Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/X5Slll1UDuUMJadKXisJ5ebiFnc.roa
File: X5Slll1UDuUMJadKXisJ5ebiFnc.roa (raw, json)
Hash identifier: V8DEJpeGZso05Nc6mnXztawevByIgH2Ev+NYBOdH008=
Subject key identifier: 5F:94:A5:96:5D:54:0E:E5:0C:25:A7:4A:5E:2B:09:E5:E6:E2:16:77
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 018910F6D1482AC9DB259D2ECB2BFD7CD800
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/X5Slll1UDuUMJadKXisJ5ebiFnc.roa
Signing time: Sat 01 Jul 2023 10:19:18 +0000
ROA not before: Sat 01 Jul 2023 10:19:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Jul 2023 21:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:10:f6:d1:48:2a:c9:db:25:9d:2e:cb:2b:fd:7c:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jul 1 10:19:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f94a5965d540ee50c25a74a5e2b09e5e6e21677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:5e:82:6e:4b:40:5a:2a:82:a2:29:ad:23:
3c:36:62:23:69:8a:77:c7:af:16:c7:ce:ba:88:6a:
93:d7:40:d2:50:0d:3f:35:b5:80:6a:ce:35:b2:cf:
70:8b:c4:10:2e:8e:70:15:73:aa:d3:1a:59:37:c6:
ca:4d:69:8f:c4:9c:f1:ad:b2:c3:dc:fb:45:f3:4a:
b4:3b:47:d8:d8:38:00:c8:7a:b8:f8:0c:93:9e:ab:
f4:f0:01:d3:5d:d2:69:a0:a6:7a:4f:d8:e9:ff:1d:
46:91:47:a2:68:87:8b:99:fa:59:9a:8e:db:96:fe:
b9:94:72:bd:70:40:81:8a:a4:1c:a7:bf:7e:1c:70:
db:a7:d3:e0:7f:74:78:ed:01:7f:77:de:ab:58:79:
2d:8e:96:8a:1c:ea:47:6f:e8:6c:d7:05:5c:bf:d7:
0e:f1:3d:c9:8c:38:fb:72:ba:5b:3c:93:40:ee:21:
a1:84:45:b2:d8:23:ce:00:95:78:ff:fd:8c:37:3b:
f3:c7:17:15:e1:87:b5:9b:23:ed:53:a9:e4:39:8e:
62:e4:35:b4:a1:18:de:b3:25:71:88:e1:51:8d:a3:
8c:7a:bc:48:97:26:5e:74:6e:83:ae:8e:ff:1b:fc:
9a:ef:a5:ec:19:73:58:09:d9:7b:58:bc:f8:83:86:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:A5:96:5D:54:0E:E5:0C:25:A7:4A:5E:2B:09:E5:E6:E2:16:77
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/X5Slll1UDuUMJadKXisJ5ebiFnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.155.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ee:e5:a7:7c:d7:83:25:c0:d9:9b:61:67:a3:17:fb:e8:1f:
e8:b1:5e:a9:d7:ec:e2:cf:52:b3:17:c4:19:05:71:7e:b7:c3:
02:6b:43:33:27:c0:98:ac:31:79:24:c9:63:d6:2c:c5:cf:ce:
b1:6a:69:b4:8c:3f:29:91:3f:eb:59:01:da:c8:30:c6:f3:78:
b2:99:e7:6e:23:0c:71:d4:b5:b9:9c:bf:5f:e7:ef:e5:ca:ff:
32:17:e9:58:dd:18:94:78:df:d9:7a:c4:76:3c:c5:7c:20:d5:
b7:e5:33:d3:9f:de:c4:5d:70:6f:74:fa:a6:0c:0b:e1:31:b7:
07:da:3c:78:45:57:b3:c5:2f:c3:cd:f9:d1:62:4b:8b:5b:f4:
98:5f:10:dd:f5:07:44:ca:c8:18:6c:12:6f:8a:fd:11:1f:69:
58:42:a4:5b:dd:26:44:f8:f1:56:39:79:a2:54:b4:40:4e:86:
41:4c:0f:c6:b2:d4:ea:c5:51:3c:cb:a3:38:67:6e:b5:3d:b4:
4f:2d:78:18:65:6e:2d:31:7e:71:b3:b4:01:99:f2:26:3b:45:
a3:b8:75:5c:fc:0f:1e:cc:86:93:04:3b:d4:da:8b:f5:ff:ae:
45:50:25:26:de:66:8d:ed:da:50:9c:df:fb:aa:f1:47:c4:f2:
86:b4:6e:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkQ9tFIKsnbJZ0uyyv9fNgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjMwNzAxMTAxOTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Zjk0YTU5NjVkNTQwZWU1MGMyNWE3NGE1ZTJiMDllNWU2ZTIxNjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdRegm5LQFoqgqIprSM8NmIjaYp3
x68Wx866iGqT10DSUA0/NbWAas41ss9wi8QQLo5wFXOq0xpZN8bKTWmPxJzxrbLD
3PtF80q0O0fY2DgAyHq4+AyTnqv08AHTXdJpoKZ6T9jp/x1GkUeiaIeLmfpZmo7b
lv65lHK9cECBiqQcp79+HHDbp9Pgf3R47QF/d96rWHktjpaKHOpHb+hs1wVcv9cO
8T3JjDj7crpbPJNA7iGhhEWy2CPOAJV4//2MNzvzxxcV4Ye1myPtU6nkOY5i5DW0
oRjesyVxiOFRjaOMerxIlyZedG6Dro7/G/ya76XsGXNYCdl7WLz4g4bhEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF+UpZZdVA7lDCWnSl4rCeXm4hZ3MB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvWDVTbGxsMVVEdVVNSmFkS1hpc0o1ZWJpRm5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbSbMA0G
CSqGSIb3DQEBCwUAA4IBAQBG7uWnfNeDJcDZm2Fnoxf76B/osV6p1+ziz1KzF8QZ
BXF+t8MCa0MzJ8CYrDF5JMlj1izFz86xamm0jD8pkT/rWQHayDDG83iymeduIwxx
1LW5nL9f5+/lyv8yF+lY3RiUeN/ZesR2PMV8INW35TPTn97EXXBvdPqmDAvhMbcH
2jx4RVezxS/DzfnRYkuLW/SYXxDd9QdEysgYbBJviv0RH2lYQqRb3SZE+PFWOXmi
VLRAToZBTA/GstTqxVE8y6M4Z261PbRPLXgYZW4tMX5xs7QBmfImO0WjuHVc/A8e
zIaTBDvU2ov1/65FUCUm3maN7dpQnN/7qvFHxPKGtG78
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org