Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vcM5eLwYidSkLYVW3Rd6rHJbDXY.roa
File: vcM5eLwYidSkLYVW3Rd6rHJbDXY.roa (raw, json)
Hash identifier: 9qkKu+to0fFcqgEPQXYc6oDUyrhJyLgyrH+xRdVkRgk=
Subject key identifier: BD:C3:39:78:BC:18:89:D4:A4:2D:85:56:DD:17:7A:AC:72:5B:0D:76
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01869C814FBBBFDC2C889695771C91019197
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vcM5eLwYidSkLYVW3Rd6rHJbDXY.roa
Signing time: Wed 01 Mar 2023 09:29:25 +0000
ROA not before: Wed 01 Mar 2023 09:29:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 5.180.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 07:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:81:4f:bb:bf:dc:2c:88:96:95:77:1c:91:01:91:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 1 09:29:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdc33978bc1889d4a42d8556dd177aac725b0d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:8a:a0:59:20:81:93:49:2b:0e:4d:42:4c:
d0:4d:5c:5a:03:02:62:16:fa:28:b8:bc:09:24:cd:
ef:d3:2f:bf:87:b9:90:58:d3:94:a8:42:71:f4:53:
12:d4:d3:91:45:40:3e:19:11:c6:7e:74:79:cd:53:
8d:54:94:09:bb:3f:97:a9:4e:db:d6:01:99:74:a8:
c4:dd:d1:08:ab:8a:32:6a:90:30:88:23:03:fb:4c:
7a:bb:0a:70:e5:cb:00:50:c1:50:43:51:7e:46:c7:
5d:4c:51:43:e8:05:5b:96:6b:a3:35:e6:19:5d:7d:
09:6f:71:c5:cb:f3:00:2a:06:bf:b2:15:b8:93:1c:
3d:d6:03:e4:b9:8a:34:f7:fa:c8:2f:02:b0:60:f1:
dc:20:d4:d6:71:18:93:a1:4a:08:2d:d1:20:25:8a:
3b:86:80:b8:ff:6c:70:02:48:5e:3a:74:88:dd:65:
74:00:d5:52:f6:9d:6d:8f:4f:d4:c3:91:be:da:86:
33:3c:ec:ac:71:30:74:00:24:ec:11:2a:db:af:2d:
99:4f:fc:10:43:42:93:84:61:24:06:32:97:06:97:
f7:ed:b7:8d:e2:75:9f:d2:8a:7a:f4:b1:29:6e:71:
7c:ed:38:ff:b1:42:2a:7f:c9:53:85:00:6e:a0:95:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C3:39:78:BC:18:89:D4:A4:2D:85:56:DD:17:7A:AC:72:5B:0D:76
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vcM5eLwYidSkLYVW3Rd6rHJbDXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.232.0/24
Signature Algorithm: sha256WithRSAEncryption
35:28:ad:5a:92:37:f7:81:ff:2c:67:ee:53:3a:f0:7d:43:ef:
0c:3d:80:12:5c:6e:78:f7:55:78:c3:88:cb:f6:63:84:de:2c:
4e:b0:ea:4d:d3:19:8a:b4:b0:98:e5:3e:a7:f7:82:80:99:5a:
35:81:a2:34:1d:e7:5b:43:e3:69:e5:fb:95:1a:a1:6c:f2:23:
3b:00:8f:32:19:2e:e1:5a:b6:3b:68:b2:0d:15:68:84:53:25:
c3:9f:a2:58:23:01:34:2b:d1:58:9a:c6:3d:02:0b:fe:63:c9:
cc:79:fb:1a:50:9c:66:c4:f0:b6:5b:fc:e9:3c:d7:6f:a7:01:
a4:b1:ae:16:07:7c:63:7b:2d:f8:08:ac:af:c7:2c:d7:79:50:
4e:3e:69:18:d7:e0:ed:f1:e9:bc:8b:2d:bf:5f:b9:27:08:6e:
ee:cf:86:52:d0:aa:7e:3e:22:e8:c7:fc:8d:86:b0:b7:4c:62:
93:5b:75:7b:3c:7c:e6:03:62:43:11:15:c8:56:ff:de:bd:cd:
97:0b:04:c5:6b:0a:63:d5:20:b6:76:40:e0:78:f0:3e:c2:d7:
fd:2a:86:14:f1:01:3f:20:30:01:bb:43:b9:7f:05:8b:79:7c:
fa:f1:fa:92:4a:d7:5d:8d:f2:2d:e7:52:f1:c2:6d:8f:38:86:
04:77:b5:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYacgU+7v9wsiJaVdxyRAZGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwMzAxMDkyOTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGMzMzk3OGJjMTg4OWQ0YTQyZDg1NTZkZDE3N2FhYzcyNWIwZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXmKoFkggZNJKw5NQkzQTVxaAwJi
FvoouLwJJM3v0y+/h7mQWNOUqEJx9FMS1NORRUA+GRHGfnR5zVONVJQJuz+XqU7b
1gGZdKjE3dEIq4oyapAwiCMD+0x6uwpw5csAUMFQQ1F+RsddTFFD6AVblmujNeYZ
XX0Jb3HFy/MAKga/shW4kxw91gPkuYo09/rILwKwYPHcINTWcRiToUoILdEgJYo7
hoC4/2xwAkheOnSI3WV0ANVS9p1tj0/Uw5G+2oYzPOyscTB0ACTsESrbry2ZT/wQ
Q0KThGEkBjKXBpf37beN4nWf0op69LEpbnF87Tj/sUIqf8lThQBuoJU3twIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3DOXi8GInUpC2FVt0XeqxyWw12MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvdmNNNWVMd1lpZFNrTFlWVzNSZDZySEpiRFhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbToMA0G
CSqGSIb3DQEBCwUAA4IBAQA1KK1akjf3gf8sZ+5TOvB9Q+8MPYASXG5491V4w4jL
9mOE3ixOsOpN0xmKtLCY5T6n94KAmVo1gaI0HedbQ+Np5fuVGqFs8iM7AI8yGS7h
WrY7aLINFWiEUyXDn6JYIwE0K9FYmsY9Agv+Y8nMefsaUJxmxPC2W/zpPNdvpwGk
sa4WB3xjey34CKyvxyzXeVBOPmkY1+Dt8em8iy2/X7knCG7uz4ZS0Kp+PiLox/yN
hrC3TGKTW3V7PHzmA2JDERXIVv/evc2XCwTFawpj1SC2dkDgePA+wtf9KoYU8QE/
IDABu0O5fwWLeXz68fqSStddjfIt51Lxwm2POIYEd7Wc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:25 2024 by rpki-client on console-fra.rpki-client.org