Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/1B7sZNyo8RMd4b4Lceq4QBumtjw.roa
File: 1B7sZNyo8RMd4b4Lceq4QBumtjw.roa (raw, json)
Hash identifier: tb8z//6vJjGa7OqQPXNB9e8sEG3LYEhUQY/wORPEBas=
Subject key identifier: D4:1E:EC:64:DC:A8:F1:13:1D:E1:BE:0B:71:EA:B8:40:1B:A6:B6:3C
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018B85AD68D195154BD086D7EDDA63486D86
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/1B7sZNyo8RMd4b4Lceq4QBumtjw.roa
Signing time: Tue 31 Oct 2023 12:20:16 +0000
ROA not before: Tue 31 Oct 2023 12:20:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47392
IP address blocks: 5.180.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:ad:68:d1:95:15:4b:d0:86:d7:ed:da:63:48:6d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Oct 31 12:20:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d41eec64dca8f1131de1be0b71eab8401ba6b63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:2c:e4:a2:4b:ad:f7:d5:1a:01:0f:39:fd:
1f:9b:e0:11:32:97:35:6d:fd:3b:75:82:9b:8c:9f:
e6:05:f0:8f:dd:6d:26:4f:c4:30:02:14:41:a3:15:
3d:9d:e8:f2:1d:35:b9:f5:e6:74:d7:08:f4:cd:a6:
02:77:cd:bc:88:d4:4b:5a:ca:5b:7e:e9:f8:b3:05:
bd:fb:2c:cf:7f:58:12:59:55:0f:8d:4f:00:97:f5:
1b:b0:3b:fb:46:3a:b0:f3:24:a0:f1:7a:a0:3c:2e:
0b:ec:6d:83:f8:0c:77:f3:73:39:88:f8:03:f8:3b:
d8:f7:f4:20:58:51:1b:e6:6f:26:78:48:af:1e:21:
cf:f9:a8:0a:b4:fe:64:e4:49:9c:f5:8f:f3:6e:49:
05:88:66:e8:bf:19:5c:f9:e1:80:91:88:6e:ac:8c:
7b:3c:30:77:b5:94:fb:3a:03:04:78:76:a8:7c:53:
08:8b:7b:9d:f8:f1:37:a0:c1:4f:be:6d:56:9e:bb:
51:5f:4a:38:4b:52:01:f8:3d:3f:ae:7f:8d:ff:2e:
08:8d:29:8e:fa:c2:11:9d:ac:fd:c7:8f:25:70:23:
55:d0:fe:5e:49:1d:cc:38:ff:e6:6e:e4:a7:43:aa:
4f:d4:42:e2:50:5e:c3:79:18:68:5a:87:fe:c8:0d:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1E:EC:64:DC:A8:F1:13:1D:E1:BE:0B:71:EA:B8:40:1B:A6:B6:3C
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/1B7sZNyo8RMd4b4Lceq4QBumtjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:60:9a:9f:4a:bc:61:6e:f5:4a:21:b6:5d:14:23:10:f4:79:
fb:00:c7:51:af:44:c0:7b:58:56:69:1d:d0:0c:d9:fb:d8:01:
f5:08:dd:1f:df:c8:02:58:6f:dd:e0:4f:3b:26:dd:ba:ba:b5:
f7:2b:2c:51:83:8b:9c:e5:03:17:f4:87:77:7e:28:e3:68:b7:
ec:7b:9e:46:0a:3f:2c:ab:90:35:5f:65:19:57:f8:77:69:bd:
82:86:49:ab:29:3e:94:bf:8f:76:d1:eb:97:e9:0c:1b:9e:69:
76:7e:a1:07:d9:19:2b:fc:ed:aa:56:39:cb:a3:9f:5f:a2:ea:
4b:7f:a6:ac:af:94:ed:50:9f:0a:25:24:ef:93:89:00:51:bf:
30:e7:84:0d:43:80:6b:c0:24:01:2f:c3:18:d2:84:db:18:78:
b5:f4:c9:90:de:91:a8:45:f9:1c:fa:f0:df:31:59:7c:bc:b0:
62:cf:d9:0f:f7:64:0f:c5:c2:1f:bc:6b:1a:98:74:c2:43:c0:
b8:a9:c1:c5:ae:61:4b:6e:1e:78:a4:af:9d:62:48:a7:01:8e:
2b:ab:a6:ef:9c:da:94:74:28:63:e4:00:1b:6d:15:91:91:ab:
80:e3:ba:d9:6d:13:e3:8c:88:99:b4:a6:dd:ca:ae:b1:68:5a:
7b:f7:e6:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuFrWjRlRVL0IbX7dpjSG2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjMxMDMxMTIyMDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDFlZWM2NGRjYThmMTEzMWRlMWJlMGI3MWVhYjg0MDFiYTZiNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHcs5KJLrffVGgEPOf0fm+ARMpc1
bf07dYKbjJ/mBfCP3W0mT8QwAhRBoxU9nejyHTW59eZ01wj0zaYCd828iNRLWspb
fun4swW9+yzPf1gSWVUPjU8Al/UbsDv7Rjqw8ySg8XqgPC4L7G2D+Ax383M5iPgD
+DvY9/QgWFEb5m8meEivHiHP+agKtP5k5Emc9Y/zbkkFiGbovxlc+eGAkYhurIx7
PDB3tZT7OgMEeHaofFMIi3ud+PE3oMFPvm1WnrtRX0o4S1IB+D0/rn+N/y4IjSmO
+sIRnaz9x48lcCNV0P5eSR3MOP/mbuSnQ6pP1ELiUF7DeRhoWof+yA3h2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNQe7GTcqPETHeG+C3HquEAbprY8MB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvMUI3c1pOeW84Uk1kNGI0TGNlcTRRQnVtdGp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbTCMA0G
CSqGSIb3DQEBCwUAA4IBAQAfYJqfSrxhbvVKIbZdFCMQ9Hn7AMdRr0TAe1hWaR3Q
DNn72AH1CN0f38gCWG/d4E87Jt26urX3KyxRg4uc5QMX9Id3fijjaLfse55GCj8s
q5A1X2UZV/h3ab2ChkmrKT6Uv4920euX6Qwbnml2fqEH2Rkr/O2qVjnLo59foupL
f6asr5TtUJ8KJSTvk4kAUb8w54QNQ4BrwCQBL8MY0oTbGHi19MmQ3pGoRfkc+vDf
MVl8vLBiz9kP92QPxcIfvGsamHTCQ8C4qcHFrmFLbh54pK+dYkinAY4rq6bvnNqU
dChj5AAbbRWRkauA47rZbRPjjIiZtKbdyq6xaFp79+aQ
-----END CERTIFICATE-----
Generated at Thu Nov 30 14:29:18 2023 by rpki-client on console-fra.rpki-client.org