Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/YUSZcCM0GGQrdtb9VD_mK-Ey75E.roa
File: YUSZcCM0GGQrdtb9VD_mK-Ey75E.roa (raw, json)
Hash identifier: hP+/0IRbKKjyLg3bfxZ/Q2qWPavskMlY2SPwmyibe1k=
Subject key identifier: 61:44:99:70:23:34:18:64:2B:76:D6:FD:54:3F:E6:2B:E1:32:EF:91
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B4FCF81F14AFCC9F4CA9662791441
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/YUSZcCM0GGQrdtb9VD_mK-Ey75E.roa
Signing time: Sun 01 Jan 2023 18:15:01 +0000
ROA not before: Sun 01 Jan 2023 18:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 5.180.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:4f:cf:81:f1:4a:fc:c9:f4:ca:96:62:79:14:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61449970233418642b76d6fd543fe62be132ef91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:86:ce:71:1a:b3:ed:3e:c4:1c:9c:a5:99:66:
ba:16:09:d1:e9:f0:8d:b1:a1:be:ae:d9:da:de:07:
45:0d:d1:e2:a9:66:9c:d3:63:18:a5:3b:74:ce:03:
a8:7c:06:64:33:c2:fc:2a:e8:a9:08:ed:b7:24:f6:
eb:ad:21:9d:f4:db:67:b1:4b:8f:a1:e7:62:c4:4d:
85:93:0e:26:ab:39:30:59:06:ab:12:d5:ac:b5:d8:
53:61:b0:8b:17:ab:02:c1:31:32:aa:59:04:c3:1c:
a1:e3:f4:ac:59:60:ae:91:07:e8:a9:c7:89:18:d3:
38:af:48:33:d6:70:08:4e:37:8d:ed:a6:35:54:26:
6c:7f:45:03:18:0d:eb:d3:b6:32:4a:ee:2a:ca:9f:
f9:0e:8c:5b:13:8b:82:87:03:dd:db:d1:86:ec:fe:
9c:06:9c:dd:cf:92:08:45:25:4a:95:69:d7:a4:51:
9c:5e:5d:f4:a5:83:aa:3e:00:0e:6a:09:86:f1:c4:
b9:c6:57:a9:54:57:a1:31:12:89:17:c4:a3:32:3d:
35:61:74:01:be:05:2e:58:39:57:3c:35:7c:aa:6a:
44:0e:23:ac:4e:06:46:f9:17:82:72:c4:bf:82:35:
45:42:b5:74:be:57:c7:76:12:4e:1a:6e:8d:6c:f0:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:44:99:70:23:34:18:64:2B:76:D6:FD:54:3F:E6:2B:E1:32:EF:91
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/YUSZcCM0GGQrdtb9VD_mK-Ey75E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.35.0/24
Signature Algorithm: sha256WithRSAEncryption
86:16:36:fa:2c:d0:5b:1a:47:ee:de:39:2a:f6:7e:29:52:2e:
9e:f2:9b:56:ad:36:6e:11:1d:43:62:90:7a:86:f5:a9:ab:ee:
da:43:20:aa:9f:ba:0e:83:de:7e:0b:0e:42:aa:30:a1:33:a0:
ba:49:41:3c:bf:e1:67:9f:32:fc:69:5c:eb:ba:73:a7:8d:d9:
3e:fc:63:bf:61:98:10:0c:26:65:70:24:62:be:3a:84:ad:d1:
ee:19:3e:e4:6e:99:a8:bd:3b:1e:30:a5:eb:d3:c4:00:d0:17:
c3:ac:4a:cf:aa:5d:a9:6e:02:95:68:91:ed:0e:70:0f:19:ce:
78:11:a4:81:ad:29:23:1e:bd:f1:f9:85:9c:02:76:5e:ad:a3:
57:5e:bc:34:28:8b:2f:df:ec:66:81:20:68:d6:0d:cb:85:f6:
49:5a:f8:8e:f6:8e:0a:3e:9c:f0:ba:36:a7:0b:c4:07:d5:50:
98:3f:f1:47:17:e6:8e:db:dd:92:a0:08:4b:11:96:cc:75:c6:
fe:21:13:f0:80:32:6b:be:7e:30:64:82:04:48:48:07:04:df:
81:5b:8e:76:47:be:b6:b0:84:f5:51:54:a4:2c:1a:37:b8:e1:
6f:45:d3:cc:75:32:9a:17:2e:86:b1:db:eb:eb:b8:97:77:95:
b8:15:db:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:17 2024 by rpki-client on console-fra.rpki-client.org