Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/m2T6r0T3G02vrs_Z2M-2FwfJbHo.roa
File: m2T6r0T3G02vrs_Z2M-2FwfJbHo.roa (raw, json)
Hash identifier: inSSr9hHkUc2LnN+MduUmzjV/on4SBIGcy3PMk89Mxc=
Subject key identifier: 9B:64:FA:AF:44:F7:1B:4D:AF:AE:CF:D9:D8:CF:B6:17:07:C9:6C:7A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0187DDDF79EC0D7CA6992909D4E9DBF9A9C9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/m2T6r0T3G02vrs_Z2M-2FwfJbHo.roa
Signing time: Tue 02 May 2023 19:10:23 +0000
ROA not before: Tue 02 May 2023 19:10:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.233.0/24 maxlen: 24
5.180.234.0/24 maxlen: 24
85.208.114.0/24 maxlen: 24
5.253.38.0/24 maxlen: 24
45.9.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:df:79:ec:0d:7c:a6:99:29:09:d4:e9:db:f9:a9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 2 19:10:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b64faaf44f71b4dafaecfd9d8cfb61707c96c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:65:5b:60:7b:fa:52:49:10:42:70:2a:4f:50:
b5:07:5f:cb:77:d8:b4:cd:56:97:d7:d8:8a:05:b5:
20:cd:c7:1a:8b:54:6a:98:86:2e:86:87:18:da:8f:
ed:10:74:ab:e2:f5:2d:82:e2:6b:09:5c:72:47:10:
54:aa:fe:43:99:f8:89:9b:5d:f5:cb:49:f5:0c:c4:
71:25:b3:4a:91:90:3c:15:de:5f:d9:5a:f2:2d:19:
69:d8:bc:81:b9:4f:78:1a:de:4e:6c:ef:d6:8b:e1:
a3:b0:de:8e:19:d3:4d:0f:e7:de:0a:60:4f:11:46:
9c:3c:e8:01:f9:a2:ce:26:e1:91:b5:ea:51:9c:90:
03:9e:09:79:c8:73:7a:f3:34:7c:c6:15:76:a8:11:
1f:1b:51:0f:96:5a:d3:04:e9:16:d7:b8:3a:83:31:
c9:62:6a:d8:ce:5f:c3:9b:b6:cc:e4:af:66:3c:13:
34:5b:dd:1e:62:c6:d1:7b:16:1c:52:e0:e5:4d:1b:
df:2f:c3:e3:28:32:72:3b:22:ed:03:0b:4c:07:19:
5d:36:85:c9:a6:c8:e5:ba:5e:7d:a9:60:75:a8:f1:
d5:70:30:ec:cc:31:7c:88:50:0e:24:8d:79:26:61:
70:f8:0b:4a:4b:6d:51:d5:49:14:62:7c:44:84:ca:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:64:FA:AF:44:F7:1B:4D:AF:AE:CF:D9:D8:CF:B6:17:07:C9:6C:7A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/m2T6r0T3G02vrs_Z2M-2FwfJbHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0-5.180.234.255
5.253.38.0/24
45.9.2.0/24
85.208.114.0/24
Signature Algorithm: sha256WithRSAEncryption
35:66:d9:2b:04:99:3a:47:ae:61:a5:f1:2a:d9:62:ea:f8:71:
6b:43:c6:7e:9a:5e:27:c9:ca:65:6a:0e:c3:93:6c:6e:4f:c3:
f5:1c:5f:df:66:41:1a:e4:74:8f:df:78:d2:25:2d:84:4d:53:
70:3c:08:f0:1f:ae:68:5e:17:89:58:84:f3:be:bb:63:e4:ca:
45:40:9b:7e:e1:77:e7:5e:ac:d6:fb:95:37:5b:fb:c0:27:ea:
b0:a4:e7:3d:45:72:01:2b:56:ca:d9:e1:24:57:24:e6:9a:3b:
04:db:6b:f3:0d:4e:08:5b:2b:1e:84:01:8f:b0:39:dd:cc:81:
87:40:fd:b3:40:8f:65:53:11:47:17:15:49:a0:90:f3:b6:08:
e0:60:1b:c1:0a:8f:52:5e:1e:a2:4f:8a:f8:f9:e1:88:01:9f:
6c:8c:75:95:8b:3a:54:02:42:d3:1e:fc:b1:38:4a:49:c2:25:
3c:4a:a7:59:4f:4c:91:1e:2b:79:9e:f0:81:34:8d:db:b6:72:
e6:89:eb:42:0b:bd:f0:b8:4f:1c:37:95:48:99:ae:dc:39:2a:
1b:d7:e8:20:7d:c5:22:54:ca:fc:51:4a:bc:04:50:3c:7c:a5:
0e:5e:72:72:ce:71:49:86:47:f2:61:42:43:90:31:f9:73:77:
cd:92:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:23 2023 by rpki-client on console-ams.rpki-client.org