Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tpW8CK0lxdekTdsIrpFcpACbTTE.roa
File: tpW8CK0lxdekTdsIrpFcpACbTTE.roa (raw, json)
Hash identifier: pz3ZaaPJFDDPHSNa3SuBL7vaxpYBXexpdjj42nXgZrs=
Subject key identifier: B6:95:BC:08:AD:25:C5:D7:A4:4D:DB:08:AE:91:5C:A4:00:9B:4D:31
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0187090750AC2885D144F4495B5FBCAC9C00
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tpW8CK0lxdekTdsIrpFcpACbTTE.roa
Signing time: Wed 22 Mar 2023 11:14:47 +0000
ROA not before: Wed 22 Mar 2023 11:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210702
IP address blocks: 5.180.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:07:50:ac:28:85:d1:44:f4:49:5b:5f:bc:ac:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 22 11:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b695bc08ad25c5d7a44ddb08ae915ca4009b4d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:28:a2:a0:d8:8c:4a:8c:49:d5:f8:e6:a2:
88:d7:e2:80:a9:52:a4:70:b4:4e:8f:b3:4d:e6:08:
c7:04:a7:7c:bc:ac:15:2c:c0:a2:6f:ff:95:74:e7:
19:28:fb:69:01:14:8a:08:b0:6c:68:95:fb:37:7e:
42:ed:91:b0:33:0d:e2:8c:7e:43:4b:e7:43:a3:58:
7d:85:f9:18:f5:e3:50:39:23:10:ad:18:1a:4f:f4:
c8:d5:ac:a6:40:84:93:c7:2d:c5:8a:de:e7:77:65:
a1:8c:d5:1f:f6:83:9c:7f:b4:9c:b0:89:55:a8:36:
4c:e2:d9:e7:d7:89:4e:68:04:0c:22:3b:16:dd:d6:
20:56:99:50:af:40:6c:a2:c9:ac:8b:30:fa:c4:f1:
9f:69:99:d7:15:65:83:18:40:70:2a:a6:49:9a:a7:
81:c3:ae:e1:60:95:af:dd:3c:4d:21:80:9c:54:c9:
8f:8f:aa:e8:cb:5f:7d:81:92:77:d9:5b:73:ee:e8:
51:7c:b4:28:f6:38:9a:ba:2e:c1:3e:01:fd:9a:8b:
13:92:8f:b3:84:0f:2b:cd:96:3c:ec:38:3e:cf:a9:
48:89:e7:3f:bd:e3:49:83:f0:1b:22:2f:fa:6f:f5:
b6:d0:73:bf:cf:86:69:49:7a:50:af:59:28:ec:7f:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:95:BC:08:AD:25:C5:D7:A4:4D:DB:08:AE:91:5C:A4:00:9B:4D:31
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tpW8CK0lxdekTdsIrpFcpACbTTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.139.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c1:a1:c9:f8:1e:3d:5d:51:ba:83:0d:de:d8:64:5d:05:8f:
5e:b9:22:5a:0c:1c:ec:99:03:6a:10:e8:42:e9:f5:ee:43:a3:
24:f1:54:ab:b9:30:35:8e:42:24:72:17:a2:fd:98:7b:54:7e:
3a:ce:87:aa:61:ec:f0:5c:48:86:2a:1e:3a:4a:88:41:f4:dc:
76:01:d7:c4:af:d2:9a:0e:47:6a:a9:28:df:e4:9d:e6:2b:7c:
bb:91:77:69:2e:7d:af:71:1c:0f:88:bf:04:3a:4f:af:6e:e6:
b9:af:71:a3:be:1b:5d:ea:02:bb:30:93:37:7c:17:c8:94:85:
84:49:d8:91:dc:df:79:dd:ce:92:a2:96:61:19:b2:52:e7:62:
7e:c6:2f:93:7c:a2:41:fe:bf:4f:ad:b8:30:fb:a5:0f:d8:4d:
e3:3e:63:c3:a5:22:6e:16:f1:c5:61:27:e5:bd:db:78:48:f1:
ce:f0:91:3f:59:7a:97:2b:a1:a1:7f:f8:a0:4d:f2:4d:59:0b:
df:e6:b0:a4:c8:25:ad:52:4f:dd:3f:6d:d9:80:c8:a4:00:dc:
16:65:e9:83:7b:d4:ba:ed:bc:ae:f9:98:47:a9:b4:34:2f:68:
cb:40:f5:a4:ee:05:d2:39:c3:28:d4:e3:ea:c5:6c:db:c3:30:
c6:cf:99:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcJB1CsKIXRRPRJW1+8rJwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwMzIyMTExNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjk1YmMwOGFkMjVjNWQ3YTQ0ZGRiMDhhZTkxNWNhNDAwOWI0ZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuMooqDYjEqMSdX45qKI1+KAqVKk
cLROj7NN5gjHBKd8vKwVLMCib/+VdOcZKPtpARSKCLBsaJX7N35C7ZGwMw3ijH5D
S+dDo1h9hfkY9eNQOSMQrRgaT/TI1aymQISTxy3Fit7nd2WhjNUf9oOcf7ScsIlV
qDZM4tnn14lOaAQMIjsW3dYgVplQr0BsosmsizD6xPGfaZnXFWWDGEBwKqZJmqeB
w67hYJWv3TxNIYCcVMmPj6roy199gZJ32Vtz7uhRfLQo9jiaui7BPgH9mosTko+z
hA8rzZY87Dg+z6lIiec/veNJg/AbIi/6b/W20HO/z4ZpSXpQr1ko7H9laQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLaVvAitJcXXpE3bCK6RXKQAm00xMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvdHBXOENLMGx4ZGVrVGRzSXJwRmNwQUNiVFRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbSLMA0G
CSqGSIb3DQEBCwUAA4IBAQAhwaHJ+B49XVG6gw3e2GRdBY9euSJaDBzsmQNqEOhC
6fXuQ6Mk8VSruTA1jkIkchei/Zh7VH46zoeqYezwXEiGKh46SohB9Nx2AdfEr9Ka
DkdqqSjf5J3mK3y7kXdpLn2vcRwPiL8EOk+vbua5r3Gjvhtd6gK7MJM3fBfIlIWE
SdiR3N953c6SopZhGbJS52J+xi+TfKJB/r9Prbgw+6UP2E3jPmPDpSJuFvHFYSfl
vdt4SPHO8JE/WXqXK6Ghf/igTfJNWQvf5rCkyCWtUk/dP23ZgMikANwWZemDe9S6
7byu+ZhHqbQ0L2jLQPWk7gXSOcMo1OPqxWzbwzDGz5nD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org