Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/Byq_IOW3YskbbkeZbUl0iG6jsoM.roa
File: Byq_IOW3YskbbkeZbUl0iG6jsoM.roa (raw, json)
Hash identifier: uHJ2kCgqAvBxB/Mdy7DBhOj+chj7SveRyK2oNKascxM=
Subject key identifier: 07:2A:BF:20:E5:B7:62:C9:1B:6E:47:99:6D:49:74:88:6E:A3:B2:83
Certificate issuer: /CN=219885ea020e65006314ee9480def3b3efc039e3
Certificate serial: 01856C1C7F94C5339766B5D865B44A7071EA
Authority key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/Byq_IOW3YskbbkeZbUl0iG6jsoM.roa
Signing time: Sun 01 Jan 2023 06:54:44 +0000
ROA not before: Sun 01 Jan 2023 06:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203576
IP address blocks: 5.180.184.0/24 maxlen: 32
5.180.186.0/24 maxlen: 32
5.180.185.0/24 maxlen: 32
5.180.187.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:7f:94:c5:33:97:66:b5:d8:65:b4:4a:70:71:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219885ea020e65006314ee9480def3b3efc039e3
Validity
Not Before: Jan 1 06:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=072abf20e5b762c91b6e47996d4974886ea3b283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1a:b0:67:18:3c:6e:1e:5b:f3:91:ef:e1:b6:
63:5b:f4:28:a8:84:4f:50:6a:01:c6:d4:f4:23:6e:
37:04:2a:30:fa:0b:c2:f8:3f:91:37:37:64:13:69:
45:62:b3:58:2a:86:ea:85:9a:ea:57:7e:03:9a:c5:
b8:f7:1b:94:af:a3:25:d3:a4:14:9a:6d:a6:66:d0:
93:08:a5:8b:fa:97:00:0d:7f:bf:6a:f6:0c:84:3a:
8d:d2:f7:76:5e:82:f5:33:2a:8c:89:47:ea:68:03:
66:05:a9:9e:1d:1c:31:a1:66:ba:8a:6b:a1:0b:87:
d2:7e:7f:df:79:33:35:29:43:4f:34:ad:30:1a:a8:
f8:cb:4e:a9:55:ed:7c:02:b1:4e:19:84:b0:bf:78:
ce:2d:10:1a:64:a3:31:94:7d:c8:a1:c7:62:78:1d:
bc:f9:10:8e:e9:4f:59:06:97:61:1a:84:a9:4e:dc:
44:7e:f7:f8:51:98:d5:b6:a7:db:00:fe:c3:f5:7c:
22:58:d6:de:9e:e3:9d:ae:0f:6f:6f:51:ce:8a:3b:
cb:95:5c:4d:80:db:02:03:e5:64:07:be:d3:40:7a:
b2:65:a9:a2:40:95:57:65:04:94:7f:b0:78:40:e1:
93:43:4f:f2:1c:54:d9:5e:79:d2:2b:7f:9a:c8:76:
5e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2A:BF:20:E5:B7:62:C9:1B:6E:47:99:6D:49:74:88:6E:A3:B2:83
X509v3 Authority Key Identifier:
keyid:21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/Byq_IOW3YskbbkeZbUl0iG6jsoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.184.0/22
Signature Algorithm: sha256WithRSAEncryption
05:38:20:a0:bc:10:4c:af:80:d6:a6:68:b3:84:10:fa:d2:3d:
61:4f:26:9a:8e:63:c8:0b:5c:66:d2:f6:48:4c:a5:c4:89:cd:
57:0d:ce:a6:7f:e4:ea:31:44:19:ef:fb:7c:97:2f:b0:05:37:
9e:29:9b:a8:a3:0b:7e:c5:a9:95:45:63:e5:75:29:7e:91:44:
23:1c:a8:53:77:fe:e9:36:c0:db:48:a7:b0:97:6e:e7:f0:c8:
2e:9b:9b:1c:bd:8d:cf:8b:d4:35:96:0a:ce:a7:4b:26:28:73:
54:01:0a:91:45:dc:64:c6:c0:96:e3:6c:4e:8e:2d:c2:a9:c1:
42:ac:18:c5:38:d7:b0:93:bc:8d:06:b5:38:7e:23:dc:36:80:
57:cb:92:0c:0f:b3:70:77:96:b8:85:28:ad:4c:46:3f:e1:bf:
60:14:0d:05:d2:a2:7a:80:5f:20:ee:1a:bc:0c:45:b7:80:66:
8a:27:69:d5:b9:79:5f:42:cc:89:b8:74:e8:2a:c8:5d:df:a5:
31:35:76:9d:46:18:5b:df:58:6f:60:62:4e:70:b7:88:19:c1:
64:fb:65:bc:cf:05:fe:96:95:52:ca:8d:fb:85:10:4f:93:40:
2e:0f:ae:1a:8d:70:20:20:a4:11:49:1b:19:74:24:5f:7c:fe:
1c:2e:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:37 2024 by rpki-client on console-fra.rpki-client.org