Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/vd6jxJ4GCBMXXRJubY_SZiFJVmc.roa
File: vd6jxJ4GCBMXXRJubY_SZiFJVmc.roa (raw, json)
Hash identifier: xGSw+DSq9+yDPGSYaHmFURlvBcJYwEGkDUNe46Z4yu4=
Subject key identifier: BD:DE:A3:C4:9E:06:08:13:17:5D:12:6E:6D:8F:D2:66:21:49:56:67
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 0187BD782A52A29700A5FF48F96F40A48EE5
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/vd6jxJ4GCBMXXRJubY_SZiFJVmc.roa
Signing time: Wed 26 Apr 2023 12:09:41 +0000
ROA not before: Wed 26 Apr 2023 12:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:78:2a:52:a2:97:00:a5:ff:48:f9:6f:40:a4:8e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Apr 26 12:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bddea3c49e060813175d126e6d8fd26621495667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:25:7d:73:28:3f:f5:23:28:2c:eb:28:c7:67:
f6:29:1d:a6:31:46:a4:3b:d7:37:65:b5:3f:95:f9:
da:93:e1:4d:e8:e9:28:11:48:ad:3e:f3:f6:7d:26:
3e:5c:3f:bf:d4:dc:54:a2:ae:cb:20:3a:61:f3:f1:
bf:4a:a8:86:ce:c2:8a:5c:a9:d7:b7:0d:f0:09:fa:
e5:e1:57:44:8a:f3:78:ec:a2:db:31:7e:d6:71:c4:
b6:f8:60:e9:3a:08:fa:62:f7:af:04:1c:ac:1f:0d:
f4:53:3e:12:33:00:c4:94:1e:5a:f9:eb:e0:2f:32:
9c:b9:69:a0:8d:9c:1e:c9:e1:32:04:0c:81:6b:09:
76:7e:97:94:8c:9e:2f:8e:8a:2e:b8:c0:37:2d:dd:
33:1c:21:4a:a0:93:d3:34:12:36:ff:31:91:2c:d9:
2b:51:b7:87:50:58:fe:31:25:18:96:5d:22:45:53:
87:3a:fa:31:e0:74:62:16:1b:32:8f:24:4b:49:17:
1a:58:e9:b5:98:23:bb:f2:bf:ec:bf:ce:da:2f:e2:
f4:d0:9b:07:87:b9:f1:cb:64:e6:c5:13:a7:84:3e:
36:6c:65:64:e8:67:93:a9:c1:75:88:27:92:89:41:
ed:c3:74:0b:c1:bd:a0:f4:7a:5c:4f:9b:6d:4e:a1:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DE:A3:C4:9E:06:08:13:17:5D:12:6E:6D:8F:D2:66:21:49:56:67
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/vd6jxJ4GCBMXXRJubY_SZiFJVmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:64:cd:70:ba:ac:7f:22:df:74:fe:dc:72:62:d9:36:19:36:
8c:e6:98:89:12:ec:c1:cb:50:22:1a:35:90:46:3e:2e:6e:7c:
65:2d:86:0d:ef:48:a7:4e:bb:65:1b:1a:5c:c6:23:fb:91:c5:
6a:a9:d7:fe:ea:7a:6f:58:3d:df:23:4a:64:47:0c:8a:bd:74:
42:2d:24:11:9b:99:f2:09:98:a7:d8:e1:64:be:3d:17:40:e7:
ab:1e:6d:b0:a2:9a:fb:4f:da:d9:6b:38:a6:0d:f6:3f:11:78:
e0:9b:37:46:cb:61:3f:01:9d:25:5e:81:b5:7e:3c:2e:74:d3:
1d:7c:16:04:12:e3:a1:0e:9d:34:58:22:29:2c:b4:2a:24:16:
6a:91:fe:08:a4:59:ce:8f:b0:87:03:11:e7:57:14:d2:5a:3b:
3f:c5:5c:56:3f:d4:5d:b8:ea:73:f3:97:bb:15:50:a1:1f:11:
5d:a5:02:c8:e1:17:58:03:05:48:b4:f9:79:9e:17:78:aa:a9:
d9:4d:e7:e3:60:53:8a:c0:6b:d9:76:0d:7e:70:f4:c5:c5:9d:
89:1a:7b:9d:70:20:fd:6c:0b:70:a9:3d:38:21:9f:cc:70:fc:
f1:a1:2f:e0:e8:06:f3:94:08:63:aa:b9:86:14:24:86:16:de:
13:f7:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org