Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HWDvlj1rJZxIj1XUTiNmMhrg9iY.roa
File: HWDvlj1rJZxIj1XUTiNmMhrg9iY.roa (raw, json)
Hash identifier: 4j3FdxMwwoPkj5X5ZwTCTE88GRyZU0n1YHL9EZ2Eo4Q=
Subject key identifier: 1D:60:EF:96:3D:6B:25:9C:48:8F:55:D4:4E:23:66:32:1A:E0:F6:26
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE8C2CDA55625BF4D13000290CD711
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HWDvlj1rJZxIj1XUTiNmMhrg9iY.roa
Signing time: Tue 02 Jan 2024 06:31:17 +0000
ROA not before: Tue 02 Jan 2024 06:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200131
IP address blocks: 5.180.33.0/24 maxlen: 24
45.8.200.0/24 maxlen: 24
5.180.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 11:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:8c:2c:da:55:62:5b:f4:d1:30:00:29:0c:d7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d60ef963d6b259c488f55d44e2366321ae0f626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:5d:6c:be:18:a9:01:55:81:22:a8:71:c8:
03:80:e8:84:b4:6d:e5:b9:fa:90:ea:3f:7c:6a:c4:
95:4a:ab:08:b7:21:93:f8:0f:6d:c5:ec:ed:2a:82:
b2:92:3f:1b:af:d9:38:cb:e7:ba:fe:5e:29:f7:79:
a3:e6:59:44:09:47:60:ea:96:73:a5:3e:f5:00:87:
d1:4d:4d:62:36:1e:64:63:f3:bb:c0:e2:cb:cc:98:
b8:aa:4b:0c:88:88:df:f4:cb:c2:26:05:f3:2f:c9:
fe:7a:22:8e:8b:31:63:1b:c5:80:43:e3:99:5d:1b:
d4:ee:38:96:5f:67:26:7f:9e:51:ef:5c:ce:00:3c:
67:1d:30:cf:59:57:eb:29:36:d6:63:96:6d:1a:28:
a7:e0:63:69:78:d4:68:3e:d7:a2:21:5a:5d:8a:c0:
52:a3:46:bd:24:3d:75:56:db:33:4d:c6:97:e9:7b:
72:8c:6f:38:86:03:72:dd:42:f7:e6:5d:07:b8:ef:
e6:68:47:3f:31:7d:e5:49:14:d9:bf:0c:9f:8e:ff:
fa:aa:55:a1:94:01:39:8d:1d:6c:56:4c:f3:b7:be:
f8:9f:98:76:07:cb:9f:bb:54:2c:cd:f4:68:b1:f3:
f6:f6:86:e7:c6:a4:3e:3d:2d:b0:ea:32:75:a1:b5:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:60:EF:96:3D:6B:25:9C:48:8F:55:D4:4E:23:66:32:1A:E0:F6:26
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/HWDvlj1rJZxIj1XUTiNmMhrg9iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.33.0/24
5.180.48.0/24
45.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
af:94:4d:ec:15:30:2f:4d:e7:17:fd:93:6f:d3:2f:5d:03:25:
6f:d3:f5:c8:28:4b:0d:c0:66:a3:a0:9f:49:78:67:f8:c6:50:
36:26:82:f7:33:f4:e1:c2:63:c7:f9:d2:c3:25:3d:76:5f:c6:
ec:9e:57:8b:46:e0:c7:32:c1:20:1b:c6:fe:6b:42:d6:f4:c4:
28:18:40:5b:3c:fb:2d:62:4a:96:c8:f4:84:65:5d:fd:ba:1e:
6b:c2:bc:52:06:de:f7:e5:aa:44:2a:fd:f7:b3:a9:d3:bc:52:
d7:43:e8:41:26:fa:f9:00:0a:08:27:b7:48:e0:63:97:2a:e9:
4b:4b:97:cb:c2:4c:2d:a0:06:f9:fe:3d:bd:5e:9c:13:57:d5:
7c:31:5b:a0:44:23:9e:78:f3:39:f9:cb:80:27:cf:2d:97:5f:
98:95:fa:12:26:02:70:93:17:c1:6f:fe:fe:9c:6c:aa:0b:76:
8e:df:4b:18:a9:4a:6a:00:24:38:d3:f5:e5:10:60:89:2b:1b:
ab:31:20:05:be:25:85:ec:2c:cd:e3:2c:25:05:af:17:4e:d0:
4d:0e:35:6e:18:a9:d4:9d:78:42:e5:db:6f:c0:12:86:f7:c9:
59:24:f0:eb:e6:10:5e:96:f3:98:79:c0:15:72:a9:38:5a:b4:
95:a0:83:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 15:50:43 2024 by rpki-client on console-ams.rpki-client.org