Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UE3O-MWi9AbPUKQ3xfcRi3PsF_U.roa
File: UE3O-MWi9AbPUKQ3xfcRi3PsF_U.roa (raw, json)
Hash identifier: EErU+/L5O7Q+Yghufv0gG9/YNq5OC4sLHrdIHxivIY0=
Subject key identifier: 50:4D:CE:F8:C5:A2:F4:06:CF:50:A4:37:C5:F7:11:8B:73:EC:17:F5
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE9478046B60A40928090F42393DD9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UE3O-MWi9AbPUKQ3xfcRi3PsF_U.roa
Signing time: Tue 02 Jan 2024 06:31:19 +0000
ROA not before: Tue 02 Jan 2024 06:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212815
IP address blocks: 5.180.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 08:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:94:78:04:6b:60:a4:09:28:09:0f:42:39:3d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=504dcef8c5a2f406cf50a437c5f7118b73ec17f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:c6:91:62:54:b8:7b:74:27:c2:39:8a:03:
f9:fd:32:ec:0c:97:4a:4b:e7:7f:a6:d4:08:83:8e:
7c:0a:5c:06:b9:1e:fa:5a:36:40:fa:a1:ea:ba:fe:
15:6d:03:cd:a2:50:80:6c:f3:60:83:85:87:1f:e5:
b1:68:e6:e6:80:77:80:aa:52:da:d2:fd:ee:94:7b:
7a:a0:60:13:c5:72:f4:bb:dc:f5:84:86:53:b4:cc:
02:dd:41:85:f4:56:15:a4:ad:db:f2:e6:61:23:db:
61:5c:c4:9c:7a:02:d5:69:de:e9:ac:09:c5:d9:f5:
35:fb:df:41:4e:c1:a0:fc:b3:43:6d:ff:a5:9f:56:
24:f4:9b:74:39:5d:45:cd:0a:0e:9c:63:d6:e6:a3:
00:5d:eb:5b:86:33:e7:0f:7d:70:b5:f0:c2:ae:6a:
c6:b0:53:c7:31:c3:c2:4e:c0:eb:1a:28:50:a6:a8:
93:6b:f3:8c:31:a1:7b:a2:b3:ea:03:98:47:e5:e7:
ba:19:4a:8c:8e:46:d5:1d:72:12:3d:ce:cd:53:03:
4d:d5:94:0c:4d:08:fd:45:59:b3:d4:59:08:1c:85:
bc:40:3b:21:cc:bd:1f:78:2d:91:f6:6d:ec:b0:3f:
5a:5c:3f:6b:f3:48:8a:06:87:3f:35:27:63:a2:eb:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4D:CE:F8:C5:A2:F4:06:CF:50:A4:37:C5:F7:11:8B:73:EC:17:F5
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UE3O-MWi9AbPUKQ3xfcRi3PsF_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d3:71:3b:7e:ad:ba:5c:7b:2d:70:96:55:b1:be:4e:35:73:
7d:bf:b0:91:0a:ef:c8:56:d2:d7:4d:73:60:55:69:cf:18:da:
84:15:8f:d3:98:c7:ea:c9:31:5e:e2:17:d3:72:af:43:e2:d0:
f6:82:84:49:a3:f4:82:d7:bd:7c:ca:9a:95:01:a8:73:46:76:
01:59:de:ff:be:80:18:ef:76:f3:b2:26:69:31:12:f0:83:8f:
c9:8e:24:d4:be:89:9e:8c:fd:3e:fc:e4:ad:02:4e:dd:50:d9:
df:ee:1f:d7:5c:3c:34:39:1d:55:4b:1b:4a:74:b4:82:4d:13:
9f:9f:8b:e3:10:44:40:a3:a0:b2:7e:88:98:de:1f:ed:16:e2:
69:d0:82:ca:cc:36:6b:34:90:af:e5:de:61:14:9e:58:dd:77:
11:bc:be:05:a0:37:b9:82:40:de:14:62:50:08:e0:e5:f2:9c:
68:4d:d3:92:4d:0e:21:78:39:45:da:9e:27:4b:9f:49:d6:fe:
11:ea:0b:b8:9f:fa:6e:73:63:91:7e:bb:47:57:18:a6:6e:fb:
6b:6a:b1:7e:f0:c3:0a:ef:ca:0b:b5:05:9c:fe:88:46:56:68:
5e:48:84:a1:23:96:a7:8e:9c:fb:2a:da:c7:fb:2e:55:9b:47:
1b:65:e6:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3pR4BGtgpAkoCQ9COT3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjQwMTAyMDYzMTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDRkY2VmOGM1YTJmNDA2Y2Y1MGE0MzdjNWY3MTE4YjczZWMxN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvnGkWJUuHt0J8I5igP5/TLsDJdK
S+d/ptQIg458ClwGuR76WjZA+qHquv4VbQPNolCAbPNgg4WHH+WxaObmgHeAqlLa
0v3ulHt6oGATxXL0u9z1hIZTtMwC3UGF9FYVpK3b8uZhI9thXMScegLVad7prAnF
2fU1+99BTsGg/LNDbf+ln1Yk9Jt0OV1FzQoOnGPW5qMAXetbhjPnD31wtfDCrmrG
sFPHMcPCTsDrGihQpqiTa/OMMaF7orPqA5hH5ee6GUqMjkbVHXISPc7NUwNN1ZQM
TQj9RVmz1FkIHIW8QDshzL0feC2R9m3ssD9aXD9r80iKBoc/NSdjouuXKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFBNzvjFovQGz1CkN8X3EYtz7Bf1MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvVUUzTy1NV2k5QWJQVUtRM3hmY1JpM1BzRl9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbTpMA0G
CSqGSIb3DQEBCwUAA4IBAQAH03E7fq26XHstcJZVsb5ONXN9v7CRCu/IVtLXTXNg
VWnPGNqEFY/TmMfqyTFe4hfTcq9D4tD2goRJo/SC1718ypqVAahzRnYBWd7/voAY
73bzsiZpMRLwg4/JjiTUvomejP0+/OStAk7dUNnf7h/XXDw0OR1VSxtKdLSCTROf
n4vjEERAo6CyfoiY3h/tFuJp0ILKzDZrNJCv5d5hFJ5Y3XcRvL4FoDe5gkDeFGJQ
CODl8pxoTdOSTQ4heDlF2p4nS59J1v4R6gu4n/puc2ORfrtHVximbvtrarF+8MMK
78oLtQWc/ohGVmheSIShI5anjpz7KtrH+y5Vm0cbZeYj
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:33 2025 by rpki-client