Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TZX8SHzHoh4-YTIoPiCHqVEIB7o.roa
File: TZX8SHzHoh4-YTIoPiCHqVEIB7o.roa (raw, json)
Hash identifier: 0SkJeTHFJdzH4UcD65plti3tqLra93TVvykyMpCwni0=
Subject key identifier: 4D:95:FC:48:7C:C7:A2:1E:3E:61:32:28:3E:20:87:A9:51:08:07:BA
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B1548D2F847733C543B108695532815A0
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TZX8SHzHoh4-YTIoPiCHqVEIB7o.roa
Signing time: Mon 09 Oct 2023 16:32:55 +0000
ROA not before: Mon 09 Oct 2023 16:32:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:15:48:d2:f8:47:73:3c:54:3b:10:86:95:53:28:15:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 9 16:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d95fc487cc7a21e3e6132283e2087a9510807ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:be:95:09:5f:2d:18:9d:45:98:0f:3e:d2:83:
d1:3f:8f:4d:e6:a3:79:c3:87:2a:47:eb:72:f5:b6:
25:68:9e:3b:c1:57:cd:83:a4:6c:57:b6:53:fa:48:
bc:5e:e3:62:bd:a0:b8:0b:af:18:6d:0b:64:a5:36:
e7:21:d7:36:4c:29:63:fa:1d:21:7e:b3:42:60:bb:
5d:8e:be:46:d2:ac:ac:37:77:0a:10:31:ca:ed:a6:
95:e3:6a:03:d5:47:c5:46:37:05:a9:8f:bb:bb:57:
09:bc:fe:f4:fb:41:e1:48:27:23:09:3d:d9:c7:0d:
8a:e3:26:c4:3f:00:00:b4:45:8c:e7:65:b7:6c:fa:
dc:95:e4:dd:d4:29:1f:1d:0b:ac:b6:c3:a8:a6:c8:
6b:b5:1c:52:bc:b2:fa:87:90:ec:f6:7e:06:3c:36:
5d:5c:52:d0:2e:64:24:95:d1:f4:89:93:c3:db:3e:
08:be:7d:80:99:6c:f4:8a:54:97:93:12:d1:2d:fd:
43:64:29:8a:77:17:cc:bd:b7:39:1d:8b:12:73:f8:
b3:b8:85:02:24:87:b8:04:29:85:ed:65:f0:d6:71:
1a:ca:90:94:4d:62:be:f8:5e:55:b9:e8:f9:e9:70:
e6:cd:0f:37:69:b2:e6:f5:66:35:87:b4:1d:af:9e:
cd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:95:FC:48:7C:C7:A2:1E:3E:61:32:28:3E:20:87:A9:51:08:07:BA
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TZX8SHzHoh4-YTIoPiCHqVEIB7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:1f:7f:bb:3e:a3:d1:98:39:5c:f9:59:a8:ec:a4:1d:76:e1:
27:56:2c:ec:d3:56:5c:ac:82:1b:b4:08:66:d4:47:6b:f5:1f:
27:9a:e8:ce:ee:4b:f3:90:f6:c8:21:2e:07:27:a9:28:2f:d2:
c4:c0:5b:d8:c3:24:ef:d2:6f:74:29:e5:1b:91:e4:4f:33:23:
76:33:fa:b2:50:a1:ee:4d:73:0e:d3:26:93:d8:b2:bd:6b:74:
90:85:80:94:db:07:3a:8e:15:ec:5b:b7:03:d1:e0:29:de:3f:
65:a3:98:cb:12:8a:68:fa:f6:22:69:de:0a:d9:3d:a6:59:b4:
b0:25:75:1a:4d:66:03:de:1c:ed:1b:b7:ba:fa:cf:53:5c:a4:
cd:3b:5a:08:21:bf:4d:bf:65:c2:5a:e5:a3:b4:6e:ed:44:10:
29:68:9b:53:b7:39:47:71:19:41:31:a3:fe:db:dd:6a:cf:eb:
af:28:3d:df:82:51:4d:51:2f:b0:37:a1:ab:d5:70:cb:0d:39:
a3:1d:a2:d7:78:ea:93:2e:ce:ca:96:10:0f:23:8b:b2:4e:dd:
25:d0:14:a1:07:70:28:6d:9f:75:92:08:f6:11:2e:d8:b7:f0:
a6:30:0f:f6:27:19:cc:05:f3:0d:93:22:70:0a:82:05:42:4c:
59:05:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 17:42:26 2023 by rpki-client on console-fra.rpki-client.org