Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XnL9ecslCyWFWDrjTSlUaONjWXs.roa
File: XnL9ecslCyWFWDrjTSlUaONjWXs.roa (raw, json)
Hash identifier: B5HeSbHXpkKbCHffIwErMGDBnM0Y+d5QNBuw9b2JnxQ=
Subject key identifier: 5E:72:FD:79:CB:25:0B:25:85:58:3A:E3:4D:29:54:68:E3:63:59:7B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0189BA7F16440FFF21905537C2CFA95A1D3F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XnL9ecslCyWFWDrjTSlUaONjWXs.roa
Signing time: Thu 03 Aug 2023 08:23:58 +0000
ROA not before: Thu 03 Aug 2023 08:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.49.0/24 maxlen: 24
5.180.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:7f:16:44:0f:ff:21:90:55:37:c2:cf:a9:5a:1d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 3 08:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e72fd79cb250b2585583ae34d295468e363597b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:c5:fa:d5:f8:3b:00:20:7c:eb:ea:5f:fb:
a0:3f:f8:33:14:42:b2:2b:e4:98:a5:e3:6f:a8:74:
39:62:fd:36:af:ea:d5:30:a3:da:52:94:65:18:8b:
f4:cd:f2:7d:33:26:5f:a6:1f:10:1d:07:77:be:03:
33:a7:d6:9f:1b:d7:f8:81:87:f9:17:24:46:dd:ee:
f7:5e:06:65:66:e9:67:ac:07:72:52:53:ea:52:3d:
ea:a7:eb:f1:84:ea:ae:b2:aa:d7:be:50:2b:cd:ca:
34:c3:84:b7:e3:2e:b5:79:5a:51:88:c0:03:a2:d8:
2b:bf:2d:09:ac:5a:77:9e:be:e0:29:a5:6e:ec:3a:
53:fb:3e:e8:b0:5a:7c:af:69:e3:6e:67:6a:60:43:
1e:c5:57:82:05:0f:c1:91:b8:5e:d9:80:70:56:4b:
25:de:71:c9:6c:89:fa:d6:2d:37:d7:22:f2:a6:80:
1e:52:9e:50:c7:d5:6a:95:55:58:12:0f:77:1c:b8:
d8:3d:b1:07:22:85:d0:6a:28:98:74:ea:e1:1b:67:
0c:87:7b:c9:de:a9:2c:c9:6e:4d:54:bb:d5:e9:e7:
01:27:69:46:12:00:e5:ad:2d:89:2a:9b:5d:a7:a4:
c8:d2:55:96:85:94:25:a8:f7:30:29:c1:15:9a:25:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:FD:79:CB:25:0B:25:85:58:3A:E3:4D:29:54:68:E3:63:59:7B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XnL9ecslCyWFWDrjTSlUaONjWXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.49.0/24
5.180.82.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a8:fe:33:a4:2c:6a:e6:87:4d:64:37:f2:d8:91:b7:40:cc:
a9:a4:c4:26:c7:3b:0f:9c:5c:54:93:38:2f:0e:cb:83:1a:3b:
fb:4f:b8:0a:52:7f:75:53:09:59:8e:74:6d:92:b4:83:6b:22:
ad:05:72:7a:a1:ab:d6:07:5b:26:9b:a0:d6:28:87:95:5f:06:
c9:f3:64:47:99:ca:da:b7:26:01:10:10:bf:32:57:8e:0b:a2:
c9:6b:2a:49:69:27:3f:66:10:cf:63:d5:3f:f4:63:b3:d2:1d:
1f:9b:99:00:b1:d8:27:b2:96:8b:e5:aa:d8:f9:8d:55:81:88:
d8:c1:b1:16:94:dc:c0:af:05:5e:b4:70:03:08:a4:4d:22:81:
4a:b9:6f:ae:aa:a9:93:a0:68:b0:a4:f5:f5:72:6d:de:fe:69:
ed:2e:15:45:3d:3e:af:3e:09:57:48:26:fa:37:7b:5e:89:90:
3f:0f:a1:06:85:4c:ba:cf:08:97:a3:0a:52:b7:d5:82:d9:62:
ab:41:1c:3b:3b:5b:78:83:2b:71:13:d2:a2:06:0d:55:dc:f6:
ee:da:15:19:0c:fc:5c:cf:4c:6d:8d:23:5b:37:d0:1c:4d:6a:
27:da:f2:d6:7e:c0:ba:fd:62:9e:1f:48:da:c9:42:96:48:15:
e3:f8:6d:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYm6fxZED/8hkFU3ws+pWh0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwODAzMDgyMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTcyZmQ3OWNiMjUwYjI1ODU1ODNhZTM0ZDI5NTQ2OGUzNjM1OTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik3F+tX4OwAgfOvqX/ugP/gzFEKy
K+SYpeNvqHQ5Yv02r+rVMKPaUpRlGIv0zfJ9MyZfph8QHQd3vgMzp9afG9f4gYf5
FyRG3e73XgZlZulnrAdyUlPqUj3qp+vxhOqusqrXvlArzco0w4S34y61eVpRiMAD
otgrvy0JrFp3nr7gKaVu7DpT+z7osFp8r2njbmdqYEMexVeCBQ/Bkbhe2YBwVksl
3nHJbIn61i031yLypoAeUp5Qx9VqlVVYEg93HLjYPbEHIoXQaiiYdOrhG2cMh3vJ
3qksyW5NVLvV6ecBJ2lGEgDlrS2JKptdp6TI0lWWhZQlqPcwKcEVmiWSfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF5y/XnLJQslhVg6400pVGjjY1l7MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvWG5MOWVjc2xDeVdGV0RyalRTbFVhT05qV1hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbQxAwQA
BbRSMA0GCSqGSIb3DQEBCwUAA4IBAQCYqP4zpCxq5odNZDfy2JG3QMyppMQmxzsP
nFxUkzgvDsuDGjv7T7gKUn91UwlZjnRtkrSDayKtBXJ6oavWB1smm6DWKIeVXwbJ
82RHmcratyYBEBC/MleOC6LJaypJaSc/ZhDPY9U/9GOz0h0fm5kAsdgnspaL5arY
+Y1VgYjYwbEWlNzArwVetHADCKRNIoFKuW+uqqmToGiwpPX1cm3e/mntLhVFPT6v
PglXSCb6N3teiZA/D6EGhUy6zwiXowpSt9WC2WKrQRw7O1t4gytxE9KiBg1V3Pbu
2hUZDPxcz0xtjSNbN9AcTWon2vLWfsC6/WKeH0jayUKWSBXj+G0Q
-----END CERTIFICATE-----
Generated at Fri Aug 4 12:38:39 2023 by rpki-client on console-ams.rpki-client.org