Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/g34nmrFkmXXnaogliHYo4xZa4zg.roa
File: g34nmrFkmXXnaogliHYo4xZa4zg.roa (raw, json)
Hash identifier: Bjt28cq6KemkXx2E3s9WGXkYsVUgTR4TrZalef4YV+0=
Subject key identifier: 83:7E:27:9A:B1:64:99:75:E7:6A:88:25:88:76:28:E3:16:5A:E3:38
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 01922021088EF29FC4F039E290B03E7BEA02
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/g34nmrFkmXXnaogliHYo4xZa4zg.roa
Signing time: Mon 23 Sep 2024 18:24:48 +0000
ROA not before: Mon 23 Sep 2024 18:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215238
IP address blocks: 5.180.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 18:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:20:21:08:8e:f2:9f:c4:f0:39:e2:90:b0:3e:7b:ea:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Sep 23 18:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=837e279ab1649975e76a8825887628e3165ae338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:9d:02:d0:a4:ca:32:b8:65:1d:47:6c:fe:
69:f1:c5:61:94:94:28:47:31:4b:68:ca:9e:2e:21:
c7:6e:16:0b:72:d6:f9:c6:b2:a6:2c:d5:23:50:1b:
fc:93:df:4f:e8:a3:c3:c8:d8:75:4b:6d:b4:fe:6c:
19:04:a8:cb:6b:ca:fa:46:42:ef:92:f1:cc:73:84:
f9:ee:90:5f:b1:dd:0a:74:08:1d:6a:86:12:f9:d0:
24:79:e2:32:c7:1f:f1:df:b3:35:c7:f9:4a:79:35:
bb:44:47:a4:45:2f:a0:b4:af:65:b0:15:fa:d6:21:
4e:bc:ae:e4:9f:1b:1c:47:1c:db:5b:b3:60:a8:d2:
76:4c:ba:5d:48:68:6d:a7:17:34:44:a7:e7:d6:13:
35:e2:b5:28:6f:ad:47:dc:16:f2:8d:1e:5d:4f:bb:
6a:7c:b8:2d:2f:77:ec:f4:2e:24:4f:2a:57:99:8c:
fe:c5:87:a4:33:7a:62:9d:85:81:e4:53:51:2b:88:
65:22:40:5c:f9:1a:8c:17:4b:f4:66:d6:38:06:f9:
80:e1:0e:8a:69:36:7e:84:9f:ae:30:fe:f0:2a:64:
27:b9:da:02:fa:51:d7:6d:b6:68:ec:51:f1:ee:45:
8a:df:b0:28:19:83:21:ff:5e:87:b2:8c:5c:8b:85:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7E:27:9A:B1:64:99:75:E7:6A:88:25:88:76:28:E3:16:5A:E3:38
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/g34nmrFkmXXnaogliHYo4xZa4zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.154.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2f:09:b4:53:f6:a2:5d:d1:23:5d:04:35:f6:0e:47:42:12:
40:8a:ee:69:ca:80:d4:6c:36:cf:98:2c:06:60:32:29:1a:5b:
d6:0e:cb:f1:bb:50:49:09:e4:f7:0e:74:3c:04:5e:19:ff:23:
a3:14:a5:15:47:e6:f6:a8:db:54:04:c9:72:74:c1:5d:03:4b:
16:71:67:5c:d6:76:42:d5:91:1f:ca:1e:08:82:94:39:46:43:
90:bc:74:97:fd:cd:b7:3d:af:b8:a5:eb:97:63:86:6e:4a:79:
a7:aa:df:2a:7f:01:19:3b:7d:e1:37:4f:b0:55:5d:9e:9a:be:
d6:d7:6e:a3:a5:93:40:57:fb:a1:d7:80:54:d3:2f:b7:d9:d7:
80:d8:a0:25:f0:ec:fa:e3:f4:7a:35:6c:a3:98:26:b4:2d:07:
21:78:e4:07:96:de:77:af:16:f6:96:3c:85:55:77:e5:0c:c7:
3a:4c:ae:36:e0:e7:40:7d:ec:a6:a0:f9:e9:69:8d:eb:fa:3b:
70:28:ae:ed:76:d5:62:50:8e:30:4d:d9:6a:6a:70:19:3d:da:
9e:5b:61:40:65:4b:94:91:98:b4:2c:72:c4:c2:ab:1a:c2:ff:
74:3f:e0:46:7d:1e:13:2c:83:7e:c4:40:ac:0d:4f:f6:17:0e:
c6:c3:94:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 22:04:18 2024 by rpki-client on console-ams.rpki-client.org