Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/INKijlRRSEc2lAQYvgVlaQ_UaZo.roa
File: INKijlRRSEc2lAQYvgVlaQ_UaZo.roa (raw, json)
Hash identifier: /QQskVv/nqxjzaz8HJ8HOY0p+AovAna42p11a1knAqo=
Subject key identifier: 20:D2:A2:8E:54:51:48:47:36:94:04:18:BE:05:65:69:0F:D4:69:9A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0189DBA8C521D97A2D9E35939B0C7C04973F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/INKijlRRSEc2lAQYvgVlaQ_UaZo.roa
Signing time: Wed 09 Aug 2023 18:56:58 +0000
ROA not before: Wed 09 Aug 2023 18:56:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49468
IP address blocks: 5.180.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:db:a8:c5:21:d9:7a:2d:9e:35:93:9b:0c:7c:04:97:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 9 18:56:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20d2a28e5451484736940418be0565690fd4699a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:72:d1:d2:2a:d5:02:68:2e:4a:9e:87:af:
e2:ec:6d:67:c6:c5:97:f6:6c:d7:93:66:92:8d:b1:
82:51:19:aa:9c:a8:56:b2:03:14:c7:9c:57:90:1c:
32:0a:07:48:d7:07:83:72:cb:85:e9:b3:d1:df:40:
a0:6d:e8:8b:1e:1a:39:be:e7:0c:32:56:50:12:8b:
9e:fd:aa:92:fa:61:d8:d6:82:18:e3:65:6d:b3:7d:
59:8c:6e:2e:93:f6:f8:0b:51:f6:c8:90:3b:32:2b:
9b:1a:62:0b:9b:ac:17:45:be:40:77:cc:45:46:79:
31:57:aa:d2:d9:94:bd:a4:84:eb:06:1c:8e:59:38:
c8:f4:be:cc:f8:21:06:3b:98:da:62:4b:a3:fa:7e:
b9:33:d3:05:17:67:7c:61:cb:ac:9e:0a:8b:e5:29:
bf:2d:cd:68:1f:53:31:21:ce:79:9e:de:a2:3b:ea:
68:c1:d6:64:e8:05:60:81:26:62:d3:d1:35:42:df:
a3:c7:10:3f:6f:3e:87:c7:42:22:a1:2e:c6:72:a5:
e6:c6:57:2b:e6:3f:c3:c9:aa:48:36:74:26:e3:39:
af:5a:dd:35:fe:f4:79:86:27:b0:1e:31:5d:b2:7b:
b1:fe:26:e8:0e:4d:6b:a2:0f:67:55:98:66:7e:fc:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D2:A2:8E:54:51:48:47:36:94:04:18:BE:05:65:69:0F:D4:69:9A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/INKijlRRSEc2lAQYvgVlaQ_UaZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.82.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bb:08:6a:5f:2d:9a:cf:93:b3:6d:e8:0a:25:c0:9b:bc:11:
2f:eb:f2:d6:98:a1:89:8d:67:e9:5e:f6:c1:8c:44:1d:a7:25:
a5:41:7a:e1:8b:15:e8:e5:73:b9:fb:40:6a:10:0f:11:c8:a6:
20:a8:36:5d:2f:0c:49:b5:1b:d6:ca:8e:89:f5:d2:88:46:32:
89:a1:15:5a:00:b2:d6:20:0a:89:71:f9:10:13:1e:60:6b:74:
6d:54:04:5e:b1:9c:a5:d6:60:b5:7d:7a:cd:1f:4a:3e:01:e0:
49:92:3e:93:db:96:36:1a:a5:d3:12:fe:ab:dd:18:ee:d0:ca:
45:f2:db:c2:9b:ff:ff:0c:7a:22:f8:f3:2d:60:a4:a5:05:77:
50:da:34:ec:80:12:3b:1b:a4:23:e6:60:44:de:38:19:22:be:
2b:d6:6f:f7:b1:1c:c9:6f:dc:af:1f:98:63:77:f0:ff:16:a3:
2c:99:f0:3f:a2:77:0e:e4:2a:d7:d9:e0:fb:8a:af:4b:03:b0:
a6:73:4c:57:fd:44:29:17:7d:76:37:55:86:84:59:f1:b7:08:
6d:cd:a5:cc:c4:c8:0a:c0:99:33:b8:df:1d:c9:b2:36:c2:14:
c9:c6:41:3e:02:b0:1b:f3:02:0f:a1:e0:e3:e6:51:34:aa:27:
4b:c5:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 07:48:56 2023 by rpki-client on console-fra.rpki-client.org