Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/8U10Fn7SvjfnoeVxwqhHKVPdSsM.roa
File: 8U10Fn7SvjfnoeVxwqhHKVPdSsM.roa (raw, json)
Hash identifier: J6NJUsY36rexUNvxc+2c0MKFqK3ZUf+DhtypxlDsNtY=
Subject key identifier: F1:4D:74:16:7E:D2:BE:37:E7:A1:E5:71:C2:A8:47:29:53:DD:4A:C3
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 0185728357121DCF4EE7558857DEF2E43DED
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/8U10Fn7SvjfnoeVxwqhHKVPdSsM.roa
Signing time: Mon 02 Jan 2023 12:44:48 +0000
ROA not before: Mon 02 Jan 2023 12:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 5.180.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 18:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:57:12:1d:cf:4e:e7:55:88:57:de:f2:e4:3d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jan 2 12:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f14d74167ed2be37e7a1e571c2a8472953dd4ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:ec:eb:2f:5c:d7:09:68:e2:c7:77:2d:de:
7b:49:8b:4d:37:fb:c4:a6:b7:98:88:99:98:10:26:
0b:84:02:f0:5d:d8:70:f2:31:9d:d9:83:64:a3:d4:
86:8a:5a:c0:6b:3b:0b:8c:fc:d3:f6:28:9a:af:ee:
85:24:48:d6:21:d9:29:74:3a:5b:5d:de:ad:34:6d:
fa:52:4e:f8:71:9b:14:da:5d:91:34:15:8b:5f:22:
9a:91:da:2b:c6:d8:02:b7:95:25:9a:27:68:00:5a:
81:11:59:58:d6:b9:df:38:ec:d5:b6:5a:22:49:92:
08:7a:c1:1f:c9:f6:f3:da:fc:c5:04:64:57:50:74:
c2:ad:3d:f3:d9:22:69:f7:d0:57:6b:fe:a9:09:2f:
67:18:65:66:41:e6:97:91:0a:24:62:fd:8c:28:33:
aa:29:29:fd:78:89:17:9b:6e:b1:95:b8:fd:9c:e4:
67:9a:6a:ad:64:b0:8d:13:81:3a:71:95:24:57:eb:
b3:f0:81:85:f0:cf:d6:98:94:56:f1:ae:da:55:1e:
b9:fa:9a:79:4c:bb:b3:47:13:c1:88:2c:fc:25:36:
6c:f6:b5:09:02:b2:a0:f7:d5:b3:a5:29:59:b3:bf:
21:cb:28:95:75:94:8a:08:09:ea:12:f2:eb:5c:35:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4D:74:16:7E:D2:BE:37:E7:A1:E5:71:C2:A8:47:29:53:DD:4A:C3
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/8U10Fn7SvjfnoeVxwqhHKVPdSsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.155.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ec:1d:f0:84:7b:28:85:37:4c:5e:a0:9e:ac:0a:0a:f9:70:
a2:8d:01:e8:84:df:2d:d5:05:e6:ca:5d:60:14:da:0a:1e:ad:
c9:80:64:58:0f:05:dc:bc:df:b0:22:df:ed:ba:59:93:47:5d:
18:a3:5c:fb:16:7c:29:32:c9:c9:de:a0:1d:55:a0:9a:9c:b7:
19:e9:fb:59:76:46:eb:4a:fe:23:48:a7:36:2a:73:52:b0:be:
e8:87:7f:d4:f6:90:6b:80:fc:7f:7b:e6:8d:79:18:e4:2f:61:
1b:25:50:48:4f:ca:35:78:74:b9:25:65:ea:72:b3:b8:fe:35:
88:61:01:91:9c:48:5c:45:db:53:f4:b0:c2:04:82:f3:bc:ce:
af:49:80:13:2a:58:2f:a4:dd:a6:2e:68:af:9c:a0:b6:6a:3c:
87:92:0f:c2:94:0c:a5:73:d6:db:63:55:af:9c:5e:93:ba:88:
6c:a8:48:a3:35:4a:71:5d:e4:df:ff:9c:48:47:b8:b9:58:30:
c0:6e:fe:e6:c1:b6:07:40:f5:fe:7d:c4:76:86:8c:dd:6d:29:
c2:79:5a:80:24:fd:9b:00:42:11:9e:21:81:c7:1b:a8:13:26:
a5:e4:ac:00:1c:b4:37:7f:96:39:13:19:60:1b:83:cd:32:0d:
b0:44:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:15 2024 by rpki-client on console-fra.rpki-client.org