Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7lW825xvunYJNb9K48Ny7m0U1Mc.roa
File: 7lW825xvunYJNb9K48Ny7m0U1Mc.roa (raw, json)
Hash identifier: 0CyaKZ+kdnQ2o+bs4m2cCPrwGb5Vzo6Ox27Bkuta5Ck=
Subject key identifier: EE:55:BC:DB:9C:6F:BA:76:09:35:BF:4A:E3:C3:72:EE:6D:14:D4:C7
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A7834FA9D158580EF0B2470B273147244
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7lW825xvunYJNb9K48Ny7m0U1Mc.roa
Signing time: Sat 09 Sep 2023 04:30:52 +0000
ROA not before: Sat 09 Sep 2023 04:30:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.253.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:78:34:fa:9d:15:85:80:ef:0b:24:70:b2:73:14:72:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 9 04:30:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee55bcdb9c6fba760935bf4ae3c372ee6d14d4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:79:76:3b:2e:98:32:27:07:53:8c:fe:82:f0:
46:0f:35:c9:ad:29:a9:8f:1c:60:5e:8e:5a:77:5d:
52:7e:b1:96:d8:5a:16:5c:d2:7c:5f:19:83:a8:fa:
a5:b0:0e:dd:55:0c:b4:79:6e:27:41:72:26:8d:60:
46:63:c4:1f:fc:de:c8:6f:e9:7e:c4:76:8b:2f:12:
49:32:0d:d4:ca:41:be:ea:6a:a4:78:a4:df:c5:13:
f1:e0:fe:7e:96:08:7c:13:a8:0b:71:6e:e5:ef:1c:
8e:c0:f9:bf:fa:55:9a:87:34:6f:88:47:3a:75:a4:
f3:8e:3b:d4:f7:35:32:70:bf:c7:80:11:de:2a:23:
ca:06:40:c1:e2:be:80:27:0c:ae:c5:c9:6e:25:bd:
c9:1e:c1:b9:50:8c:b8:0d:d5:61:fe:c4:5b:00:b1:
c5:55:b9:3f:3f:79:9d:10:2d:d8:a7:04:7a:42:d2:
27:7a:d4:0f:23:c2:8b:0a:63:f8:5e:34:83:72:b4:
5a:a4:4d:5c:41:ef:44:0e:ad:83:89:a6:a1:5a:55:
9c:5c:98:99:89:33:49:70:79:2e:a9:d1:35:e1:34:
d5:53:86:08:ad:c7:72:6d:a2:b6:95:17:24:cd:49:
5a:9a:af:2c:7c:49:de:94:b8:30:5c:3c:d6:fe:35:
57:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:55:BC:DB:9C:6F:BA:76:09:35:BF:4A:E3:C3:72:EE:6D:14:D4:C7
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7lW825xvunYJNb9K48Ny7m0U1Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f5:4f:e1:15:00:48:58:e3:e8:e7:53:6c:9a:13:96:3a:26:
38:44:27:05:7c:c4:1f:60:e0:51:b5:60:a7:6f:1c:e2:9f:a4:
4c:96:27:6e:94:2d:e4:45:86:1c:01:a7:19:80:6b:03:18:37:
a4:60:67:be:cf:f5:fa:fe:61:b3:33:b4:d0:f1:dd:4e:c8:6d:
49:74:2b:7d:d2:68:2b:c4:16:4d:c2:cb:51:d2:dd:66:7f:ab:
0c:d7:e2:8f:a4:12:17:bf:af:a4:0b:16:22:d6:a9:2c:32:45:
f7:65:fe:e2:79:d6:e0:98:9d:28:2d:46:41:88:61:cf:1c:bb:
0d:4b:43:0e:c1:d6:c4:a1:93:2f:3b:e9:f0:ab:1f:4f:b7:af:
01:86:3f:84:3c:16:9f:d5:cb:f6:43:70:61:39:92:7a:a7:73:
a3:00:7b:63:3e:bf:9f:e9:dc:85:18:85:63:9f:fb:14:79:05:
a3:19:76:71:2b:04:3b:3a:d7:38:ec:b9:28:e7:50:87:6d:b3:
36:37:20:8a:e7:13:9a:b8:7a:f9:7f:41:72:3a:1b:47:43:0f:
59:ea:96:f6:5f:ed:ff:ab:0a:05:10:e4:ce:f2:7d:db:90:7b:
a7:84:c3:d9:71:22:f4:87:28:ff:3b:f0:73:d9:3f:b4:6b:2d:
69:52:53:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYp4NPqdFYWA7wskcLJzFHJEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwOTA5MDQzMDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTU1YmNkYjljNmZiYTc2MDkzNWJmNGFlM2MzNzJlZTZkMTRkNGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnl2Oy6YMicHU4z+gvBGDzXJrSmp
jxxgXo5ad11SfrGW2FoWXNJ8XxmDqPqlsA7dVQy0eW4nQXImjWBGY8Qf/N7Ib+l+
xHaLLxJJMg3UykG+6mqkeKTfxRPx4P5+lgh8E6gLcW7l7xyOwPm/+lWahzRviEc6
daTzjjvU9zUycL/HgBHeKiPKBkDB4r6AJwyuxcluJb3JHsG5UIy4DdVh/sRbALHF
Vbk/P3mdEC3YpwR6QtInetQPI8KLCmP4XjSDcrRapE1cQe9EDq2DiaahWlWcXJiZ
iTNJcHkuqdE14TTVU4YIrcdybaK2lRckzUlamq8sfEnelLgwXDzW/jVXjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5VvNucb7p2CTW/SuPDcu5tFNTHMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvN2xXODI1eHZ1bllKTmI5SzQ4Tnk3bTBVMU1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf0mMA0G
CSqGSIb3DQEBCwUAA4IBAQA89U/hFQBIWOPo51NsmhOWOiY4RCcFfMQfYOBRtWCn
bxzin6RMlidulC3kRYYcAacZgGsDGDekYGe+z/X6/mGzM7TQ8d1OyG1JdCt90mgr
xBZNwstR0t1mf6sM1+KPpBIXv6+kCxYi1qksMkX3Zf7iedbgmJ0oLUZBiGHPHLsN
S0MOwdbEoZMvO+nwqx9Pt68Bhj+EPBaf1cv2Q3BhOZJ6p3OjAHtjPr+f6dyFGIVj
n/sUeQWjGXZxKwQ7Otc47Lko51CHbbM2NyCK5xOauHr5f0FyOhtHQw9Z6pb2X+3/
qwoFEOTO8n3bkHunhMPZcSL0hyj/O/Bz2T+0ay1pUlOs
-----END CERTIFICATE-----
Generated at Tue Sep 12 09:08:23 2023 by rpki-client on console-ams.rpki-client.org