Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OxcCRnDAVEaPXvAtFfQNsqHaTC4.roa
File: OxcCRnDAVEaPXvAtFfQNsqHaTC4.roa (raw, json)
Hash identifier: UHWDM067BaDxXGU3nr9hnyK1XUDtYlB+uskyBShs21U=
Subject key identifier: 3B:17:02:46:70:C0:54:46:8F:5E:F0:2D:15:F4:0D:B2:A1:DA:4C:2E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B13435DFDAC391A08050EA1F6A5F407D0
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OxcCRnDAVEaPXvAtFfQNsqHaTC4.roa
Signing time: Mon 09 Oct 2023 07:07:43 +0000
ROA not before: Mon 09 Oct 2023 07:07:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:43:5d:fd:ac:39:1a:08:05:0e:a1:f6:a5:f4:07:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 9 07:07:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b17024670c054468f5ef02d15f40db2a1da4c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:23:45:14:e3:de:dc:fd:3f:62:8d:f2:31:
85:60:76:8d:b1:e9:c0:38:9d:49:1e:e4:23:cd:84:
2c:4d:7e:12:6e:4b:dd:fa:de:bd:72:16:d7:ea:33:
d5:01:ce:4e:59:c3:6e:bc:11:ac:cd:eb:b1:03:4e:
5c:db:a7:fb:86:22:78:41:bb:1c:57:e2:8a:82:14:
01:5e:a6:f8:a9:27:39:22:89:02:fd:d2:07:bc:ec:
ae:89:42:99:9b:07:35:0e:97:4e:ad:64:6c:9e:e1:
01:b8:a4:cf:f8:42:aa:14:47:1c:35:e5:de:fb:93:
16:74:a2:8e:c7:ac:06:26:bf:0b:4b:31:ec:41:c0:
cf:19:72:47:99:d5:f7:25:66:3e:ff:63:b6:22:82:
84:16:6d:84:59:c2:a1:52:2d:69:aa:9e:f7:4d:b6:
16:c0:72:74:99:20:3e:76:b3:de:58:8b:19:7f:01:
dc:e5:5f:7d:c9:f1:16:f7:31:94:b7:16:58:36:ca:
f3:32:91:f0:76:c9:79:d9:0a:d1:0c:97:86:4c:98:
e1:6d:6a:cf:f8:a2:2c:a8:0f:a6:ff:49:fa:07:e9:
74:f1:1a:4a:b7:c4:d5:df:f2:3d:a4:40:f4:00:cf:
32:fe:d0:a5:5e:57:fd:b9:52:51:98:51:5c:5c:f6:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:17:02:46:70:C0:54:46:8F:5E:F0:2D:15:F4:0D:B2:A1:DA:4C:2E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OxcCRnDAVEaPXvAtFfQNsqHaTC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.82.0/24
Signature Algorithm: sha256WithRSAEncryption
19:35:fc:dd:da:98:05:99:31:2c:5d:4b:00:f8:c7:64:97:93:
9f:77:af:68:c6:17:b1:71:29:3d:fc:b8:3e:d9:30:60:ed:c5:
47:de:84:06:13:50:58:d9:b1:3a:ef:3b:b3:4b:0d:44:ce:86:
d1:ee:c2:8a:6b:f3:b2:8c:06:d4:b2:53:ce:19:d7:7d:5b:f9:
0b:16:d5:0e:e3:42:a5:81:cc:4c:27:62:89:8a:7d:3a:65:7f:
26:96:6f:38:dc:02:c2:7f:fe:0e:5c:0d:98:07:31:fb:1d:18:
af:2d:85:fb:a1:e3:51:98:8f:82:75:bf:4c:fb:6c:16:1e:1a:
3a:5c:81:6a:b3:54:0a:12:85:79:17:fd:18:a4:01:44:88:13:
8e:88:b4:09:d6:87:36:12:1d:5f:af:cf:46:02:b3:16:3e:1b:
6f:5a:c2:9b:a5:a9:cd:e5:21:b6:6c:d3:65:c7:1e:96:1d:36:
0f:a2:ef:df:cc:92:2d:c4:d3:19:b9:bf:f9:02:16:3e:f2:e5:
cb:db:9b:bf:27:8d:44:f2:de:83:02:53:a0:c3:2b:8f:b4:c4:
02:82:e5:23:18:f4:2f:8e:97:d2:1a:e9:c6:ea:19:54:5c:7c:
c6:7e:11:a2:3a:b8:ae:96:87:be:9e:01:64:b0:a8:c9:73:63:
c0:7a:d0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 11:52:25 2023 by rpki-client on console-ams.rpki-client.org