Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/u6VkxU-nui55aV2XnoNZ8AUkvn0.roa
File: u6VkxU-nui55aV2XnoNZ8AUkvn0.roa (raw, json)
Hash identifier: 3BGHl+vHtGSslZsFu+kpCX0df3gU/gK3SfPiPzW+Fcc=
Subject key identifier: BB:A5:64:C5:4F:A7:BA:2E:79:69:5D:97:9E:83:59:F0:05:24:BE:7D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0187D66737D81D9AFBA1D99BF7776D2CE7BE
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/u6VkxU-nui55aV2XnoNZ8AUkvn0.roa
Signing time: Mon 01 May 2023 08:21:41 +0000
ROA not before: Mon 01 May 2023 08:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.233.0/24 maxlen: 24
5.180.234.0/24 maxlen: 24
85.208.114.0/24 maxlen: 24
5.253.38.0/24 maxlen: 24
45.66.153.0/24 maxlen: 24
45.9.2.0/24 maxlen: 24
45.9.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d6:67:37:d8:1d:9a:fb:a1:d9:9b:f7:77:6d:2c:e7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 1 08:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bba564c54fa7ba2e79695d979e8359f00524be7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:ad:e1:7c:a5:53:c2:70:b4:83:40:5c:7f:
1c:e3:ce:93:72:36:5f:72:bc:a3:51:c5:f6:45:9e:
8b:7a:75:92:c6:82:cf:6b:db:bb:14:f5:51:d0:f7:
94:9a:d8:39:3a:ab:02:04:c6:62:1d:47:09:20:f7:
9f:4f:7b:c1:67:7f:ae:a7:a5:df:46:7c:71:01:78:
aa:23:63:f2:86:d0:8a:04:47:a0:94:da:29:7f:8e:
19:91:e4:b1:db:82:7e:0f:0f:ff:b0:c6:78:d5:be:
c3:f7:ff:54:c8:8c:21:f7:99:6f:c5:d5:a4:45:c4:
08:c6:00:95:aa:f0:10:68:d2:dc:6a:2e:f2:f1:99:
e9:41:43:af:96:ad:af:c0:d0:ab:ff:44:53:60:15:
a1:1b:0c:96:ce:ca:03:a3:cc:85:f9:66:85:47:7b:
93:e2:1a:03:41:48:96:cc:6f:a5:25:db:81:11:01:
cc:93:a8:5c:9f:f9:19:97:44:ca:71:97:ff:99:82:
ce:ae:61:03:d3:7f:85:03:ce:3f:44:e7:10:ac:d4:
98:47:b4:c2:ca:f3:92:ba:59:71:12:34:ce:98:d1:
c0:60:f7:a2:23:83:20:49:3d:49:19:d1:ef:48:91:
3e:e9:82:a0:48:18:07:f2:53:a6:88:aa:a5:82:7d:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A5:64:C5:4F:A7:BA:2E:79:69:5D:97:9E:83:59:F0:05:24:BE:7D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/u6VkxU-nui55aV2XnoNZ8AUkvn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0-5.180.234.255
5.253.38.0/24
45.9.2.0/24
45.9.5.0/24
45.66.153.0/24
85.208.114.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a8:e7:18:3c:66:04:80:1c:30:86:89:9f:ab:e9:af:8e:63:
00:ca:c4:e3:ae:ae:9b:1f:5c:83:ce:a1:a0:d0:31:3b:b1:56:
73:d9:13:8e:27:e0:6c:fe:ef:14:2f:46:47:80:85:d1:27:e0:
e1:ba:db:71:c6:bd:1b:97:b8:d3:93:80:10:0b:55:5f:58:40:
ef:d0:81:c9:c7:8c:e2:b5:72:9a:3f:06:2f:39:9b:73:f9:bd:
c6:43:68:20:96:1d:7e:7d:b9:92:83:cb:71:2f:fa:b4:67:d2:
cd:10:0b:cd:e9:ea:7c:eb:8e:1b:da:b1:8d:15:a4:98:48:07:
72:ed:8d:c7:07:89:8f:91:fd:49:f5:bb:b0:66:0b:81:61:06:
3f:03:c9:f4:cf:50:24:09:40:a7:02:e0:de:6d:85:2b:1d:f1:
48:33:80:59:39:27:77:3e:6c:9d:58:81:60:1f:2d:a7:df:90:
f6:42:02:28:19:57:47:cc:ca:1c:a4:cc:72:bc:a1:fb:a4:d6:
85:b7:dc:3c:dc:e8:65:f0:2a:5b:96:c8:4b:73:aa:43:aa:7d:
1f:f6:4c:1a:0d:72:a5:bb:8e:6d:d9:2e:fe:2d:08:dd:1a:23:
c9:2a:af:92:dd:cd:28:58:8e:61:17:dd:79:1c:20:c1:02:a2:
1e:58:0e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org