Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CCax-M0O8Dqay2qSUiJx3qKw_SU.roa
File: CCax-M0O8Dqay2qSUiJx3qKw_SU.roa (raw, json)
Hash identifier: +R3iL0jZK88nf8Ys87Eu6Zdl40JTDgbpvldkR81EaSk=
Subject key identifier: 08:26:B1:F8:CD:0E:F0:3A:9A:CB:6A:92:52:22:71:DE:A2:B0:FD:25
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0191B2B26A52FE248591EC305A7353FB9D8F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CCax-M0O8Dqay2qSUiJx3qKw_SU.roa
Signing time: Mon 02 Sep 2024 12:25:22 +0000
ROA not before: Mon 02 Sep 2024 12:25:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 5.180.233.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 08:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:b2:6a:52:fe:24:85:91:ec:30:5a:73:53:fb:9d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 2 12:25:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0826b1f8cd0ef03a9acb6a92522271dea2b0fd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:5e:cd:0a:92:37:96:78:ad:0d:51:65:65:
fc:bd:b9:5e:d5:92:03:0b:19:0f:85:e3:e1:79:38:
66:f7:81:70:2f:2b:77:ca:07:5b:e0:7f:38:66:26:
0d:15:e1:10:fd:08:8b:6c:73:4c:c6:a7:55:4e:d5:
42:d2:9c:a3:6c:9e:28:97:6d:65:d7:05:cb:2d:61:
59:99:bd:b4:a3:d8:fb:dc:85:6d:20:0d:cd:e4:44:
07:2a:49:c0:49:3f:75:5d:ad:e2:7e:c4:73:ac:e7:
8f:28:8c:51:d7:5c:19:3f:f8:85:f7:a5:58:f4:20:
d6:ae:3e:e5:0d:7f:78:20:08:5a:86:ec:fd:a2:60:
de:c6:96:87:cf:34:13:0d:8f:c5:d4:72:6b:c8:e5:
3e:64:09:60:d4:a2:c2:82:18:cd:bc:11:1a:2c:04:
36:19:3f:e2:91:bc:e4:de:56:9c:7d:7c:0f:18:4f:
3e:b6:25:95:b9:1c:1c:ff:43:55:86:a0:8b:20:c8:
6a:dd:7e:32:3d:fa:f5:15:ff:02:28:8d:dc:d4:76:
49:39:31:fc:c3:dc:ae:fd:08:a2:49:e1:06:37:cc:
75:fc:75:5f:a5:07:f6:e5:e3:0e:f1:b3:69:69:fc:
89:fe:8a:72:7a:bb:c3:e9:89:fc:fb:08:e1:e1:e3:
fc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:B1:F8:CD:0E:F0:3A:9A:CB:6A:92:52:22:71:DE:A2:B0:FD:25
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CCax-M0O8Dqay2qSUiJx3qKw_SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0/24
45.8.252.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ff:89:5b:7a:50:83:d9:4f:3b:6b:2e:6c:9f:db:bd:fc:59:
a6:c7:5a:0e:87:e5:b7:76:20:c7:b3:30:9c:3c:0d:c0:85:f5:
17:8b:63:cf:f8:59:d4:f3:bd:a9:ca:15:3f:e9:ae:ea:a3:c2:
90:20:3a:8e:25:16:50:84:07:3e:1e:bd:51:b8:1e:60:04:04:
a2:ba:67:64:ea:21:dc:77:e1:ac:f0:03:4e:cc:04:84:5e:fc:
e5:7a:48:20:6a:7c:25:37:cf:51:5a:91:dc:ae:b3:00:29:d8:
01:19:44:01:c5:8d:cc:31:15:83:54:4f:e7:64:71:3a:44:b0:
2f:57:8c:21:28:63:04:53:c2:05:e8:1c:72:8c:97:6c:c8:75:
c2:d2:df:a7:75:f3:6b:8c:2d:2e:a0:ca:e5:a4:9a:f2:45:7c:
8e:79:9b:f8:2d:fa:e3:08:d7:68:5e:b7:11:4e:21:fa:24:30:
98:a2:45:20:7b:66:55:7a:03:78:41:9d:2d:6b:7e:44:4e:8c:
e5:76:06:d1:2f:d9:ab:d4:7f:78:f7:34:5c:9c:3d:df:6c:58:
4d:d9:13:be:f0:71:2c:f1:b4:aa:1c:2d:75:e1:b7:ac:ef:df:
ce:90:21:ff:94:59:53:3d:0e:41:67:1a:50:a1:6e:fd:ec:83:
e9:5b:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 10:26:10 2024 by rpki-client on console-ams.rpki-client.org