Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iZxtfI8EGNzppTQzYZssOlX-dso.roa
File: iZxtfI8EGNzppTQzYZssOlX-dso.roa (raw, json)
Hash identifier: dCVna1uHLvroOx8k92G33aipKHfXCSvAq0hzJWvT1QM=
Subject key identifier: 89:9C:6D:7C:8F:04:18:DC:E9:A5:34:33:61:9B:2C:3A:55:FE:76:CA
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0187A93034E0733EA7AE8845494261554399
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iZxtfI8EGNzppTQzYZssOlX-dso.roa
Signing time: Sat 22 Apr 2023 13:38:41 +0000
ROA not before: Sat 22 Apr 2023 13:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.49.0/24 maxlen: 24
5.253.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Apr 2023 17:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a9:30:34:e0:73:3e:a7:ae:88:45:49:42:61:55:43:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 22 13:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=899c6d7c8f0418dce9a53433619b2c3a55fe76ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:92:68:0f:e7:da:80:56:1d:c6:6a:2f:67:
d9:f6:3a:4f:d3:7b:91:e5:85:13:16:01:2e:3a:72:
c5:d2:98:8b:3f:84:27:11:8e:34:35:ef:ca:d1:bd:
07:71:9f:88:fd:2e:89:02:4c:59:f5:7e:6e:c2:9d:
df:7b:09:08:25:51:31:93:8b:fc:82:d3:44:3d:70:
b2:d5:be:e1:b7:41:28:12:1e:5e:9f:80:bb:b5:b8:
ea:84:b0:e0:13:cc:ca:c8:09:09:98:4b:04:21:fd:
47:89:c6:50:78:6b:6a:df:a5:d2:5c:b1:26:d9:d3:
79:51:8f:fa:f3:05:91:74:2d:82:22:2e:35:10:6e:
d5:12:77:95:20:e7:27:22:0a:5a:73:f9:64:56:2e:
43:46:e8:36:af:bd:bb:21:c0:d9:2b:90:14:c6:bb:
04:9c:ad:26:f5:5e:df:3d:34:09:b2:e4:b0:cb:90:
38:58:89:8e:4d:2f:07:f5:99:25:78:9a:93:ad:a8:
f7:6f:e8:cd:8f:fa:bc:e4:a0:78:9c:78:62:cc:15:
2f:bb:46:93:60:aa:4c:3c:b5:1c:e3:a2:86:05:86:
e4:e6:18:43:d3:aa:08:95:59:d5:2d:da:0d:8f:33:
e7:2a:e1:a3:10:1f:36:63:3a:97:b9:79:73:65:30:
62:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9C:6D:7C:8F:04:18:DC:E9:A5:34:33:61:9B:2C:3A:55:FE:76:CA
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iZxtfI8EGNzppTQzYZssOlX-dso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.49.0/24
5.253.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:43:a8:3b:64:ea:03:49:c0:e5:7c:0e:45:9c:95:f2:b6:dc:
53:5b:3c:e4:16:98:a7:13:5f:96:d1:cd:8a:43:36:96:d9:51:
9d:80:58:68:6b:fe:4c:c6:98:00:28:d1:38:cb:7f:20:0c:4e:
44:23:52:94:2f:53:ad:2c:05:60:a3:4b:b1:88:2f:5e:1b:de:
1c:9d:59:a0:27:19:8a:dc:15:82:24:a5:81:a2:f7:67:65:0f:
45:b5:72:d6:95:27:42:ef:a1:27:ae:c6:6c:2c:6c:e0:82:68:
62:1a:1b:c3:da:91:76:86:28:a6:40:22:8a:24:a2:dc:06:1c:
6c:42:13:f6:cd:47:38:25:ef:ff:b9:05:57:f5:f6:89:58:ef:
e0:c7:4e:db:21:eb:97:ed:84:63:ee:30:27:fb:6d:0c:45:8d:
7e:77:e3:f9:a9:b1:45:ea:57:72:66:85:31:ee:59:5a:b8:a9:
c0:c5:bc:77:aa:76:1b:11:69:f9:b0:d8:f2:cc:99:a9:5d:24:
1e:28:a2:b0:09:3f:f1:ce:8f:b9:86:bb:01:cb:49:d2:0c:f0:
46:14:b2:b3:47:d1:2f:25:46:65:31:13:a5:88:71:a5:6e:9a:
1d:8b:0c:aa:34:8b:4e:df:9a:66:1c:22:eb:96:7f:78:83:03:
d6:f3:f4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:25 2024 by rpki-client on console-fra.rpki-client.org