Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/BwowuO8mgZtgcEXIwwA85e5GTto.roa
File: BwowuO8mgZtgcEXIwwA85e5GTto.roa (raw, json)
Hash identifier: U/IZ4+aT4evkztbrMQs0RDb7w8AbatYtIa6RE8CddS8=
Subject key identifier: 07:0A:30:B8:EF:26:81:9B:60:70:45:C8:C3:00:3C:E5:EE:46:4E:DA
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018C24EED7365ACA2FE7CF0CE6B773D93905
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/BwowuO8mgZtgcEXIwwA85e5GTto.roa
Signing time: Fri 01 Dec 2023 10:31:21 +0000
ROA not before: Fri 01 Dec 2023 10:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 5.180.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:ee:d7:36:5a:ca:2f:e7:cf:0c:e6:b7:73:d9:39:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Dec 1 10:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=070a30b8ef26819b607045c8c3003ce5ee464eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:73:c0:81:44:09:8c:ac:d8:9c:7d:4c:37:
de:56:f1:37:e7:14:c0:94:be:8c:99:7d:fb:fb:66:
57:94:04:af:b7:21:a0:1a:91:76:8d:cc:5d:7a:0e:
39:d1:28:74:79:d0:c6:a9:8f:80:14:36:c7:20:42:
e3:a7:bc:4b:42:b0:2d:f7:44:5b:bd:44:d9:f0:5a:
06:f9:45:0a:3a:31:1f:6f:ad:aa:6c:d0:c4:0c:b6:
e0:85:ff:bb:a8:5e:64:1d:f3:05:95:a8:82:d9:09:
0d:ef:40:da:7f:ef:8f:7e:58:4d:00:18:15:aa:4e:
95:6a:ea:90:ff:cd:cb:be:77:eb:54:ab:f9:32:c3:
ff:1b:3d:64:87:5e:62:07:a1:26:87:91:f5:b6:6b:
8a:43:25:e1:79:0d:47:e6:27:c2:39:3a:e0:7e:0d:
5c:47:ef:7c:8c:7f:cc:cc:72:cc:8a:9f:27:a8:06:
63:fc:d5:02:28:40:3e:09:58:00:50:24:0a:4b:63:
24:c3:29:bf:d5:9a:1d:15:19:3c:7c:d6:19:33:6c:
66:6e:09:68:e4:03:0a:60:4c:23:a0:93:4e:ce:e3:
6e:1a:5a:69:b3:42:ad:29:70:45:cc:96:d7:b3:ad:
a5:5b:26:2a:17:06:f4:7c:5d:24:6f:cd:7d:ca:58:
1d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0A:30:B8:EF:26:81:9B:60:70:45:C8:C3:00:3C:E5:EE:46:4E:DA
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/BwowuO8mgZtgcEXIwwA85e5GTto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.194.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ee:14:54:96:87:75:e3:3e:1e:a0:f6:d7:f9:d0:08:ec:45:
f3:b2:8d:53:5c:d3:63:62:c2:51:06:20:d2:1a:c3:7a:85:29:
90:0c:6e:bb:e4:6c:08:1c:cf:d1:54:8b:f6:ef:1e:da:e8:f8:
68:7a:59:46:ed:2e:68:dc:9e:11:ef:93:d5:bd:55:1c:6b:a4:
8d:dd:be:0c:f5:f8:e7:36:35:08:a2:8f:2e:c6:9e:4d:ef:8c:
a9:29:6e:89:30:0d:6f:56:ca:f9:dc:e9:f4:5a:59:69:3c:9c:
07:f8:a7:d1:c8:82:a2:a2:d5:58:70:14:84:a0:ae:4b:f7:09:
29:4c:24:0a:32:58:f7:2b:b1:27:f7:7e:05:e6:12:41:41:09:
ea:c4:55:1e:2f:76:a3:89:85:48:7c:22:87:a5:5a:e1:95:de:
50:c7:04:99:af:15:f5:86:fb:2f:3e:77:1b:64:86:5a:d3:1f:
72:a4:14:a0:ec:0b:0f:75:ef:39:ce:01:a6:8e:4d:d1:40:a4:
d8:fc:09:3b:74:7a:5c:3b:d1:a7:a1:27:3f:44:08:50:4f:9f:
a5:77:07:38:72:28:ac:75:2a:88:d7:f2:ea:4f:a9:70:fa:b3:
c7:dd:1e:b1:14:82:3c:9e:2f:62:f1:f1:ce:70:27:33:7b:56:
3a:d3:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 15:31:53 2023 by rpki-client on console-ams.rpki-client.org