Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jlPrhJ6ZjPtgciI_Hhq0EFuq0DE.roa
File: jlPrhJ6ZjPtgciI_Hhq0EFuq0DE.roa (raw, json)
Hash identifier: kC52tjKUNYF2rKC5kzHRpPQI+piXs5zsBY3vye9jYHo=
Subject key identifier: 8E:53:EB:84:9E:99:8C:FB:60:72:22:3F:1E:1A:B4:10:5B:AA:D0:31
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018C6458BE05D4D1C60B1D5644C8728D4644
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jlPrhJ6ZjPtgciI_Hhq0EFuq0DE.roa
Signing time: Wed 13 Dec 2023 18:03:06 +0000
ROA not before: Wed 13 Dec 2023 18:03:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.180.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:58:be:05:d4:d1:c6:0b:1d:56:44:c8:72:8d:46:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Dec 13 18:03:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e53eb849e998cfb6072223f1e1ab4105baad031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:82:8e:84:03:f1:13:c5:d6:23:d0:e3:52:51:
90:71:6a:f6:6f:0b:62:76:5a:76:9e:20:82:b0:67:
7e:1d:ce:a0:45:b1:3d:84:9b:e7:3b:3c:ba:0b:24:
b0:71:5f:08:07:d1:a3:5c:94:cd:19:af:bf:dc:23:
a5:58:08:db:6d:18:49:21:91:2b:d0:10:fd:fe:42:
91:1c:a9:fa:40:5d:f2:52:75:1f:39:95:aa:06:1c:
1d:23:94:dd:55:7e:5e:17:6e:b7:00:6d:64:e5:37:
ca:ad:9c:d2:a1:73:7a:48:55:06:bd:93:1d:63:70:
39:5f:f0:f3:09:75:86:fc:e6:f8:b0:12:b9:0d:e0:
f1:3b:28:c7:a0:e2:d1:fb:f6:3f:8a:78:82:3b:10:
87:1c:03:b4:aa:72:ff:90:f1:a7:bf:d3:7b:6b:03:
9e:a4:71:15:e2:9e:a2:c8:c1:4c:50:30:19:d2:3e:
81:53:e4:a8:00:6b:09:3e:bd:f4:68:d0:ec:29:47:
c0:89:43:91:9a:f9:5e:3e:ff:e2:09:58:6f:53:9f:
fd:72:98:13:3d:0e:c1:7c:73:af:d9:26:eb:87:03:
0a:8a:54:06:8c:da:02:d2:a3:e0:7d:2d:0b:2c:5f:
a4:54:f5:ff:af:19:dc:43:32:bb:b9:33:b0:0a:6a:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:EB:84:9E:99:8C:FB:60:72:22:3F:1E:1A:B4:10:5B:AA:D0:31
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jlPrhJ6ZjPtgciI_Hhq0EFuq0DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f0:ab:92:13:f3:c5:53:e3:8a:9e:06:fe:95:ed:f9:9b:e8:
09:41:dd:f5:82:d1:2b:a2:65:65:ae:3e:97:61:35:d5:f9:1c:
24:ab:da:5b:f0:a6:60:b6:a6:d3:93:b4:d3:fc:96:50:c6:fc:
a6:8a:1f:3b:03:1c:cd:aa:12:41:2f:2d:fd:33:b5:d4:1e:46:
50:67:03:b2:b5:81:78:da:7d:70:10:01:1b:c3:b5:ec:bb:9b:
3a:45:a5:62:22:88:68:d2:d9:cf:7b:52:f4:e4:de:4e:06:43:
13:21:34:ef:93:c3:51:ab:9f:db:73:8b:e1:3d:d8:98:aa:ec:
90:06:5a:b2:4f:66:16:a1:34:46:21:b5:45:2c:63:85:f3:0d:
4c:01:91:21:26:4c:35:a6:3a:7b:33:37:ca:09:27:b1:0b:00:
4d:26:da:10:02:4e:fe:fc:29:2a:f1:3f:18:f2:1b:4e:c3:0d:
7b:9f:a8:45:64:38:e4:56:9e:f2:dc:b4:a7:30:26:1a:46:5c:
27:37:b7:c7:4a:6d:40:86:83:c4:aa:9c:0c:76:de:80:0c:f2:
a8:cd:d3:3f:66:f1:77:e2:da:d1:98:8c:5c:b7:bb:72:dc:cf:
39:87:3f:1c:69:60:0a:0e:41:e9:36:eb:51:3a:79:f6:58:8d:
39:0c:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:03 2024 by rpki-client on console-ams.rpki-client.org