Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/HlH6CLZJsapY01dx1J5lBuzhCxI.roa
File: HlH6CLZJsapY01dx1J5lBuzhCxI.roa (raw, json)
Hash identifier: Zx48IZPTyv5BFAPn42SCHiwbjUgT2OUvJ+y5zwbrKNw=
Subject key identifier: 1E:51:FA:08:B6:49:B1:AA:58:D3:57:71:D4:9E:65:06:EC:E1:0B:12
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018570FBCE8D2A6F70EA393B7EA5983235E6
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/HlH6CLZJsapY01dx1J5lBuzhCxI.roa
Signing time: Mon 02 Jan 2023 05:37:08 +0000
ROA not before: Mon 02 Jan 2023 05:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209771
IP address blocks: 5.1.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ce:8d:2a:6f:70:ea:39:3b:7e:a5:98:32:35:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 2 05:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e51fa08b649b1aa58d35771d49e6506ece10b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:1a:0c:c0:3c:a0:49:65:b3:cc:37:f0:ca:
04:6e:de:c3:e4:bf:9d:e3:a0:6c:81:b6:35:5d:dd:
af:b4:d7:5d:f9:78:ba:a9:60:a8:df:62:ef:4c:5c:
1f:ce:62:e1:81:3f:e1:38:f8:0e:f6:a0:9d:12:90:
39:23:3d:f7:18:55:6f:74:f9:ab:18:3b:e7:63:19:
69:ba:cf:06:9a:e4:26:fe:61:e9:d0:30:ee:55:06:
5b:1f:d3:3a:e5:c6:4c:96:d8:e8:3a:0d:36:87:27:
0b:73:e8:fb:2e:cf:5f:81:7d:0b:fe:59:46:71:70:
49:d2:e9:4a:9b:a4:c6:c1:11:9e:b0:26:f5:b1:54:
70:04:23:c0:bf:a1:76:4f:7b:d0:79:54:38:e8:c6:
d6:28:15:75:52:b1:25:46:42:0e:8c:ba:c8:85:ff:
14:27:a1:28:1a:62:cc:63:db:d5:a6:dc:fc:35:f4:
63:fd:53:21:2c:e2:7e:9b:6c:88:41:b5:52:3e:32:
a7:92:10:a8:87:c6:a6:47:82:d1:85:83:35:6e:6a:
9e:72:6f:c7:63:ee:37:cd:d2:70:41:3e:f5:57:cb:
28:6c:dd:25:e6:b3:6d:7f:c0:c6:48:47:43:71:25:
63:12:5f:7f:79:f0:3e:83:92:88:ff:3c:84:b1:61:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:51:FA:08:B6:49:B1:AA:58:D3:57:71:D4:9E:65:06:EC:E1:0B:12
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/HlH6CLZJsapY01dx1J5lBuzhCxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.80.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:29:44:6c:6b:e6:c5:b6:e8:25:d4:45:a5:47:8f:a1:f7:f2:
66:a0:0a:61:60:e9:17:a9:4a:a4:83:60:7d:eb:73:33:b0:d6:
93:6e:ce:c7:36:89:41:25:30:c1:76:f4:a2:14:97:1d:0e:1e:
c0:fc:62:ab:af:bf:d0:06:ed:b3:3a:aa:55:43:0b:1d:ec:65:
92:00:11:24:92:46:62:49:35:3f:81:a7:97:1d:ef:b7:6a:19:
70:be:f7:40:f9:07:5c:38:77:cb:36:66:fc:5d:ef:c0:36:df:
1b:a1:a1:78:c6:43:a4:29:d0:a8:63:45:cc:5e:f6:31:44:7f:
a4:84:d6:35:7b:e7:68:9a:3c:e1:5b:01:a2:82:65:b4:15:d1:
96:be:fe:b3:53:39:d3:21:98:c7:4f:aa:d6:f4:3a:ff:6e:42:
24:c9:d2:b1:4a:f2:77:5b:4c:66:a4:f2:a6:a1:96:25:84:95:
80:8a:ef:a7:34:3c:3c:74:45:47:dd:2b:11:ed:97:a0:34:9c:
22:e4:4e:8b:b3:6c:c8:30:03:7f:59:ff:81:f7:36:cf:a8:eb:
64:2f:2e:8c:e2:48:e2:02:1c:05:be:40:65:f6:99:05:43:84:
44:36:f4:41:0f:0d:ef:76:09:ba:dc:eb:19:8f:71:f8:0b:37:
ab:8d:14:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:19 2024 by rpki-client on console-fra.rpki-client.org