Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/naW-fNJe3BOEHFZnblnhMbxmJmY.roa
File: naW-fNJe3BOEHFZnblnhMbxmJmY.roa (raw, json)
Hash identifier: pL99pdqXnQ878mO3aY1WGDnd1ghuMZOuxWsU1ENW3yg=
Subject key identifier: 9D:A5:BE:7C:D2:5E:DC:13:84:1C:56:67:6E:59:E1:31:BC:66:26:66
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 0187C7DD9B2161215939EF30920891E283F5
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/naW-fNJe3BOEHFZnblnhMbxmJmY.roa
Signing time: Fri 28 Apr 2023 12:36:41 +0000
ROA not before: Fri 28 Apr 2023 12:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 5.180.194.0/24 maxlen: 24
5.180.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:dd:9b:21:61:21:59:39:ef:30:92:08:91:e2:83:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Apr 28 12:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9da5be7cd25edc13841c56676e59e131bc662666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:4c:72:01:35:b9:57:9a:22:b7:57:b4:f3:
38:32:b8:d1:c5:03:0b:18:e1:99:3f:45:6d:5f:46:
f7:0d:2f:2f:13:72:20:1a:e8:0c:78:0b:f7:23:e9:
fb:1a:89:9e:77:e6:f8:b6:aa:4c:d7:7a:b7:ad:c7:
8d:ae:d9:ba:8a:f1:ce:d6:d4:cc:2d:1f:cb:6d:03:
54:9a:b1:a0:62:db:53:a4:02:b7:35:47:f9:42:c2:
76:e6:a2:04:73:70:c9:0a:4d:00:de:f9:18:a0:d1:
08:1f:68:dd:b3:00:54:25:4f:c2:c0:d2:8f:60:15:
6b:9a:46:9a:d4:ad:73:70:8d:47:aa:e8:de:ed:6a:
e7:96:11:f5:fa:77:69:98:82:23:32:98:2e:02:b3:
c2:44:f4:1a:d0:73:20:67:38:bd:00:7b:2e:07:0e:
50:77:d8:1d:c1:f6:85:b2:3e:f3:50:69:36:71:93:
45:27:b7:10:4d:78:d7:f6:25:4c:99:8f:84:66:e0:
03:91:98:05:c9:c3:11:d7:0e:f1:55:e9:5b:5f:c4:
9b:d3:a6:2e:3a:5f:fb:5f:a2:51:4c:78:28:67:af:
3d:39:df:d9:2e:c5:2c:cb:3d:bd:7e:a8:a9:41:a4:
e6:35:0b:c9:ad:5e:cb:6c:e2:a7:e5:0b:0f:37:52:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A5:BE:7C:D2:5E:DC:13:84:1C:56:67:6E:59:E1:31:BC:66:26:66
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/naW-fNJe3BOEHFZnblnhMbxmJmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.194.0/23
Signature Algorithm: sha256WithRSAEncryption
75:89:63:7c:fc:4c:88:72:59:89:f3:d8:72:8e:40:59:9d:d3:
66:79:0c:6f:f3:26:19:57:4f:f4:25:15:2e:67:cb:76:ff:22:
91:6a:c2:85:63:1c:04:22:65:67:e8:54:25:e3:90:13:7b:e6:
7d:4e:dd:1f:a7:75:2e:f5:e8:1d:8a:5f:42:24:a8:72:ad:87:
3a:29:63:9c:f6:08:3b:5d:84:52:c2:43:f4:57:d7:03:45:7d:
fc:ee:5f:74:61:c3:9f:4f:e2:68:15:e3:e9:68:40:42:c4:24:
fc:af:a5:00:74:50:43:4e:57:af:4e:1d:d4:f1:36:cf:bf:8b:
61:32:39:8e:42:5d:e3:6e:51:3a:3e:a2:bc:eb:ca:14:12:4e:
51:02:77:bd:07:79:30:0e:d4:a9:eb:3c:5e:f6:68:c8:c4:12:
77:94:e2:79:8a:bb:a4:7d:e1:a5:49:dd:fc:03:d9:8d:d9:6a:
12:b7:d4:d0:40:e0:f8:a7:20:52:86:ab:8d:b5:85:45:d9:05:
cd:cc:69:91:04:0e:24:b9:0a:74:65:35:e1:5f:2b:55:42:6a:
9f:cf:63:ba:7b:dc:6f:04:7f:29:6a:8d:71:9a:6a:2b:29:19:
eb:94:87:c0:66:74:4b:ff:02:d6:69:25:6e:87:d4:4c:2b:b8:
c1:90:c2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org