Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/c2n88J5_iFiT7cY3DYn-OlSky78.roa
File: c2n88J5_iFiT7cY3DYn-OlSky78.roa (raw, json)
Hash identifier: mF/WEKtbUTuo/iTntYasDpTeZzaVU6RUmy6jRX6Fveg=
Subject key identifier: 73:69:FC:F0:9E:7F:88:58:93:ED:C6:37:0D:89:FE:3A:54:A4:CB:BF
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A9F378444D265D6E42ECCA83BBE4B3FCD
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/c2n88J5_iFiT7cY3DYn-OlSky78.roa
Signing time: Sat 16 Sep 2023 18:18:50 +0000
ROA not before: Sat 16 Sep 2023 18:18:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.253.38.0/24 maxlen: 24
5.180.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9f:37:84:44:d2:65:d6:e4:2e:cc:a8:3b:be:4b:3f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 16 18:18:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7369fcf09e7f885893edc6370d89fe3a54a4cbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:2f:54:51:68:07:b5:0e:28:04:c7:29:cc:
ee:54:05:c0:a4:35:34:85:fd:05:9f:55:eb:3d:98:
81:45:8e:9a:e8:77:1f:80:c4:d7:c9:5a:1b:a8:e4:
bb:23:46:eb:6d:00:17:08:4b:6b:d9:7d:b1:7b:64:
89:38:88:62:05:d3:ee:3e:1d:30:df:ac:f4:d2:4b:
de:42:15:a4:5b:5b:78:4a:a4:65:c1:bb:20:f0:f5:
4a:09:57:14:70:cd:68:4e:7d:d3:66:c9:b8:49:af:
15:66:88:ee:aa:90:2a:fb:f4:3b:ab:b0:98:dc:28:
c7:dd:a6:a8:c2:93:3e:d0:c0:88:9b:37:e4:8a:02:
23:4e:0c:72:0b:5c:81:31:f3:88:91:a8:e9:09:e9:
c9:20:b0:ad:79:c9:e5:ae:8a:8f:07:6e:fb:1d:ee:
57:83:07:d0:8e:fc:33:da:66:66:12:8d:60:2a:45:
cf:c6:be:8d:34:b9:51:5a:5d:28:4f:d4:d2:c8:df:
6f:7f:42:1f:51:52:ba:9d:48:53:53:07:84:3a:72:
20:88:9e:b0:d1:e3:59:4a:de:ea:d7:da:51:73:76:
35:f7:93:92:46:59:8b:95:3c:e0:02:3e:dc:b8:ec:
12:d0:48:7c:c8:cf:2b:a6:f2:a7:c1:94:f9:a7:df:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:69:FC:F0:9E:7F:88:58:93:ED:C6:37:0D:89:FE:3A:54:A4:CB:BF
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/c2n88J5_iFiT7cY3DYn-OlSky78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.83.0/24
5.253.38.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c4:e9:02:dd:d6:fa:4a:a3:9e:fd:7d:f3:67:04:77:d6:df:
9a:1d:33:e5:82:37:32:d8:0f:8d:88:62:ac:59:04:59:cc:01:
2e:38:a1:93:05:36:80:07:ce:e1:e5:57:37:8a:b6:65:30:da:
65:58:f9:71:47:82:bc:10:c3:e0:e5:9b:80:20:a9:c1:e8:a6:
fe:1a:45:e8:c6:9c:7e:40:6e:21:36:f4:b4:d1:b8:84:df:dd:
57:12:b6:97:a7:4b:9a:1f:fd:2b:92:a3:d0:93:7d:80:6b:18:
43:1c:e8:d1:d2:66:7a:0b:88:3b:50:cc:2e:fb:e1:77:1f:1b:
46:56:78:0e:c8:d3:46:99:15:15:84:33:96:ad:d7:61:77:de:
47:af:7e:42:15:fb:3e:41:8e:5d:bc:25:73:6e:17:39:cd:ce:
4a:44:5a:f6:d7:89:8a:7c:5a:2c:fd:fb:39:98:29:b8:8e:3b:
74:fc:3d:df:1b:c2:6e:8f:52:a7:2a:cd:af:24:cc:a6:06:8e:
0a:3e:2d:65:56:33:ee:bd:73:16:fe:d8:27:82:7f:f9:36:07:
11:d5:de:f4:32:98:bc:46:da:fb:e2:bb:5e:a8:6d:91:45:e9:
57:d9:ba:8d:3c:a5:1f:0c:14:6b:a2:68:fc:16:3b:0a:8e:f0:
a5:4a:2b:08
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqfN4RE0mXW5C7MqDu+Sz/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwOTE2MTgxODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzY5ZmNmMDllN2Y4ODU4OTNlZGM2MzcwZDg5ZmUzYTU0YTRjYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJovVFFoB7UOKATHKczuVAXApDU0
hf0Fn1XrPZiBRY6a6HcfgMTXyVobqOS7I0brbQAXCEtr2X2xe2SJOIhiBdPuPh0w
36z00kveQhWkW1t4SqRlwbsg8PVKCVcUcM1oTn3TZsm4Sa8VZojuqpAq+/Q7q7CY
3CjH3aaowpM+0MCImzfkigIjTgxyC1yBMfOIkajpCenJILCtecnlroqPB277He5X
gwfQjvwz2mZmEo1gKkXPxr6NNLlRWl0oT9TSyN9vf0IfUVK6nUhTUweEOnIgiJ6w
0eNZSt7q19pRc3Y195OSRlmLlTzgAj7cuOwS0Eh8yM8rpvKnwZT5p98cowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHNp/PCef4hYk+3GNw2J/jpUpMu/MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvYzJuODhKNV9pRmlUN2NZM0RZbi1PbFNreTc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbRTAwQA
Bf0mMA0GCSqGSIb3DQEBCwUAA4IBAQBQxOkC3db6SqOe/X3zZwR31t+aHTPlgjcy
2A+NiGKsWQRZzAEuOKGTBTaAB87h5Vc3irZlMNplWPlxR4K8EMPg5ZuAIKnB6Kb+
GkXoxpx+QG4hNvS00biE391XEraXp0uaH/0rkqPQk32AaxhDHOjR0mZ6C4g7UMwu
++F3HxtGVngOyNNGmRUVhDOWrddhd95Hr35CFfs+QY5dvCVzbhc5zc5KRFr214mK
fFos/fs5mCm4jjt0/D3fG8Juj1KnKs2vJMymBo4KPi1lVjPuvXMW/tgngn/5NgcR
1d70Mpi8Rtr74rteqG2RRelX2bqNPKUfDBRromj8FjsKjvClSisI
-----END CERTIFICATE-----
Generated at Sun Sep 17 11:31:33 2023 by rpki-client on console-ams.rpki-client.org