Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jhEEijTXMB54LQlDJzRTFOeNEfw.roa
File: jhEEijTXMB54LQlDJzRTFOeNEfw.roa (raw, json)
Hash identifier: 5naF6MiGUWNlSz7axauewdB8dVy70ozsa+lWUIkFM8U=
Subject key identifier: 8E:11:04:8A:34:D7:30:1E:78:2D:09:43:27:34:53:14:E7:8D:11:FC
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0189C06B35C0A80320EA8ACB216F6FD76979
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jhEEijTXMB54LQlDJzRTFOeNEfw.roa
Signing time: Fri 04 Aug 2023 11:59:58 +0000
ROA not before: Fri 04 Aug 2023 11:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.49.0/24 maxlen: 24
85.208.107.0/24 maxlen: 24
5.180.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:6b:35:c0:a8:03:20:ea:8a:cb:21:6f:6f:d7:69:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 4 11:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e11048a34d7301e782d094327345314e78d11fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:62:13:bb:da:6e:ed:fc:2d:f6:68:db:91:
f8:65:1c:ea:d6:53:c7:3c:d1:d3:59:cb:ac:6b:86:
39:36:2d:b2:10:86:35:86:ac:e8:32:15:11:23:28:
93:25:bb:9a:99:c5:c0:3d:39:6c:eb:be:5d:96:7a:
67:42:00:99:9f:cc:36:42:01:a5:58:9b:12:73:e2:
af:f0:ae:93:5c:92:b7:4e:86:9f:99:62:ba:94:b7:
9e:88:2a:ba:15:b1:4d:04:54:a0:3f:ba:17:c1:4f:
67:01:db:4d:d5:3c:56:3c:2b:f8:3b:87:d0:51:13:
e8:e1:63:a8:be:bf:34:21:49:1b:3c:92:b9:7f:d5:
3f:a6:de:6f:63:a0:be:e1:c9:a5:cd:23:58:3f:f1:
e3:1d:aa:e4:ea:8c:6f:4c:dd:b3:86:f4:f3:aa:20:
0d:8e:c1:01:c7:b7:aa:29:64:86:a7:46:df:f8:24:
cb:8f:53:23:6d:16:4b:80:5f:4b:6b:ee:26:31:f9:
6b:fe:fa:62:1f:b8:67:35:38:9c:32:f4:ab:ff:a9:
6d:76:21:43:b6:72:e6:c5:d7:9e:a0:d2:60:7a:bb:
b9:e8:7b:3f:7f:ae:61:ec:6f:03:d3:30:bc:f0:db:
96:e9:8c:f5:54:6c:93:fe:d3:d8:47:af:f8:3c:dd:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:11:04:8A:34:D7:30:1E:78:2D:09:43:27:34:53:14:E7:8D:11:FC
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jhEEijTXMB54LQlDJzRTFOeNEfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.49.0/24
5.180.82.0/24
85.208.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:29:1d:f6:ae:a2:e2:49:ab:7d:54:7e:e4:10:2d:15:44:42:
d3:15:55:ca:99:ba:c4:23:ed:f5:de:98:e7:3d:2b:69:6f:51:
10:0c:18:7f:90:b9:f8:4e:06:5c:87:c2:4e:52:bd:cd:07:84:
0e:61:ef:f5:e8:c6:37:98:d4:9f:42:c0:8c:8b:bf:62:89:f5:
f0:d6:0b:65:a9:74:5f:d7:09:4f:6f:0d:93:0f:c8:62:5c:e4:
f9:43:d2:50:d9:6d:7c:cd:89:e5:99:ad:e1:00:36:f5:d7:77:
d1:9a:98:b8:b2:29:0f:ba:90:9d:64:95:66:65:0c:40:5a:23:
61:8b:7a:6f:c1:df:88:74:04:5d:d1:37:5b:00:10:b9:59:66:
99:f8:7f:dc:60:37:13:d2:57:c7:76:57:0e:03:8a:01:36:ff:
cf:cb:ca:21:a8:b8:35:36:bc:bb:62:87:5f:a0:1b:85:f2:a1:
1a:c4:52:0a:47:00:42:06:77:09:07:61:79:77:aa:27:87:f5:
2f:fe:2a:b2:17:78:38:4d:89:53:ee:63:ac:97:5c:24:5a:83:
ea:e3:e9:61:75:44:97:0e:0b:7a:13:1c:18:c0:72:35:bb:5f:
1c:16:d1:de:02:5e:36:ae:54:05:cf:b2:c2:60:c7:91:0b:99:
28:1e:ce:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 15:22:07 2023 by rpki-client on console-ams.rpki-client.org