Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/E9pdTSvT6j71irjg9gIGQWMf8ag.roa
File: E9pdTSvT6j71irjg9gIGQWMf8ag.roa (raw, json)
Hash identifier: aiyOc3Kux5wxNlSaQKM+NzJ0deraFSms2C1crdrdfEM=
Subject key identifier: 13:DA:5D:4D:2B:D3:EA:3E:F5:8A:B8:E0:F6:02:06:41:63:1F:F1:A8
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B420B5EF89CAE821FD4450F01648857DC
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/E9pdTSvT6j71irjg9gIGQWMf8ag.roa
Signing time: Wed 18 Oct 2023 09:08:43 +0000
ROA not before: Wed 18 Oct 2023 09:08:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.8.187.0/24 maxlen: 24
5.180.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:0b:5e:f8:9c:ae:82:1f:d4:45:0f:01:64:88:57:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 18 09:08:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13da5d4d2bd3ea3ef58ab8e0f6020641631ff1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:8f:58:ec:a3:67:9d:80:a7:e3:ef:1a:81:
1c:7d:96:9b:8c:0f:7c:01:b8:30:bd:90:32:30:5c:
5b:f4:14:3f:a3:9a:0f:80:df:a7:af:f7:6c:4b:ba:
80:d5:2d:e7:86:78:9e:11:85:17:19:28:2c:7e:5c:
7e:c9:a8:54:24:4d:d3:f0:6b:8d:2d:f1:14:d1:7e:
15:26:a3:d0:17:76:7f:1a:35:5a:7c:b0:cf:89:0c:
a4:84:3b:8a:31:9e:1e:ec:54:f0:a5:bc:17:25:c9:
d4:bb:1a:6b:89:41:d7:cd:33:3a:63:75:68:3d:b0:
fd:9d:bc:e0:ab:e2:20:f0:1b:3c:4b:65:3a:ae:0d:
65:d7:2d:87:7b:b8:ed:4a:f1:13:e2:1f:94:56:8b:
6a:1f:ef:52:47:84:0e:f7:d3:c9:3a:07:b3:f3:e5:
3e:83:cb:40:c2:e2:17:93:45:d0:df:b9:b0:b8:21:
8e:f2:56:04:67:4a:ac:62:2e:34:cd:39:72:e6:f1:
f6:fe:82:0c:fb:c2:90:bd:0d:17:3e:5c:15:6a:92:
76:c3:76:aa:e8:d1:c5:c2:a1:51:a2:af:a0:34:f5:
0c:ce:72:f7:4f:72:56:c4:31:52:df:6d:e1:ef:3a:
18:33:5b:bd:50:98:8c:92:39:6e:66:90:81:fc:f2:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DA:5D:4D:2B:D3:EA:3E:F5:8A:B8:E0:F6:02:06:41:63:1F:F1:A8
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/E9pdTSvT6j71irjg9gIGQWMf8ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.83.0/24
45.8.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:28:f4:79:74:94:d2:3b:82:a0:2a:da:b4:36:88:c8:1d:07:
a7:c9:c7:b9:07:38:df:cc:4f:a1:e5:2d:3e:a1:5c:a8:f2:7b:
1f:c2:44:52:c9:4b:80:d6:6f:40:98:ff:0e:51:8d:03:5c:0a:
9c:10:6b:65:c4:48:22:7d:04:0f:e9:b7:0f:22:de:9e:65:d2:
a5:59:5d:c8:e5:73:b8:f7:4c:2a:b2:02:53:8b:e7:9f:6d:67:
a0:bb:f1:fd:03:dd:b5:99:fe:36:a5:f5:2e:61:67:6d:53:9b:
77:0d:d0:05:75:9f:4a:fc:53:2b:00:d8:28:e9:52:24:9c:09:
a7:7e:05:99:9f:e3:97:a9:0d:d6:ef:72:37:24:47:02:63:21:
a2:f8:31:fa:fa:a4:d7:bf:70:2c:c9:33:e1:9e:90:b1:a0:6c:
cd:4b:ff:47:93:46:08:64:c3:07:9b:52:8b:28:c4:b9:11:c0:
e7:ff:4a:2e:2b:e6:d2:8d:08:45:db:b9:94:53:6a:87:1d:ad:
38:25:7e:bf:d4:fb:e7:fb:92:9c:e7:a0:1a:47:bb:d6:43:58:
f3:f0:2f:fd:9d:55:d4:06:b8:b9:c4:4b:cb:93:51:12:d9:45:
e4:4e:dc:03:eb:34:22:2a:0a:9a:a5:61:79:1b:2b:26:a2:55:
a4:75:9c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 20:41:21 2023 by rpki-client on console-fra.rpki-client.org