Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8az3XWrcWTtSescYgWuFEetDzkw.roa
File: 8az3XWrcWTtSescYgWuFEetDzkw.roa (raw, json)
Hash identifier: m7fzYGTJav61wDnWO6KuUFRj16aiwYI7JMIqVJMofbg=
Subject key identifier: F1:AC:F7:5D:6A:DC:59:3B:52:7A:C7:18:81:6B:85:11:EB:43:CE:4C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0187DB51CAB51789188D47AB3DD85E7FAAB8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8az3XWrcWTtSescYgWuFEetDzkw.roa
Signing time: Tue 02 May 2023 07:16:23 +0000
ROA not before: Tue 02 May 2023 07:16:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.233.0/24 maxlen: 24
5.180.234.0/24 maxlen: 24
85.208.114.0/24 maxlen: 24
5.253.38.0/24 maxlen: 24
45.9.2.0/24 maxlen: 24
45.9.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:51:ca:b5:17:89:18:8d:47:ab:3d:d8:5e:7f:aa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 2 07:16:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1acf75d6adc593b527ac718816b8511eb43ce4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:f6:c9:9f:bc:3b:8f:bf:93:19:a1:a3:10:
4b:29:e3:3d:e0:0a:58:20:65:a2:cc:43:54:af:27:
83:6e:18:7a:6d:42:94:f8:46:a2:89:8f:e7:60:63:
46:bf:d8:eb:b7:c6:86:f1:1f:ae:35:f7:28:47:82:
10:1d:83:8e:5b:4c:cb:23:a0:d3:a4:b9:81:b6:63:
d1:2f:c5:b6:12:a7:db:88:fa:3f:28:06:c6:7d:66:
50:b7:51:4c:bd:db:5f:31:b2:3e:5b:a6:57:f8:4b:
47:80:ad:fc:a1:67:a7:30:a2:18:06:5e:b2:ee:c2:
d8:dd:80:30:33:5d:50:1a:e6:4c:51:12:0f:d0:3c:
d6:bd:51:7f:f4:23:0c:d1:26:89:7f:17:b2:fa:1b:
3c:f7:45:31:93:c0:d3:d5:7d:99:b8:6e:e4:1a:49:
55:fc:93:70:b9:61:c7:c2:c9:78:b4:f7:76:59:f5:
ce:fe:92:58:16:25:76:ba:4c:2b:7f:18:39:9b:8d:
0f:06:4a:53:f5:56:10:7c:fb:21:9d:97:f9:59:ae:
f9:a2:8b:65:41:49:86:4e:cb:c8:aa:75:fb:e1:84:
5f:c2:61:fd:05:e8:8e:e5:d4:63:23:99:35:74:a6:
bb:8a:a4:c8:f9:02:05:22:17:0b:b3:63:b7:4a:f2:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AC:F7:5D:6A:DC:59:3B:52:7A:C7:18:81:6B:85:11:EB:43:CE:4C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8az3XWrcWTtSescYgWuFEetDzkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0-5.180.234.255
5.253.38.0/24
45.9.2.0/24
45.9.5.0/24
85.208.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:65:05:5c:87:53:b2:64:95:b4:5a:54:f5:5f:8f:0a:36:5c:
eb:14:da:82:62:0a:9a:17:51:7a:9b:f0:a3:cf:fb:e3:68:c9:
9b:cf:38:75:01:ee:3d:33:f6:ff:db:14:58:c1:7c:d2:f3:ae:
97:b2:94:9d:97:02:cd:0e:b0:36:63:c8:14:90:e1:08:e0:f0:
49:dd:06:c3:62:39:07:f8:ea:47:17:a1:61:49:10:7c:33:0a:
1c:0a:d0:de:d6:08:d3:b7:dd:40:f7:b9:9a:c5:fa:dc:e0:c4:
5a:0b:32:98:56:49:d1:8e:33:07:d3:71:82:97:d4:15:e9:a7:
51:c1:ea:0e:8d:fc:dd:1b:04:ed:d4:6d:29:a7:40:ca:2f:93:
ab:af:52:90:c3:d9:f4:50:6e:88:b9:65:39:14:c9:f6:52:19:
18:90:45:62:94:a8:3b:00:cb:ea:59:02:5e:64:78:a0:f3:8d:
bd:31:73:1f:83:63:71:8a:5c:8e:0e:03:ea:95:d8:9b:d3:f6:
ab:86:cc:a7:9e:59:09:30:cc:41:e1:4e:d2:f4:a2:8c:b9:bc:
c8:ae:6b:d8:d8:eb:19:9b:f8:af:93:08:32:9b:2e:1c:7e:aa:
8a:12:32:44:63:d0:60:b5:83:96:f0:24:17:1a:29:f4:78:c1:
7f:db:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org