:46:06:5d:a5:70:bf:29:1f:86:05:
59:24:f7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 14:28:02 2023 by rpki-client on console-ams.rpki-client.org