Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bm6N7gBXdO2LUgJx2URuVJvjl1k.roa
File: bm6N7gBXdO2LUgJx2URuVJvjl1k.roa (raw, json)
Hash identifier: /bKiLXXmPAjQg8NqeMh3AnuXvVlXavpq97tjRWHiZIk=
Subject key identifier: 6E:6E:8D:EE:00:57:74:ED:8B:52:02:71:D9:44:6E:54:9B:E3:97:59
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01869C823A3F7DE55042CA2E79ADE24FF6D9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bm6N7gBXdO2LUgJx2URuVJvjl1k.roa
Signing time: Wed 01 Mar 2023 09:30:25 +0000
ROA not before: Wed 01 Mar 2023 09:30:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 5.180.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:82:3a:3f:7d:e5:50:42:ca:2e:79:ad:e2:4f:f6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 1 09:30:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e6e8dee005774ed8b520271d9446e549be39759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:38:ef:b0:2e:2d:b7:cc:43:b9:ec:6a:68:
f5:27:ff:d7:38:96:9b:ea:65:f0:e2:05:50:9a:50:
96:fa:65:c3:e6:8f:56:90:58:c1:14:b2:87:a8:99:
57:38:1d:43:1e:d7:80:26:ac:a7:5c:ad:cb:fb:a6:
b8:62:4c:9b:73:6d:c0:62:62:8a:e5:ce:d7:d6:0d:
a2:82:71:89:50:21:f9:58:61:1b:20:cd:dd:ac:15:
df:23:64:8f:60:6d:ad:aa:36:bd:19:ba:a8:41:a7:
ff:40:d9:00:69:cd:f8:2b:cd:08:ae:6f:43:22:22:
d8:dc:d7:9a:c1:1a:2b:ae:0d:b5:94:21:a6:4c:d5:
a8:ca:e3:d3:74:04:18:ab:f0:e3:82:73:eb:78:1e:
17:47:2b:dd:96:dd:0f:b5:64:cd:08:22:df:b8:22:
76:27:02:b5:36:a6:a1:ab:21:bb:9b:7e:f8:bf:b9:
bf:6c:fd:97:d7:37:27:a0:db:cf:38:6b:f3:8d:93:
48:42:f7:77:65:a0:4f:c3:0a:28:bb:56:36:81:37:
a5:88:12:b2:25:dc:92:2d:36:ce:fd:c9:ee:d2:9b:
f2:96:e2:9c:05:36:a2:45:8d:82:f5:90:73:96:26:
a4:31:69:00:0f:22:df:25:5a:ae:77:68:c7:76:07:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6E:8D:EE:00:57:74:ED:8B:52:02:71:D9:44:6E:54:9B:E3:97:59
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bm6N7gBXdO2LUgJx2URuVJvjl1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.232.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:a2:c6:fd:45:16:3b:da:47:e8:ca:00:89:de:9f:2e:ba:73:
00:b6:ae:b0:52:e8:92:51:fb:b6:d9:ba:c2:69:c2:7b:77:26:
9f:fd:c8:35:48:f6:07:5d:53:89:46:52:a2:0f:af:28:1c:1d:
c6:bf:97:45:80:e6:fe:73:c5:35:09:e1:39:1f:a8:54:91:72:
97:19:e0:dc:fe:96:95:a2:5d:31:f0:cb:a6:c3:76:4d:95:47:
6c:19:9e:aa:86:0f:2d:e3:1d:f3:6f:ba:36:f1:af:d3:4a:74:
37:47:7b:ef:b0:18:43:2c:5f:4c:3e:b0:da:7a:50:d8:c4:f0:
86:29:80:9e:40:7a:c7:21:6c:6a:d0:df:6d:bf:01:87:3e:6d:
80:ee:90:b4:62:f4:b1:be:f5:c6:74:07:a9:fb:d5:77:eb:18:
19:3a:cb:53:77:9d:e0:07:31:df:bf:01:86:dc:31:fa:17:24:
71:ca:2d:5f:8a:a6:4d:fa:55:b5:6a:d6:d8:86:2d:e0:67:f8:
14:22:46:32:99:66:f5:01:94:0e:af:b6:ad:fc:fd:e5:98:f5:
96:4a:11:5d:94:21:07:5c:d6:08:43:e4:5a:b3:44:e2:7e:11:
20:63:89:b0:ee:40:79:83:bc:a7:e8:f8:4b:36:90:ee:ce:de:
68:44:83:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYacgjo/feVQQsouea3iT/bZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwMzAxMDkzMDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTZlOGRlZTAwNTc3NGVkOGI1MjAyNzFkOTQ0NmU1NDliZTM5NzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx0477AuLbfMQ7nsamj1J//XOJab
6mXw4gVQmlCW+mXD5o9WkFjBFLKHqJlXOB1DHteAJqynXK3L+6a4Ykybc23AYmKK
5c7X1g2ignGJUCH5WGEbIM3drBXfI2SPYG2tqja9GbqoQaf/QNkAac34K80Irm9D
IiLY3NeawRorrg21lCGmTNWoyuPTdAQYq/DjgnPreB4XRyvdlt0PtWTNCCLfuCJ2
JwK1NqahqyG7m374v7m/bP2X1zcnoNvPOGvzjZNIQvd3ZaBPwwoou1Y2gTeliBKy
JdySLTbO/cnu0pvyluKcBTaiRY2C9ZBzliakMWkADyLfJVqud2jHdgeoDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG5uje4AV3Tti1ICcdlEblSb45dZMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvYm02TjdnQlhkTzJMVWdKeDJVUnVWSnZqbDFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbToMA0G
CSqGSIb3DQEBCwUAA4IBAQDQosb9RRY72kfoygCJ3p8uunMAtq6wUuiSUfu22brC
acJ7dyaf/cg1SPYHXVOJRlKiD68oHB3Gv5dFgOb+c8U1CeE5H6hUkXKXGeDc/paV
ol0x8Mumw3ZNlUdsGZ6qhg8t4x3zb7o28a/TSnQ3R3vvsBhDLF9MPrDaelDYxPCG
KYCeQHrHIWxq0N9tvwGHPm2A7pC0YvSxvvXGdAep+9V36xgZOstTd53gBzHfvwGG
3DH6FyRxyi1fiqZN+lW1atbYhi3gZ/gUIkYymWb1AZQOr7at/P3lmPWWShFdlCEH
XNYIQ+Ras0TifhEgY4mw7kB5g7yn6PhLNpDuzt5oRIPR
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org