Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/giYVDE8iFRlFDMZAyTk0OxQWdT4.roa
File: giYVDE8iFRlFDMZAyTk0OxQWdT4.roa (raw, json)
Hash identifier: FOC5IfdFV03XZvLbzR8EGmd9pcgARe6/qNAND9PAgp8=
Subject key identifier: 82:26:15:0C:4F:22:15:19:45:0C:C6:40:C9:39:34:3B:14:16:75:3E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018D0241758AEC5158CF926A9655925FB802
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/giYVDE8iFRlFDMZAyTk0OxQWdT4.roa
Signing time: Sat 13 Jan 2024 09:57:40 +0000
ROA not before: Sat 13 Jan 2024 09:57:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.180.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 11:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:02:41:75:8a:ec:51:58:cf:92:6a:96:55:92:5f:b8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 13 09:57:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8226150c4f221519450cc640c939343b1416753e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:6e:cd:e1:ab:25:4e:35:60:4e:56:c8:e6:
2a:d4:9f:1f:46:b8:78:7e:43:f4:45:ae:36:92:4f:
d0:be:86:8a:4d:4a:3b:26:a6:07:8a:b8:c5:7f:43:
09:7e:8d:b7:07:42:19:cc:22:80:0c:41:32:88:1d:
c2:bb:79:34:4d:c3:e8:32:1a:05:19:57:8c:47:3c:
a6:d6:0c:f1:77:d1:4b:f9:65:e4:1c:45:1d:6a:14:
3a:9e:61:86:84:ac:4a:22:26:ba:dd:9e:0c:d8:c0:
b5:06:6a:ab:fa:6d:23:47:78:0f:b2:4f:83:b0:e2:
f3:bc:2b:a2:03:61:eb:cf:51:81:be:8a:e3:75:03:
1d:45:3c:64:5d:b2:8c:9c:d0:44:ff:8f:26:37:01:
09:7d:dc:31:6e:ab:0e:15:33:b5:09:a1:9b:0e:39:
61:ac:c9:b9:14:63:b2:9d:4c:72:23:f8:9a:d8:b4:
95:c3:93:fb:90:10:5a:01:86:cf:9d:77:cd:78:8d:
56:d9:44:52:46:0b:9c:d5:1d:c6:54:85:d5:fe:e1:
1a:33:de:25:aa:33:6c:75:8c:ac:ac:a3:25:75:1e:
62:32:41:ed:b5:c7:6d:25:14:3e:37:20:3d:44:3e:
50:67:6e:0a:1a:f6:ec:2a:b2:77:f5:c3:fd:fd:f9:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:26:15:0C:4F:22:15:19:45:0C:C6:40:C9:39:34:3B:14:16:75:3E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/giYVDE8iFRlFDMZAyTk0OxQWdT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.34.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e7:d3:9c:ff:7c:17:02:a6:58:c6:a5:57:a2:f5:2e:1e:58:
76:41:76:75:d8:97:85:e2:20:a3:e2:35:05:6e:b7:fd:6b:8b:
1c:c7:7f:62:18:8b:42:d4:7e:92:fa:de:ff:83:db:8e:9d:63:
05:2a:2e:b6:36:9f:26:0c:77:ff:f6:f8:44:d3:0d:56:c4:06:
1d:8e:1a:30:2e:4d:d0:5b:71:ee:ba:63:9b:1c:3c:68:30:0b:
05:b2:b2:01:2c:a0:20:61:55:85:e8:fa:7b:17:18:b2:bf:a7:
2b:10:ec:8b:a3:5b:d0:bf:37:a5:b9:0d:ff:8d:76:5a:64:6b:
0a:67:74:a8:f1:4a:8d:f0:dd:60:d3:ec:68:4b:b5:70:6d:1d:
0d:08:e8:e0:65:b8:c2:62:02:20:bc:54:80:0b:52:e4:a3:b9:
6b:ca:3e:24:14:a5:06:4c:24:b8:5b:a9:1b:3e:b5:a1:6d:e7:
f1:3d:2d:9d:74:7e:f7:6a:09:d0:e9:3a:2f:dc:ff:c5:ca:54:
d7:6f:ed:97:25:e7:dd:75:2b:2d:37:37:70:3e:8a:87:49:25:
0c:4c:f5:d0:e2:47:e9:aa:49:40:18:9a:8f:a9:cc:a5:8e:e7:
16:9c:f3:7a:e9:37:96:5b:89:53:16:22:f1:9a:54:b1:d3:61:
61:a8:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 15:50:43 2024 by rpki-client on console-ams.rpki-client.org