Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jYAiZQlPkznfZ3OFFZlTWU9ghC8.roa
File: jYAiZQlPkznfZ3OFFZlTWU9ghC8.roa (raw, json)
Hash identifier: d7ytjAYyf3pGNas4U+ub1rMLc9dN+9zkqtDOuUFhxWw=
Subject key identifier: 8D:80:22:65:09:4F:93:39:DF:67:73:85:15:99:53:59:4F:60:84:2F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01888FEF69BE884169941C4B041B1BDFC495
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jYAiZQlPkznfZ3OFFZlTWU9ghC8.roa
Signing time: Tue 06 Jun 2023 09:00:12 +0000
ROA not before: Tue 06 Jun 2023 09:00:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:ef:69:be:88:41:69:94:1c:4b:04:1b:1b:df:c4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 6 09:00:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d802265094f9339df677385159953594f60842f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:96:ff:f1:f6:99:ed:28:58:95:32:72:3e:
d4:52:76:76:0f:00:71:eb:54:b0:d5:f6:8b:53:71:
8e:95:c2:74:b8:d6:51:8a:35:3d:f1:e5:27:89:a7:
f6:c2:25:79:75:30:c8:64:bc:97:9e:33:fa:17:f7:
85:a4:c2:e8:14:a5:d5:3c:35:c4:ec:65:dc:64:0e:
fd:c8:bf:4a:b9:78:0a:df:7b:2e:fa:86:06:f4:83:
67:a8:d0:08:b5:e6:42:63:51:3a:4f:0a:20:5c:d0:
82:90:17:5e:8e:3a:d2:ce:97:24:6e:0f:00:04:19:
33:1a:f8:1e:8e:0f:a7:ae:c3:75:00:3f:39:40:2d:
a0:fe:47:43:e6:7c:3c:6c:b0:91:89:17:36:fd:8e:
ee:9e:9b:47:22:91:65:52:50:f2:29:d2:09:e3:1c:
5f:05:36:11:55:1c:16:57:49:fa:38:f2:37:94:42:
c9:4d:3d:33:12:2f:ff:86:d0:38:27:86:50:1c:b5:
5a:76:48:7f:d1:01:a1:11:d0:f9:08:1d:97:8d:53:
2f:e8:ea:ca:5b:79:92:0a:54:a9:35:6b:8f:94:21:
cb:be:a5:d9:f6:65:93:b7:7a:f2:70:a1:95:ab:b9:
11:6f:ea:77:7d:55:1b:dd:f5:3e:b4:7f:5c:c8:6a:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:80:22:65:09:4F:93:39:DF:67:73:85:15:99:53:59:4F:60:84:2F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jYAiZQlPkznfZ3OFFZlTWU9ghC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:57:1f:35:9a:ab:fe:cf:30:47:e2:ac:30:9a:50:16:5a:98:
a2:b2:97:7f:5c:f5:76:a7:74:62:d5:d4:54:bd:8f:c5:f6:f7:
f6:cf:37:da:76:1f:29:c1:5a:0d:c7:b9:8f:b2:59:78:cb:b6:
84:eb:12:9e:0c:fe:a1:01:c3:1b:42:b2:c7:19:0a:0e:7b:9f:
f9:3d:52:30:34:10:44:6e:5c:b3:d2:f8:20:4e:08:ee:4e:f4:
eb:5c:36:cb:9c:3b:c0:ed:75:f2:21:a3:5c:b8:23:4b:e2:42:
1c:c2:db:ee:1e:c1:47:e6:72:88:c7:7f:86:e7:86:59:c3:fe:
81:b0:25:03:34:4b:65:a2:8e:3c:33:f6:00:17:86:74:90:28:
15:90:9b:d0:1c:df:fb:70:ea:31:bc:bf:4a:76:83:07:cb:a4:
14:30:f1:c2:49:ee:99:88:4f:c9:0a:6c:b8:f7:45:74:a7:63:
0f:02:64:e1:e1:86:8c:24:6b:5b:2c:79:37:e4:fe:0f:34:dc:
0d:7c:e3:ab:d2:c6:d4:3d:59:b7:18:fb:06:9d:fa:b5:15:c0:
3d:4f:28:ff:8b:06:85:f7:35:ba:ca:b3:76:4a:38:c8:6b:be:
51:68:70:46:d6:e2:7e:22:b1:29:ab:dd:3d:87:7e:19:50:28:
0f:60:25:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org