Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/4u36M2UTmPn8rbZvCy7VKJpAMcc.roa
File: 4u36M2UTmPn8rbZvCy7VKJpAMcc.roa (raw, json)
Hash identifier: nXeK1yXaEB2PcqGhyPSH5Q8n/CW3vBarrHPDFRwl6u0=
Subject key identifier: E2:ED:FA:33:65:13:98:F9:FC:AD:B6:6F:0B:2E:D5:28:9A:40:31:C7
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 0185DE0301DCEFDAAD29D4A4F6BC19386A15
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/4u36M2UTmPn8rbZvCy7VKJpAMcc.roa
Signing time: Mon 23 Jan 2023 09:43:37 +0000
ROA not before: Mon 23 Jan 2023 09:43:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 5.180.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Jul 2023 21:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:03:01:dc:ef:da:ad:29:d4:a4:f6:bc:19:38:6a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jan 23 09:43:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2edfa33651398f9fcadb66f0b2ed5289a4031c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:4e:68:84:31:db:6f:9c:2c:cb:a5:f6:6c:
41:6a:12:84:f1:ec:b9:3c:d1:ee:79:03:ef:9f:4a:
1a:fb:56:2e:ad:d8:7a:80:44:c1:8d:0d:de:47:24:
c7:6e:de:58:ae:c4:d3:81:ce:49:a3:56:67:c8:22:
b5:5f:fb:10:bb:08:db:49:30:72:e7:bb:02:8d:e4:
3f:f2:6e:10:db:73:ab:db:64:a7:1b:10:a0:3b:d9:
27:8c:13:2e:da:0b:61:5a:18:2f:68:19:fd:65:7e:
1f:34:6f:61:e9:c8:ea:8c:03:34:23:26:4c:92:fa:
47:d9:03:2a:bd:6d:d9:8f:c1:4f:c2:d6:4a:60:4a:
39:3f:13:10:17:e8:59:a2:18:10:df:18:50:16:31:
f0:dc:e0:8b:11:30:b9:0d:46:1b:6a:3f:17:00:ea:
09:dd:3b:43:d5:e1:f6:f2:bd:81:16:ab:f4:c9:71:
06:da:f3:2d:9e:61:ed:e8:23:79:03:21:8f:93:c2:
3f:91:95:50:2a:41:98:bf:4c:c5:bc:14:f5:43:eb:
5e:09:e8:86:ff:23:f8:3c:1e:e5:d3:3b:ae:fc:6f:
6d:13:87:5c:57:f8:a2:60:2f:e4:35:dc:0f:f2:33:
82:4f:34:b7:ab:5f:02:fc:79:c5:59:d8:f5:87:e0:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:ED:FA:33:65:13:98:F9:FC:AD:B6:6F:0B:2E:D5:28:9A:40:31:C7
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/4u36M2UTmPn8rbZvCy7VKJpAMcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.153.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5b:10:d9:ce:96:ea:ce:43:7b:a5:fc:e1:93:29:72:5d:8c:
c2:bd:1b:15:a1:51:91:cc:8b:93:15:15:7c:7d:87:3d:4d:00:
7b:36:b5:29:a0:e1:36:0b:b3:7c:df:fc:56:12:d0:23:0b:b1:
cf:56:4f:73:c2:d4:d1:ad:2d:f8:56:3d:ef:45:ec:db:66:23:
90:1b:66:1f:c2:f2:14:b7:e1:e7:2e:8a:87:82:c4:46:5e:e9:
b4:c3:8b:c3:93:3b:af:d4:d7:ae:97:e1:e0:3d:d0:88:fc:8b:
d5:f1:05:a1:16:0c:32:45:ee:89:c2:29:a2:96:55:ad:60:64:
16:8b:73:7c:33:12:30:da:23:fa:ae:9a:ed:c3:2b:12:f6:06:
95:75:d4:5d:8d:64:1a:2c:c1:3e:27:6d:ea:f9:11:a9:cf:06:
82:a0:b5:6b:53:b7:1e:7f:bb:c8:f8:a7:be:ae:0c:4c:aa:d4:
a6:31:28:1c:6f:16:c0:2f:ad:11:60:b1:12:76:c8:3d:c9:e0:
90:83:9c:44:7a:b5:32:88:5c:64:89:bc:27:e9:a9:91:6d:1a:
80:92:8e:46:48:b4:d7:dd:09:0d:1f:d0:ea:56:4b:c7:48:c0:
94:b9:8d:8c:09:e7:04:df:82:df:54:f2:8a:36:b7:0a:9e:73:
f5:f9:69:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org