Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QHGQIAlEbh_sTGaXOIsd2S7u_n4.roa
File: QHGQIAlEbh_sTGaXOIsd2S7u_n4.roa (raw, json)
Hash identifier: BxkruXH/kUlEQC+1cDJEZ9SGiwAkDsNkFFYRkRMUBl0=
Subject key identifier: 40:71:90:20:09:44:6E:1F:EC:4C:66:97:38:8B:1D:D9:2E:EE:FE:7E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018C7994E0CC6C6A0FE9AE138C97E0B495E6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QHGQIAlEbh_sTGaXOIsd2S7u_n4.roa
Signing time: Sun 17 Dec 2023 21:00:49 +0000
ROA not before: Sun 17 Dec 2023 21:00:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:79:94:e0:cc:6c:6a:0f:e9:ae:13:8c:97:e0:b4:95:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Dec 17 21:00:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4071902009446e1fec4c6697388b1dd92eeefe7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:2f:b2:72:d3:e6:a2:a7:78:28:f8:31:7d:
87:7d:3f:de:52:8a:bc:ea:27:18:c1:22:b0:d3:f3:
fa:bb:a8:99:3f:c5:28:6d:d1:33:b4:eb:32:bd:17:
cf:9e:8a:42:53:36:9a:02:5e:c0:7e:e9:84:b3:26:
ec:2e:ed:a0:04:ed:2b:42:81:33:14:5a:06:ce:73:
f4:14:98:43:0f:4e:23:91:1b:dc:a2:43:72:4a:3f:
72:6e:f1:4e:f2:c9:02:e6:f9:20:e9:57:20:fb:55:
0d:40:1c:36:8e:4c:b2:45:ae:78:ab:05:39:7a:d2:
26:50:bb:b7:f3:43:f0:47:6e:38:9e:6c:6f:6c:75:
f2:b0:b2:87:19:7a:1a:36:42:47:8f:a9:40:60:f0:
6f:09:16:82:36:3e:b7:04:53:9a:fb:63:d7:18:aa:
61:4d:0b:92:0e:9f:a8:a4:47:6a:a7:12:4d:de:bd:
12:6e:87:6e:03:16:b5:75:db:6d:8b:f3:74:42:15:
11:f1:f1:72:e1:22:14:a8:9a:bb:e3:96:c3:c3:1b:
f8:3e:2f:8e:e0:b3:7c:ed:de:ee:8b:34:b1:8c:a2:
38:15:6a:f4:3e:03:37:50:dc:23:b3:7c:32:58:82:
a2:ef:76:82:d2:bf:37:91:2d:f2:b9:b4:29:8a:66:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:71:90:20:09:44:6E:1F:EC:4C:66:97:38:8B:1D:D9:2E:EE:FE:7E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QHGQIAlEbh_sTGaXOIsd2S7u_n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.34.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d7:cc:6d:86:2b:c7:02:65:ba:02:ef:81:b4:28:f8:d1:62:
68:91:1f:aa:68:a0:2d:32:1a:26:87:e7:e8:3a:fe:85:c2:fb:
c7:d6:44:8e:1e:35:d3:a7:d2:40:ad:bd:89:31:7f:87:1a:b7:
a0:39:93:b3:24:3d:c1:e7:6a:8c:f0:8c:b8:87:88:f8:c8:95:
ac:fd:7d:46:82:0a:73:43:92:9c:c5:41:4a:82:f5:e0:bf:0f:
4f:93:c0:13:91:33:10:ab:73:48:7f:0a:23:55:91:6b:db:37:
d9:4f:d3:d7:76:d6:5e:62:16:e5:5a:0a:3f:0c:92:8e:3b:f9:
81:69:9a:db:ac:fa:bc:87:02:57:3a:ef:75:c5:3e:54:82:de:
ff:21:7e:6b:67:28:63:40:ab:5b:2d:15:16:5f:21:b4:45:49:
7d:6b:38:11:e9:4d:3a:71:8c:a4:a6:50:86:21:42:ed:9a:96:
99:94:84:61:f5:80:2e:81:e7:00:83:00:c7:86:38:2f:ec:01:
97:7b:c3:e1:0b:3e:86:4c:24:41:88:e4:1c:cd:2e:b5:58:96:
0a:12:6e:89:e1:15:fe:3e:91:6e:47:4e:a4:ce:e2:a8:fc:b6:
ae:c4:b6:ea:c5:57:61:b8:05:ab:b7:f4:52:3c:4b:30:90:be:
1a:d5:48:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:03 2024 by rpki-client on console-ams.rpki-client.org