Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ZDVNtniNb5vx2a5xzxKOqijE8qE.roa
File: ZDVNtniNb5vx2a5xzxKOqijE8qE.roa (raw, json)
Hash identifier: SRT+4DghfXnYHmXy/AgKnYQUArxsEJIRQdnhVzsjEJQ=
Subject key identifier: 64:35:4D:B6:78:8D:6F:9B:F1:D9:AE:71:CF:12:8E:AA:28:C4:F2:A1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018C7397A103747F1D6D3E6875E39234EFA7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ZDVNtniNb5vx2a5xzxKOqijE8qE.roa
Signing time: Sat 16 Dec 2023 17:06:06 +0000
ROA not before: Sat 16 Dec 2023 17:06:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.33.0/24 maxlen: 24
5.180.34.0/24 maxlen: 24
5.180.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:73:97:a1:03:74:7f:1d:6d:3e:68:75:e3:92:34:ef:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Dec 16 17:06:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64354db6788d6f9bf1d9ae71cf128eaa28c4f2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b0:22:f7:c5:7a:1e:3b:1c:ce:56:d9:bf:9a:
a5:bb:33:41:e8:43:0e:7b:5a:37:b5:a0:36:16:1c:
c4:47:7c:0b:09:ba:87:f5:c1:da:56:1d:05:42:e1:
59:88:25:e4:06:ae:4f:49:d1:b1:13:76:10:1d:32:
0c:31:67:d5:97:20:2f:46:81:6e:fc:b8:65:82:39:
f1:31:e2:17:99:d0:51:43:d2:66:c5:07:5e:46:36:
62:ad:89:99:26:7e:15:d4:c9:d3:fb:0e:e3:0c:ea:
f4:15:c9:11:59:91:60:e4:e2:87:2f:c7:c9:bf:55:
17:ff:ed:5e:92:af:c2:8e:d8:d2:ec:4c:bb:b9:18:
1e:58:28:7d:75:da:0b:d1:63:5f:52:ec:d1:9e:87:
0e:a0:6e:b2:2a:64:2b:58:7e:5b:16:f0:94:91:37:
94:22:e4:7a:30:7b:0e:5b:94:3e:54:41:07:78:4b:
bd:d5:13:09:87:4c:de:f1:8a:69:1a:0d:16:a8:84:
43:b0:c7:0f:b6:2b:b0:86:78:85:6b:a7:d4:d9:ce:
84:20:24:a2:88:91:70:ae:4c:91:f1:6b:9a:ab:7c:
83:87:fb:a1:b6:57:31:9a:a3:92:b0:75:f9:c0:69:
21:6a:56:fa:b1:6f:95:ec:86:7d:de:c0:45:37:ab:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:35:4D:B6:78:8D:6F:9B:F1:D9:AE:71:CF:12:8E:AA:28:C4:F2:A1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ZDVNtniNb5vx2a5xzxKOqijE8qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.33.0-5.180.34.255
5.180.48.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ae:d2:86:99:82:67:d7:81:2f:0c:73:59:6b:2e:34:31:c5:
b3:3b:3f:c3:36:cc:a7:73:ea:af:5b:93:85:ec:58:32:73:80:
5e:60:ec:ad:2c:91:51:f3:2a:57:fd:97:b6:23:07:12:21:51:
98:60:c6:da:62:8a:52:36:70:75:cd:d3:c6:ef:59:53:f3:83:
07:a9:92:a2:36:9d:7d:1b:f0:bf:82:e0:96:6b:97:91:9e:47:
d9:54:43:e1:68:6f:ec:8a:da:cf:c0:15:d9:46:e5:57:c0:da:
e2:76:22:e7:33:f8:a1:74:dc:35:cc:48:43:d6:9b:d4:c1:b0:
31:32:51:ae:1f:a4:22:6d:46:cd:6d:5e:79:71:9d:64:ac:a8:
c6:19:21:2a:8e:73:cb:51:f1:64:aa:78:9f:c7:9d:74:98:9b:
78:aa:66:d6:6e:29:18:e0:74:02:35:23:3d:6e:5d:48:52:d3:
12:42:fd:75:57:ab:d6:41:e0:68:04:33:63:6a:b2:65:ef:79:
ee:2d:75:08:46:93:d4:13:88:6a:87:4b:92:7f:cc:c1:be:49:
25:e1:81:f3:24:0a:c6:d6:63:91:e7:ce:dd:2b:fb:4e:45:1f:
76:e6:92:0f:2c:15:ba:7d:12:cc:d6:1d:9e:56:1f:21:de:e6:
4c:dd:05:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 17 21:47:27 2023 by rpki-client on console-ams.rpki-client.org