Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/RGoelEOs59Fu7YUFr7eD7CIV_Ps.roa
File: RGoelEOs59Fu7YUFr7eD7CIV_Ps.roa (raw, json)
Hash identifier: T9okB/jmZcUqlO90J34TH/AUGty0iNW57i8uGwjPCAU=
Subject key identifier: 44:6A:1E:94:43:AC:E7:D1:6E:ED:85:05:AF:B7:83:EC:22:15:FC:FB
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 018DF495B640526E79FF018674FC67FCCE34
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/RGoelEOs59Fu7YUFr7eD7CIV_Ps.roa
Signing time: Thu 29 Feb 2024 11:17:48 +0000
ROA not before: Thu 29 Feb 2024 11:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149020
IP address blocks: 5.180.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 13:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:95:b6:40:52:6e:79:ff:01:86:74:fc:67:fc:ce:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Feb 29 11:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=446a1e9443ace7d16eed8505afb783ec2215fcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dd:73:d9:27:60:1b:7a:01:4e:49:16:ee:2b:
cd:a5:20:13:6f:4a:9c:a0:78:3d:af:b0:f5:89:61:
a0:27:a6:44:74:2b:b0:eb:b4:c7:1b:58:16:02:e0:
0c:82:b6:19:7e:53:53:e6:81:1e:f3:64:e0:df:fe:
d4:bb:b3:56:81:15:9c:ec:b7:8f:b8:75:32:3a:6f:
84:1b:07:f1:3e:43:16:82:fc:2e:eb:67:ad:37:eb:
9e:58:61:22:45:62:fc:45:69:67:a5:24:b6:d4:46:
6f:b5:78:e0:ce:df:e9:19:e4:98:ba:4d:da:2f:d9:
4c:d7:bb:e1:4c:4d:d5:15:ac:30:0e:0b:35:26:46:
d6:87:59:66:31:d4:ff:6a:37:3c:30:0a:06:46:f7:
07:af:ab:13:47:db:77:bc:a3:57:3e:fa:22:3e:e3:
32:37:0c:0c:d5:2e:de:e0:a5:ba:c1:2f:ca:86:cc:
6c:59:da:44:85:74:b5:fa:b4:ac:5f:c0:5e:61:1a:
95:1f:9c:45:20:46:12:f5:cc:79:e6:50:e4:10:cd:
15:bf:c9:55:a4:4e:73:ca:ac:96:a3:b6:4c:01:34:
1d:6f:0c:c9:3b:a9:8d:86:ac:a3:41:b3:01:b5:ed:
dd:43:51:9d:a7:7a:65:60:c8:2b:79:0b:c3:42:b2:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:1E:94:43:AC:E7:D1:6E:ED:85:05:AF:B7:83:EC:22:15:FC:FB
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/RGoelEOs59Fu7YUFr7eD7CIV_Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.153.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:dd:68:4a:ae:ca:0d:67:9d:1d:af:74:0a:5e:0a:6a:2f:51:
80:15:e8:29:a1:9a:30:4b:ee:8e:3f:58:ce:c3:0c:95:e3:09:
34:32:68:a8:dc:1a:3c:c6:be:10:cf:8b:d3:2c:24:61:99:7c:
a1:98:b2:78:48:14:47:8d:d0:ff:b6:11:96:d2:bf:16:84:e9:
b5:10:c7:b4:dd:22:96:0e:87:dd:55:10:1e:3f:11:15:35:1b:
73:f8:45:b6:a6:9e:31:3e:c7:b0:03:59:6e:5f:64:bf:b7:1e:
01:d2:95:02:10:e9:10:30:45:38:c6:89:ec:ec:96:41:02:f2:
c9:d3:2d:c9:79:4f:ef:2b:b3:07:76:d4:c1:22:b5:b8:c1:a8:
48:27:da:53:73:c6:df:9d:51:01:7d:a9:ba:2c:68:0a:84:db:
0f:4a:ae:e2:69:00:72:c2:2d:11:f1:f8:44:9a:ce:e5:24:49:
e8:77:49:58:5d:33:bd:63:e6:77:df:8d:df:ee:27:be:a2:18:
86:cb:1c:e4:fb:5c:ed:0e:6e:35:4c:2a:55:67:63:37:8b:2b:
fd:75:2a:8e:15:1f:04:1b:e2:ed:88:69:a7:de:c7:f0:ca:65:
09:d1:11:38:d2:8e:ae:e3:10:57:13:04:39:99:d8:32:2b:e0:
16:82:66:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:15 2024 by rpki-client on console-fra.rpki-client.org