Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gEsVzfGmSf1e-25h3E9O-EnHmHU.roa
File: gEsVzfGmSf1e-25h3E9O-EnHmHU.roa (raw, json)
Hash identifier: yxfll78AejUqkLl1hbD0uSdGHbo2/VVebPjs+AJOOgQ=
Subject key identifier: 80:4B:15:CD:F1:A6:49:FD:5E:FB:6E:61:DC:4F:4E:F8:49:C7:98:75
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0188682F863FF8DBB44DC01DDD62BD08F9C6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gEsVzfGmSf1e-25h3E9O-EnHmHU.roa
Signing time: Mon 29 May 2023 15:45:24 +0000
ROA not before: Mon 29 May 2023 15:45:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.233.0/24 maxlen: 24
5.180.234.0/24 maxlen: 24
85.208.106.0/24 maxlen: 24
5.253.38.0/24 maxlen: 24
45.9.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:68:2f:86:3f:f8:db:b4:4d:c0:1d:dd:62:bd:08:f9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 29 15:45:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=804b15cdf1a649fd5efb6e61dc4f4ef849c79875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:dd:41:b2:3e:8f:98:50:18:90:47:a3:c8:
7c:16:16:ba:07:7f:a6:5c:38:39:c7:8e:ad:f4:12:
15:be:98:26:33:f9:de:45:d5:2e:fb:73:d3:60:6e:
57:cf:7d:56:c2:ca:0e:7c:55:f1:ea:30:b0:c6:8f:
99:be:f7:67:31:45:5c:a0:fe:b6:ec:4e:4a:28:59:
67:d2:77:1f:60:16:3b:f4:89:ea:3a:63:c1:d1:ca:
67:64:c8:cc:ce:96:e1:1b:3a:79:56:55:44:d7:4a:
cc:6b:9d:4a:c6:1c:a1:e1:a9:0e:8a:7b:bb:7f:0a:
0d:54:d3:ec:3e:30:b5:a8:5a:3a:fb:08:25:0f:a5:
24:d8:19:d4:7f:23:8f:44:00:48:1f:93:c5:eb:2b:
63:b1:03:7f:71:5d:20:5c:fd:60:6d:ea:48:4c:0b:
35:d7:46:0b:81:4b:13:5c:38:1d:4d:ad:7e:ac:fb:
43:5a:3a:e8:11:a8:d7:8b:15:22:24:0f:02:2f:f1:
bc:77:05:db:5e:6a:5a:d6:62:b3:c0:e8:e2:b9:b7:
86:54:bf:fd:bc:04:b1:f3:4c:54:05:2d:ee:de:9b:
41:4a:6f:5f:ed:9c:10:e4:dc:2b:12:33:81:8a:dc:
59:cf:77:a5:8a:00:ed:ed:f8:db:65:9f:95:2a:e8:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4B:15:CD:F1:A6:49:FD:5E:FB:6E:61:DC:4F:4E:F8:49:C7:98:75
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gEsVzfGmSf1e-25h3E9O-EnHmHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0-5.180.234.255
5.253.38.0/24
45.9.2.0/24
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c4:da:2b:6e:cf:9c:0e:4d:47:a1:d7:0a:9f:32:2a:c2:9e:
d7:3b:54:9f:de:ba:cd:53:e6:ab:b5:a6:3d:cf:0f:5e:3a:b3:
5e:0c:e9:6a:39:cb:5b:30:aa:c5:0e:6e:9b:b7:ec:11:71:4b:
70:48:b0:33:de:07:02:e3:f4:f4:df:51:7b:df:6d:ce:24:66:
cc:55:48:8c:9c:6c:d4:05:ad:a0:d2:68:2a:34:e2:68:d5:dc:
1f:a1:3c:04:bf:e3:77:11:21:a0:e7:49:48:86:3f:bf:8f:6f:
6d:65:ec:15:e6:77:e9:7e:52:7a:c4:81:d4:e4:da:72:71:51:
ab:07:47:a1:f1:2d:d5:b0:75:73:2b:8a:9c:39:e0:fa:51:eb:
6f:6e:f7:1b:c2:d7:e3:76:a0:90:22:9e:c0:1a:29:38:b8:53:
06:f2:c5:d3:b3:13:4e:30:c5:8d:05:50:1e:3b:e9:31:45:24:
a0:35:ac:41:c1:18:10:96:4c:3c:34:67:ff:91:61:fb:9a:b2:
76:11:54:53:5c:06:e1:46:91:b7:4f:26:7f:e8:a6:48:a5:ab:
9f:81:f1:64:2d:12:11:38:6a:63:63:20:f8:67:f1:5e:9a:53:
f1:69:10:f0:65:3f:4a:43:25:1f:42:5c:40:91:f0:ae:22:2c:
5e:44:66:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org