Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/P30x349-aZlXNZc5VupCebxgVYE.roa
File: P30x349-aZlXNZc5VupCebxgVYE.roa (raw, json)
Hash identifier: uI8O3bmWEvsi++7IrQAVO4OoyRJ6kDG1c01HzASAZnc=
Subject key identifier: 3F:7D:31:DF:8F:7E:69:99:57:35:97:39:56:EA:42:79:BC:60:55:81
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018D1744FF799F0D735A668D8F6F7AE425A6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/P30x349-aZlXNZc5VupCebxgVYE.roa
Signing time: Wed 17 Jan 2024 11:53:34 +0000
ROA not before: Wed 17 Jan 2024 11:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.180.33.0/24 maxlen: 24
5.180.34.0/24 maxlen: 24
85.209.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 18:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:44:ff:79:9f:0d:73:5a:66:8d:8f:6f:7a:e4:25:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 17 11:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f7d31df8f7e69995735973956ea4279bc605581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:e9:d0:e6:0a:d2:dc:c8:2f:76:1e:4f:03:
6d:6c:7f:a3:78:a8:3f:4a:3c:e6:44:38:1e:b8:f9:
ed:10:4b:c8:93:87:8b:71:8c:87:62:9f:66:43:a9:
98:e5:4d:e9:32:da:dc:05:4c:f6:15:d4:25:09:b8:
b1:f8:55:95:83:7f:a6:3b:7a:67:1d:82:9d:f1:be:
b7:6f:44:76:0b:77:43:4d:c1:2b:6f:e2:86:07:cc:
0f:6a:30:50:3a:df:f2:79:2f:e6:ad:e4:b0:e9:30:
89:92:2e:30:ee:e7:d7:92:c2:ed:d5:0e:10:e8:0e:
f8:24:3a:13:bc:ee:ef:c9:cd:7c:23:f3:92:36:9f:
63:f3:f6:c1:ae:12:ac:a3:2c:fc:c3:d4:2b:41:21:
be:b8:1d:13:65:8a:dc:eb:d8:81:43:59:58:44:8a:
53:60:79:bc:ac:0a:48:76:71:06:98:69:d2:fd:f4:
a7:d3:69:82:b6:40:fa:2d:01:00:19:ac:2b:ee:ae:
58:64:76:47:1c:c8:1f:18:fe:c0:60:1a:36:ad:93:
7c:49:dc:61:b2:f4:0a:bd:49:c5:1a:7d:cd:e9:4c:
6c:e5:be:c4:16:36:7d:f0:1d:a0:a2:be:5a:8d:54:
42:ad:c4:2f:3d:05:c4:4c:2b:87:16:49:59:2f:58:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7D:31:DF:8F:7E:69:99:57:35:97:39:56:EA:42:79:BC:60:55:81
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/P30x349-aZlXNZc5VupCebxgVYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.33.0-5.180.34.255
85.209.161.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b7:cc:14:59:f5:cb:8e:b2:37:a3:f4:c4:a1:47:b6:e1:2b:
fa:fb:29:84:22:e6:12:45:f3:27:5a:34:e9:da:ad:7a:fc:a2:
b3:40:24:60:e6:16:bf:95:4b:ec:8e:41:5a:a9:fa:ba:c1:4b:
42:8b:1e:02:d9:5d:7f:d0:ad:b4:b6:6c:02:05:f5:21:0f:e1:
fc:dc:f3:45:a6:b3:8c:88:5b:92:aa:cd:f3:24:0d:68:99:55:
f0:1f:c6:91:02:54:5e:97:6a:9e:cb:5a:7a:a6:81:57:5f:ed:
e2:cb:e0:77:be:fd:db:85:d8:18:d6:d7:b1:0a:18:1c:fc:40:
fd:7b:04:d4:a5:cd:a9:e3:78:7c:bb:72:4a:cc:9b:1a:9d:52:
3a:7b:e8:22:d1:a8:8e:22:96:a2:49:0e:18:fd:a3:ba:8a:9e:
97:e7:d0:67:0c:66:76:54:89:8d:ec:29:4c:0d:61:43:cf:15:
54:c5:6c:96:91:f5:bb:90:f1:44:75:98:b0:fe:01:69:f6:25:
29:3b:88:73:51:e4:7d:46:3e:dc:a1:ee:b4:2e:44:09:19:bf:
8c:bd:cb:b4:f9:1a:65:a8:1a:bb:28:06:4f:c1:f0:e4:6d:c5:
f7:ca:fc:b5:84:54:44:81:51:63:09:0b:37:cb:91:4f:d4:c6:
cb:d9:36:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jan 17 21:33:09 2024 by rpki-client on console-ams.rpki-client.org