Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/g8POfsq7czJP4g8DlxFZb93_GI0.roa
File: g8POfsq7czJP4g8DlxFZb93_GI0.roa (raw, json)
Hash identifier: ItQt2//6kJvPHFs9uLtl0Z7LwD4rzqlEws2ruoqgE+4=
Subject key identifier: 83:C3:CE:7E:CA:BB:73:32:4F:E2:0F:03:97:11:59:6F:DD:FF:18:8D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01884D1B265D92F4598F45932C24128C1160
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/g8POfsq7czJP4g8DlxFZb93_GI0.roa
Signing time: Wed 24 May 2023 09:33:24 +0000
ROA not before: Wed 24 May 2023 09:33:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.209.163.0/24 maxlen: 24
5.180.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:1b:26:5d:92:f4:59:8f:45:93:2c:24:12:8c:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 24 09:33:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83c3ce7ecabb73324fe20f039711596fddff188d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:e7:f2:27:f8:a5:ba:11:c3:91:cc:d2:a7:
f5:3e:31:d9:2d:e5:d8:0e:15:a9:0d:92:52:89:fa:
1f:72:b7:f6:29:29:ee:7d:fe:46:31:8d:24:ff:77:
ba:17:81:d6:bd:d6:ab:46:6c:30:8e:cf:87:65:01:
6a:ed:a7:fb:62:e7:31:44:8e:03:ac:de:00:05:16:
41:87:13:96:de:be:44:bb:da:d1:76:40:73:d3:34:
cc:df:a1:8e:40:ce:d4:90:0d:be:87:06:63:bc:74:
6a:39:bd:6d:b1:15:ad:0f:1f:1e:e9:cc:52:05:47:
8c:7a:6c:0e:fe:45:d6:b2:74:8a:1a:cd:73:01:67:
4e:b9:28:b2:d6:0c:9e:c0:9f:e8:a2:5e:27:0f:8e:
62:5c:9c:3b:6f:54:bd:ea:62:f2:03:23:00:ef:7b:
c5:c6:e8:a2:ab:59:a8:da:9f:67:f5:04:ea:0a:c1:
6d:49:59:8e:e5:64:f4:5b:a0:50:ea:09:0b:3e:26:
c5:08:b2:8c:a0:6d:44:d4:33:32:23:7a:a8:6b:48:
fc:4d:38:7d:ae:b9:f5:df:46:7c:8f:44:12:fd:3b:
51:e8:9e:84:a7:df:38:5d:95:28:4c:37:4f:16:ee:
23:5a:39:37:17:7a:ab:00:c9:f7:e6:1e:f7:39:9d:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C3:CE:7E:CA:BB:73:32:4F:E2:0F:03:97:11:59:6F:DD:FF:18:8D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/g8POfsq7czJP4g8DlxFZb93_GI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.49.0/24
85.209.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:25:8a:93:77:30:8d:6e:8b:cd:0c:fc:b1:75:7d:e6:9d:3b:
39:dc:f7:c9:36:97:ea:25:45:27:65:4e:f8:2e:66:f2:f0:24:
4b:19:03:35:51:20:1a:3a:10:70:29:33:16:d7:2c:38:c0:43:
2d:b7:44:6f:ed:28:43:c9:f6:6d:fb:98:4e:20:98:c0:99:cf:
3c:73:5c:08:0c:f8:73:76:50:3b:a3:e1:e6:84:d1:a2:32:7a:
2b:03:2c:3e:f9:eb:76:00:cc:75:7e:93:20:3e:8c:7b:24:da:
7f:96:94:01:c3:01:b6:71:f7:04:4d:e8:47:81:40:7d:29:c5:
18:fb:ae:58:7a:d3:0a:86:3e:fb:7e:ad:6a:ca:a8:c3:48:4c:
39:d3:d6:4b:ce:ed:12:5a:4a:c7:1a:77:7d:05:9c:cf:2a:e1:
04:bd:15:18:9a:ae:5c:73:51:e0:01:df:fe:5c:45:97:a4:bd:
b4:d4:41:44:43:99:22:5e:ab:15:4a:1c:a6:83:83:6b:71:e0:
45:40:06:30:b2:d3:19:8d:cb:15:e8:00:d3:9b:ce:2d:82:0f:
c6:eb:35:e3:a1:87:d1:42:05:5d:23:32:45:61:7e:91:92:10:
a6:0d:5d:72:5d:0a:5a:ac:12:6d:8e:a2:68:2c:04:03:ec:f1:
bd:02:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org