Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BvBuNzTPm1wTpInsINP6VFO3qSU.roa
File: BvBuNzTPm1wTpInsINP6VFO3qSU.roa (raw, json)
Hash identifier: AEuREW+Z+CDx5AqV6BZJ/p+QY8a2ieDD7DDOYdVrJUU=
Subject key identifier: 06:F0:6E:37:34:CF:9B:5C:13:A4:89:EC:20:D3:FA:54:53:B7:A9:25
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0187E11021EF63859C3472C5C402FDB5EB3C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BvBuNzTPm1wTpInsINP6VFO3qSU.roa
Signing time: Wed 03 May 2023 10:02:23 +0000
ROA not before: Wed 03 May 2023 10:02:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.233.0/24 maxlen: 24
5.180.234.0/24 maxlen: 24
5.180.49.0/24 maxlen: 24
85.208.106.0/24 maxlen: 24
5.253.38.0/24 maxlen: 24
45.9.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:10:21:ef:63:85:9c:34:72:c5:c4:02:fd:b5:eb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 3 10:02:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06f06e3734cf9b5c13a489ec20d3fa5453b7a925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1f:97:3d:b6:74:5b:6f:15:b7:d1:7c:d0:d9:
37:b5:2a:c2:35:75:e0:6d:d1:fa:a7:3a:25:34:63:
5a:93:c0:ac:32:54:6d:71:5b:95:95:ce:6a:04:3f:
24:ab:3a:9f:c7:40:3d:47:79:95:b2:1d:b1:a6:7e:
96:85:7e:24:9b:4c:97:44:fb:80:2f:be:c1:a5:92:
6b:7c:b3:43:bd:c1:93:89:48:64:bb:70:58:0b:2f:
80:ef:21:e7:34:1b:5e:9c:75:00:3e:73:d0:c5:02:
c2:ef:53:22:a6:ae:85:e1:35:c5:68:13:e6:51:16:
69:d5:10:bd:c2:99:f6:2b:4f:48:d5:0c:58:da:d9:
34:6a:74:e5:b4:fb:b9:a2:f5:18:6d:35:94:8c:05:
1b:e0:0d:0f:65:10:b8:47:7d:d6:94:4f:2c:59:46:
5f:2c:82:fc:07:66:d0:06:07:c8:00:54:6c:5a:b3:
d1:03:be:10:05:1d:e6:b4:c1:8a:ca:76:3d:5c:f2:
9a:35:71:0e:73:39:c2:1d:12:a7:b4:50:7c:e5:d8:
ed:80:9d:8f:86:24:77:cf:e6:c1:24:e2:90:03:04:
89:a3:bf:e2:82:12:e0:71:8a:c8:f5:f7:98:f0:c8:
4d:d9:f3:a2:4c:a8:1e:c3:01:9e:14:80:04:60:ac:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:6E:37:34:CF:9B:5C:13:A4:89:EC:20:D3:FA:54:53:B7:A9:25
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BvBuNzTPm1wTpInsINP6VFO3qSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.49.0/24
5.180.233.0-5.180.234.255
5.253.38.0/24
45.9.2.0/24
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:74:a8:b1:7b:2e:f2:a4:af:a6:fd:48:0c:85:7f:29:18:b1:
5f:bd:ed:68:5e:85:7f:eb:1b:a2:55:26:52:79:5d:4f:8c:8d:
62:de:aa:72:46:8f:e6:1e:8d:47:51:f1:ed:ec:c3:59:4d:5f:
b1:b5:ca:af:96:7d:48:d5:61:e3:0c:0c:4e:13:da:b1:57:b4:
00:de:d8:6f:64:e2:aa:72:88:dd:94:4f:d1:b0:1d:d5:c5:c0:
c6:20:90:6d:c0:62:84:fc:7b:51:13:9a:7e:a4:94:00:0d:ab:
4f:1a:3a:68:68:51:3e:3f:39:8d:08:3a:48:c4:50:6f:41:d8:
35:35:95:2e:2a:6f:56:0d:5d:13:ed:5b:13:09:d9:3b:dd:77:
f1:19:73:7f:9a:4f:67:60:c9:ba:1e:a1:d1:44:d3:66:e6:1d:
fc:2c:b8:bb:fa:b0:b1:06:fd:4f:78:f2:17:02:03:c0:36:a9:
34:74:e2:e5:0a:11:44:80:57:3d:e1:6c:40:bd:e6:c5:9b:80:
a1:5b:1a:8e:8d:44:7f:c7:be:31:a8:8c:d6:6e:9d:fd:d3:c0:
b7:48:1f:d1:2f:2f:e1:c4:81:f4:a4:82:97:11:9e:01:2c:bf:
35:e1:5e:e5:34:04:3a:f8:fd:23:27:eb:0d:05:da:bc:cf:08:
56:0b:48:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org