Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rhuHXFQvslk9Z0dauRDLpeq_kQ4.roa
File: rhuHXFQvslk9Z0dauRDLpeq_kQ4.roa (raw, json)
Hash identifier: fnUTSCmeM9K5hUo6OXMTcYdFan+v/pNCCK9I0LYwF2o=
Subject key identifier: AE:1B:87:5C:54:2F:B2:59:3D:67:47:5A:B9:10:CB:A5:EA:BF:91:0E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01884D1B26B8ED003188B905895CBE8451FA
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rhuHXFQvslk9Z0dauRDLpeq_kQ4.roa
Signing time: Wed 24 May 2023 09:33:25 +0000
ROA not before: Wed 24 May 2023 09:33:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.233.0/24 maxlen: 24
5.180.234.0/24 maxlen: 24
85.208.106.0/24 maxlen: 24
5.253.38.0/24 maxlen: 24
45.9.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 May 2023 21:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:1b:26:b8:ed:00:31:88:b9:05:89:5c:be:84:51:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 24 09:33:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae1b875c542fb2593d67475ab910cba5eabf910e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:58:03:c8:52:a1:85:ba:bd:70:89:81:68:c9:
43:b3:7f:74:bd:6a:93:6f:70:75:cf:2c:f4:1a:dd:
e7:79:d1:ab:6c:5a:66:54:6c:0b:e3:35:b5:c8:b3:
db:10:52:22:52:ef:e0:a9:23:a1:d6:70:53:18:72:
fb:f4:cc:7f:3b:9f:80:66:3c:16:45:7a:eb:93:86:
ac:1b:e7:91:b2:86:4e:ea:cd:60:2b:50:31:46:b7:
de:63:3b:48:6c:4f:ea:49:a7:89:b2:3f:50:79:b2:
69:34:04:92:48:ac:bf:ea:5f:39:b5:0e:1a:f4:b5:
a5:c7:4a:93:5f:72:85:fc:dd:aa:dd:83:7a:c3:92:
2f:02:ae:d2:80:d4:15:7d:6b:73:c7:79:04:b4:7f:
24:92:c4:2f:36:8f:97:cf:b4:ab:eb:20:57:c0:62:
85:03:fa:1a:d2:41:f4:ff:4b:f9:19:22:53:fb:77:
9e:54:d1:b3:97:1c:0d:15:c9:cc:da:9b:42:c1:dd:
ee:a5:db:2a:f3:48:7c:e1:ee:d2:0b:63:2b:5d:f1:
e3:0d:5b:42:97:1c:36:50:03:66:52:87:1b:2f:cc:
54:99:ac:0b:87:a7:ff:fc:ef:2a:23:ef:d8:49:15:
ae:f8:f4:d1:91:13:e3:93:fb:ba:a5:09:62:b0:7b:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1B:87:5C:54:2F:B2:59:3D:67:47:5A:B9:10:CB:A5:EA:BF:91:0E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rhuHXFQvslk9Z0dauRDLpeq_kQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0-5.180.234.255
5.253.38.0/24
45.9.2.0/24
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:9f:b1:11:63:cc:5e:f4:80:0b:b6:49:c8:79:5f:db:c4:50:
ea:7d:da:8a:10:7c:49:c6:71:3e:2b:14:72:e9:85:fc:23:9d:
db:91:0a:52:f2:b9:a6:f3:f4:ae:f2:c8:eb:cc:d7:62:19:f7:
6c:ca:59:22:ae:cb:4e:a7:c1:d1:b5:96:51:37:06:f3:a7:a3:
b7:05:ee:fa:2d:9d:2a:73:66:2e:db:dd:77:3d:7d:8a:cd:eb:
3b:06:57:c4:47:a8:52:d0:fb:49:e5:59:08:a0:6d:4f:2b:c8:
34:e1:00:cb:5c:d3:a7:ec:28:08:91:0f:02:3e:45:9d:6c:57:
2b:c2:28:0c:52:cf:45:60:1b:b3:50:19:f3:8b:b4:11:53:af:
42:5d:9e:6c:b8:a2:59:09:61:3c:a5:19:45:66:43:54:5c:2d:
d1:86:c7:70:b8:5d:96:ca:cd:28:87:cf:0c:6e:a1:ef:76:67:
87:7b:d0:f6:f9:16:45:f7:ef:d0:e7:d9:05:77:c1:38:cb:f2:
a4:59:4f:b5:0f:a0:5e:93:2f:50:58:88:6e:5b:d1:ef:55:fd:
a4:4c:ad:2e:55:f9:dc:64:aa:19:5b:a3:3a:0d:3c:1f:c3:69:
a9:11:a2:01:92:05:46:94:76:13:0b:e7:ae:f1:ac:66:7c:40:
90:f1:c1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:20 2024 by rpki-client on console-ams.rpki-client.org