Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HJpv6gKQjGLdeJ8nC9XC_y3T_OY.roa
File: HJpv6gKQjGLdeJ8nC9XC_y3T_OY.roa (raw, json)
Hash identifier: gyBz/x7L/ItgDTzjCELCWz1rO26mTblLiuKaEyUo2I0=
Subject key identifier: 1C:9A:6F:EA:02:90:8C:62:DD:78:9F:27:0B:D5:C2:FF:2D:D3:FC:E6
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018854EAA934540A52A954E0BA9AA65F2AD6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HJpv6gKQjGLdeJ8nC9XC_y3T_OY.roa
Signing time: Thu 25 May 2023 21:57:24 +0000
ROA not before: Thu 25 May 2023 21:57:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:ea:a9:34:54:0a:52:a9:54:e0:ba:9a:a6:5f:2a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 25 21:57:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c9a6fea02908c62dd789f270bd5c2ff2dd3fce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e0:d1:6c:24:01:b9:22:e3:e5:8d:73:eb:0a:
4f:05:75:23:2d:40:ef:72:69:05:1b:14:c6:ed:4d:
c5:60:23:fe:8c:1c:f9:03:47:85:22:c0:6a:61:bf:
22:17:93:3e:65:91:7c:a5:11:0b:6e:48:11:12:db:
13:39:25:52:1b:33:1b:4a:9e:12:da:f9:a4:c7:41:
72:92:af:f8:2a:42:52:e3:77:c7:aa:c9:d3:b2:c2:
5f:fb:83:36:0a:d5:39:66:24:2f:9f:7a:12:f3:38:
b6:1e:2b:20:e8:51:99:47:04:f9:e5:1d:e3:3b:95:
a2:6f:b9:2f:4c:d7:b5:06:0d:1b:40:a8:53:2e:43:
25:82:a1:66:ca:85:cd:83:ba:4b:f6:c6:f2:54:3b:
a7:cb:f2:b0:fb:87:1c:22:71:1f:d2:d5:2c:9b:40:
25:3d:ff:ff:0c:af:c9:4b:c0:8a:d1:3b:13:06:ab:
2a:e1:cf:bd:aa:69:22:90:78:a1:00:70:47:84:c9:
48:0c:44:e9:9c:e6:3a:82:b8:5f:57:dc:70:49:73:
a2:b3:5b:cc:ca:65:48:ac:70:24:e9:98:d9:07:4e:
3d:60:ee:b0:29:df:16:75:46:38:7f:ba:d1:ad:23:
ef:ce:b4:20:b5:a8:7c:61:f9:e7:ae:7d:99:0b:40:
aa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9A:6F:EA:02:90:8C:62:DD:78:9F:27:0B:D5:C2:FF:2D:D3:FC:E6
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HJpv6gKQjGLdeJ8nC9XC_y3T_OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.49.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6f:f4:ce:47:7b:92:62:c7:a2:9f:d4:89:bf:04:7e:53:14:
48:aa:a1:b0:73:df:50:cd:14:86:b7:12:64:44:2d:90:57:ec:
63:2c:16:96:39:1c:10:f1:c0:f3:dc:d4:ae:c4:79:fd:55:89:
81:64:2f:1f:8e:3b:8d:c1:03:3c:30:62:b4:d9:02:a1:14:3f:
9c:8b:99:cc:dd:f4:78:6c:5c:20:3e:fc:77:40:20:cf:66:dc:
c0:89:1f:0c:2d:a9:10:71:02:9e:03:46:32:4b:13:a5:e7:c4:
38:37:41:d8:c3:0f:82:ef:93:27:61:8f:a6:7a:35:bf:2c:64:
3d:82:e6:93:b0:9a:97:86:d1:8c:4b:44:02:75:09:89:76:2f:
9b:1d:d8:39:fc:4c:00:96:b5:ca:3d:cd:5d:bd:d8:7f:0a:51:
81:59:56:48:5f:c3:17:62:8b:3f:61:a5:af:14:87:26:17:cd:
6f:af:4c:31:71:a6:58:b7:36:0b:8b:7c:85:f4:32:bc:c9:82:
1e:d1:dc:80:f7:cd:55:f5:ac:bf:72:94:88:d1:37:cb:ac:74:
27:70:4e:ee:0d:fb:bd:96:0e:76:b6:7a:c6:48:05:32:b9:f9:
fd:ca:29:64:8b:16:71:31:20:a9:55:3c:c4:1c:bc:f9:3c:c5:
2e:5f:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org