Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/Gcu8XKtW1dzmc2PVhILnBEyZf0I.roa
File: Gcu8XKtW1dzmc2PVhILnBEyZf0I.roa (raw, json)
Hash identifier: CD3/TCxdWvyUCFT46iwOWxGOsPqCVPSKbURCFXwfFi4=
Subject key identifier: 19:CB:BC:5C:AB:56:D5:DC:E6:73:63:D5:84:82:E7:04:4C:99:7F:42
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 01857283594A7E0F7DDA9E9A8CCEE08CEFA4
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/Gcu8XKtW1dzmc2PVhILnBEyZf0I.roa
Signing time: Mon 02 Jan 2023 12:44:48 +0000
ROA not before: Mon 02 Jan 2023 12:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397630
IP address blocks: 5.180.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Oct 2023 18:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:59:4a:7e:0f:7d:da:9e:9a:8c:ce:e0:8c:ef:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jan 2 12:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19cbbc5cab56d5dce67363d58482e7044c997f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:b0:d6:ed:d4:5d:a2:cd:a6:ae:10:ce:e8:
56:54:32:b4:0d:f1:a4:4d:4c:ce:bf:53:6a:7e:c1:
6b:98:39:87:b0:93:cf:62:96:f4:3a:e6:11:71:e6:
f1:cb:10:55:15:5d:b9:d8:6f:3e:43:16:b8:a0:1f:
b0:1d:0d:df:3b:cb:1a:34:a8:4c:0f:26:48:ba:c8:
5c:15:88:6d:ec:6f:6c:1f:e7:29:9a:d2:a2:0a:84:
04:5a:b3:1b:72:ab:af:ae:58:ef:d4:7d:db:6f:a2:
2d:3b:12:3b:8c:d4:85:44:22:4c:7d:20:d9:9d:57:
83:ec:83:35:5c:d8:71:ce:48:78:3f:3f:52:d9:e5:
06:b4:7f:3f:20:81:ba:b5:ca:15:a6:c9:61:98:09:
a4:f2:44:e6:f3:b6:a5:7a:02:f9:c6:5d:12:9a:e9:
04:c4:96:4f:dd:5a:1e:14:71:90:4e:d6:e9:34:7a:
5c:dc:4d:4e:e0:bd:ce:c8:8e:4e:fb:89:10:cd:90:
53:f5:a4:0a:84:f0:bb:29:46:a9:5b:be:72:33:de:
4f:ef:c8:27:cf:7a:f3:ea:4a:ff:12:09:e4:14:5c:
93:7a:dc:95:23:5d:32:ed:fc:8e:13:2d:ea:7b:37:
17:29:8d:12:68:a9:87:93:84:69:83:4e:7c:d6:de:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CB:BC:5C:AB:56:D5:DC:E6:73:63:D5:84:82:E7:04:4C:99:7F:42
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/Gcu8XKtW1dzmc2PVhILnBEyZf0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.152.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ec:0a:1d:cc:20:ac:7b:2b:03:30:36:7e:4e:24:e9:81:17:
62:db:be:4b:b8:21:47:20:18:25:82:87:99:f7:3d:4e:b6:7d:
2a:75:00:92:34:43:bb:3a:45:29:d3:1e:04:c2:20:9b:9c:88:
53:4f:89:33:2b:2b:21:25:08:86:ad:2e:95:d1:55:07:8c:0e:
ee:14:2e:9c:64:a3:f1:e5:30:49:7e:f9:47:b7:9e:20:01:e3:
66:78:49:d8:a4:56:16:ab:7b:a8:86:49:56:9a:ec:79:bd:67:
c4:a5:22:5c:a4:2f:3f:93:f3:2b:44:8c:6e:8d:ce:7b:c5:7b:
30:18:09:a1:07:40:8c:e4:3a:26:94:ab:1c:45:55:24:f4:b5:
76:9e:11:5d:b9:dd:d7:04:a8:6e:23:ba:cf:47:c4:ea:bf:42:
ed:e1:0d:01:92:c0:54:d9:19:bd:ef:09:70:85:6a:ca:56:e5:
fd:52:ed:34:7e:f8:43:f1:2b:2b:f2:2f:ae:2d:72:4f:80:54:
a0:6a:8f:4a:f3:fb:21:2c:8e:bf:62:f7:dc:e3:46:ab:c5:fd:
f2:7c:64:00:b3:01:40:52:b5:33:7f:32:66:f8:a7:e4:c3:cd:
b5:15:7c:03:b4:9c:83:67:49:56:c3:54:6b:56:36:bf:81:72:
02:e4:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org