Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OZbQ6bMLhAaU6vjTP1oymMgj0zI.roa
File: OZbQ6bMLhAaU6vjTP1oymMgj0zI.roa (raw, json)
Hash identifier: HQXpQXOXbRnQO59nw8qBegTPQ+taDlJwz3a6j26T1Qk=
Subject key identifier: 39:96:D0:E9:B3:0B:84:06:94:EA:F8:D3:3F:5A:32:98:C8:23:D3:32
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0189B16ED063443B09474EAA35675695E0D4
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OZbQ6bMLhAaU6vjTP1oymMgj0zI.roa
Signing time: Tue 01 Aug 2023 14:09:36 +0000
ROA not before: Tue 01 Aug 2023 14:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.232.0/24 maxlen: 24
5.180.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:6e:d0:63:44:3b:09:47:4e:aa:35:67:56:95:e0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 1 14:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3996d0e9b30b840694eaf8d33f5a3298c823d332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:f4:de:cc:19:04:88:8e:3b:bf:7e:69:a5:
6b:7c:86:af:b5:8e:60:a9:cd:95:a0:c6:15:97:6b:
23:76:0e:3f:ba:b6:69:f5:72:44:b5:28:c5:4b:bf:
6c:4a:57:29:83:13:d5:26:62:26:cc:63:34:81:79:
8c:81:26:b9:37:29:85:bd:7d:ef:e0:04:69:f5:8d:
ee:02:81:47:c9:72:eb:0d:28:ee:5e:13:1c:72:38:
b4:3b:a1:97:14:f3:a0:0c:c3:75:f4:bf:b1:5b:ce:
d4:81:2d:60:be:8c:d0:6a:83:de:59:f9:a0:1d:fa:
de:3a:03:f9:31:e6:c2:2c:53:11:5e:d9:17:9f:bf:
19:38:8d:9c:59:07:7d:58:ea:5b:27:61:74:3e:c5:
50:7c:3f:0b:35:35:fa:28:21:6c:85:5f:37:99:22:
01:0d:3b:3a:ac:40:3f:d0:7b:ae:c1:7b:4a:79:ea:
d5:3c:fe:77:7f:ab:3b:d0:36:40:fc:9b:6f:7a:32:
f6:fc:62:19:ad:0d:8e:c6:63:0c:26:68:d6:3b:79:
e6:42:02:b8:de:34:37:f6:ea:be:49:f8:d6:31:b0:
a5:59:8e:c5:d0:0a:81:42:ee:e5:55:cb:80:8b:9b:
23:cb:53:55:75:44:51:b7:f3:b2:52:20:ec:5e:6c:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:96:D0:E9:B3:0B:84:06:94:EA:F8:D3:3F:5A:32:98:C8:23:D3:32
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OZbQ6bMLhAaU6vjTP1oymMgj0zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.82.0/24
5.180.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a4:2a:1a:9d:c0:fa:64:97:c0:42:b3:9d:b0:02:79:2b:c0:
38:4b:68:22:f2:c4:45:c7:8b:b5:4d:80:d1:31:3b:4c:62:30:
49:b8:67:a8:a6:0e:91:d9:82:ff:95:55:c5:01:a4:47:e0:41:
31:0f:d4:38:97:0c:eb:70:ff:6d:c9:14:a1:6b:36:51:38:bc:
70:13:4b:02:29:0f:62:9c:65:2c:28:cb:57:55:ac:25:ec:13:
a7:59:9d:7f:f7:3f:2a:bf:ed:ad:d5:96:e8:3b:39:a9:e4:8f:
a2:06:e9:de:18:b2:fc:33:02:4b:d0:a4:ca:78:f6:20:3c:e4:
33:92:a3:84:60:31:50:59:08:eb:2f:d1:37:dd:13:55:1a:18:
fb:67:13:c5:99:d6:b4:cc:13:b6:9a:97:bc:0c:90:73:ff:55:
38:62:ee:6d:0d:45:bd:b8:56:67:e9:d9:9e:77:9f:88:25:d3:
8e:51:27:b5:8e:d3:52:ba:75:c7:2a:53:db:8b:26:34:4a:4f:
7a:74:7b:90:df:f9:16:2e:e8:5e:62:64:11:95:70:0e:97:17:
2d:a0:2b:08:cc:ad:5b:5a:47:55:7b:d5:59:37:1c:99:49:0d:
73:53:9a:64:d3:ea:16:d0:eb:5f:af:3c:38:df:70:42:ab:94:
40:b2:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 12:15:50 2023 by rpki-client on console-fra.rpki-client.org