Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/5T-bAJhHLdau-j1JYEr3w28UrYg.roa
File: 5T-bAJhHLdau-j1JYEr3w28UrYg.roa (raw, json)
Hash identifier: HWtOhwYLeFcCrkJ2A7qy20RJOrqtqWMULiZ1g5AprNw=
Subject key identifier: E5:3F:9B:00:98:47:2D:D6:AE:FA:3D:49:60:4A:F7:C3:6F:14:AD:88
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 01856F5DC154AAFCC920E642CB8B237DAEA1
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/5T-bAJhHLdau-j1JYEr3w28UrYg.roa
Signing time: Sun 01 Jan 2023 22:04:53 +0000
ROA not before: Sun 01 Jan 2023 22:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34350
IP address blocks: 80.70.50.0/24 maxlen: 24
80.70.55.0/24 maxlen: 24
80.70.52.0/24 maxlen: 24
80.70.52.0/22 maxlen: 22
80.70.54.0/24 maxlen: 24
80.70.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c1:54:aa:fc:c9:20:e6:42:cb:8b:23:7d:ae:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Jan 1 22:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e53f9b0098472dd6aefa3d49604af7c36f14ad88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:17:6e:9d:bf:20:05:23:34:c8:5a:fb:19:49:
20:4e:68:08:b5:0e:53:a2:65:37:6b:36:df:6c:c8:
41:12:be:d8:32:d3:5b:f8:e9:62:97:c9:03:2e:1a:
04:1d:c8:e3:70:a5:c2:3f:e9:3d:3e:be:1d:64:db:
b3:2f:42:38:7e:0f:54:f4:fe:96:7c:6a:a7:4c:0b:
dd:36:76:30:95:f0:b9:dd:bc:49:23:1f:13:7f:ac:
f3:ed:61:1d:42:5c:88:56:71:33:a8:5c:af:45:5e:
24:ab:99:70:ae:b2:f2:d6:d5:93:cf:e0:68:5c:52:
76:fd:e7:d3:f6:96:dd:58:2c:d3:d2:e7:7c:0c:42:
0b:64:1f:4e:0a:f4:e2:71:4e:3a:0e:f5:29:6c:56:
ec:fc:14:25:da:30:74:30:5d:25:53:12:9f:51:c5:
22:ae:1f:df:90:43:af:a9:ec:39:c6:eb:9c:52:97:
af:d7:90:ac:f4:54:90:1a:41:b1:5a:fb:63:93:34:
56:3c:fa:1a:c8:dc:d3:10:07:35:ca:82:07:5d:1f:
0d:fc:fc:03:86:7d:d6:9f:48:9b:9f:0c:bf:13:50:
53:b8:ba:c2:7f:0b:c8:d7:47:e5:e4:9e:6f:c3:c0:
3a:c1:70:cc:c7:9e:b6:65:0e:21:f0:e8:a7:f9:31:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3F:9B:00:98:47:2D:D6:AE:FA:3D:49:60:4A:F7:C3:6F:14:AD:88
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/5T-bAJhHLdau-j1JYEr3w28UrYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.50.0/24
80.70.52.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:b6:d3:fb:eb:fe:dc:2c:94:3b:44:04:99:65:bc:36:f6:db:
8e:6c:b8:c4:f4:12:64:4c:73:29:19:dd:9c:b9:40:23:a0:a1:
bd:39:54:97:45:14:7e:7a:6e:dd:b9:f5:27:5e:ea:80:5d:87:
75:e4:bc:a1:5d:4f:01:0d:22:da:48:34:26:4f:73:61:00:cb:
d7:7d:13:9e:6c:d9:1c:29:f9:9a:81:4a:dc:56:83:5a:ed:4f:
83:94:a8:8e:44:65:9b:c0:7e:0b:4c:de:c5:d7:8f:d3:d7:9b:
49:f6:c7:0f:9b:5a:32:97:1f:cd:1a:03:88:e0:77:7d:91:07:
09:af:3b:64:cc:15:70:d3:37:a6:66:23:87:90:f8:3a:d4:34:
3d:7c:1c:a6:f4:08:ea:e2:38:3b:7c:0c:3a:db:40:5b:73:03:
51:f9:62:06:23:a1:f2:ce:01:13:bb:7a:b2:ec:d6:31:91:bd:
8d:0b:70:55:c8:1f:bf:80:c4:8c:b1:e3:a3:96:72:40:28:9b:
8b:58:01:2e:d9:02:27:22:49:28:38:22:08:f0:be:6b:cd:22:
1f:df:4a:89:22:9b:95:02:5a:9e:e7:65:01:7f:aa:ac:88:dd:
8a:f7:b8:1c:96:db:35:c6:c9:4f:25:93:56:6e:41:7d:48:76:
44:c3:64:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:15 2024 by rpki-client on console-ams.rpki-client.org