Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mw5Zt7U3t9l2S7zMFNzfNu_QaM4.roa
File: mw5Zt7U3t9l2S7zMFNzfNu_QaM4.roa (raw, json)
Hash identifier: 4o1NM9zJinzrYn2pCDmkOEOZ0iIYvtKrGDRgelq7RdI=
Subject key identifier: 9B:0E:59:B7:B5:37:B7:D9:76:4B:BC:CC:14:DC:DF:36:EF:D0:68:CE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE7EB8E712931FAF3D51321449733D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mw5Zt7U3t9l2S7zMFNzfNu_QaM4.roa
Signing time: Tue 02 Jan 2024 06:31:13 +0000
ROA not before: Tue 02 Jan 2024 06:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.180.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 06:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:7e:b8:e7:12:93:1f:af:3d:51:32:14:49:73:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b0e59b7b537b7d9764bbccc14dcdf36efd068ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:78:2f:44:91:95:9b:34:40:e9:b0:de:94:
9e:07:00:5b:e4:45:4a:00:1c:e0:dd:8a:c6:3e:42:
90:95:3b:63:e6:3b:f7:c8:9e:86:c9:a3:85:07:12:
48:26:37:20:33:57:b6:50:b2:68:ef:7e:71:66:50:
d3:4e:bd:de:a3:59:10:ec:8c:56:60:2d:35:8b:2d:
f1:94:63:7b:4f:ac:0a:78:ed:7c:06:b5:e5:b5:49:
91:b8:c5:9b:4a:cd:a5:3b:20:de:19:5d:80:12:28:
c3:1e:04:8d:2d:85:5a:60:8f:82:9a:0d:38:ca:90:
e7:fd:d9:b3:00:88:68:6b:76:a4:c1:da:97:b5:22:
94:73:4c:01:e4:f9:8f:5d:bd:9c:c7:af:fe:55:50:
8b:2a:6b:ab:fa:66:60:08:88:da:35:a3:81:11:82:
05:48:0b:12:42:ce:5e:24:04:23:2a:e3:e0:32:f3:
9e:16:69:b3:02:2c:db:f8:01:a7:f1:c9:a5:75:aa:
78:6b:d1:52:16:d3:ae:7e:95:29:0a:52:c8:df:47:
62:ba:b5:de:66:1a:28:85:3c:ec:e2:3a:65:7a:2b:
c8:c5:b6:4c:a6:1f:db:d9:2d:43:b2:d3:ef:39:19:
9d:17:aa:8c:52:6e:f5:1c:39:1b:ac:e1:36:57:2a:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0E:59:B7:B5:37:B7:D9:76:4B:BC:CC:14:DC:DF:36:EF:D0:68:CE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mw5Zt7U3t9l2S7zMFNzfNu_QaM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:26:28:f3:b1:1e:77:de:e9:2b:68:c6:37:9e:b6:65:df:6a:
72:b8:80:71:cb:c4:55:57:12:2f:d9:a0:97:86:00:ee:23:80:
f9:2c:30:85:f6:2b:22:66:43:3d:e0:4f:4f:1c:48:a9:5b:dc:
51:7d:3b:b1:5e:f2:41:5b:cd:ee:a0:bf:8d:26:77:ad:80:73:
5a:f9:74:bc:74:f2:37:40:db:39:f1:c8:71:05:ba:dc:37:0c:
50:d5:8f:e4:8e:75:90:4e:5c:45:5c:98:9b:d1:67:93:51:c0:
36:c6:55:53:4b:12:85:d6:11:8a:f0:23:9e:b5:9d:a1:ae:cc:
45:d0:7d:7c:5e:43:de:49:a5:f7:e4:b0:41:17:4e:ad:6d:9f:
0e:c1:18:cd:b6:1b:fd:b4:50:99:0a:0f:30:bb:12:44:06:50:
74:f0:42:93:8d:26:ae:c1:3b:52:bf:fd:d5:9d:a2:93:e1:92:
01:38:82:00:cc:c4:42:b4:a6:1b:4c:90:80:78:3b:d0:4d:76:
25:8f:41:9e:a0:81:27:63:a1:77:e7:71:be:d8:d9:ce:6b:02:
ba:a1:a4:06:09:11:86:90:a2:b2:3e:30:cb:20:38:dc:48:9c:
98:09:e4:96:f6:f2:db:59:15:ef:92:8b:01:f7:f3:6c:93:aa:
37:08:c8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 08:30:14 2024 by rpki-client on console-fra.rpki-client.org