Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/jTw8Id6IwJFugEsaNwPgwB9MrOg.roa
File: jTw8Id6IwJFugEsaNwPgwB9MrOg.roa (raw, json)
Hash identifier: +1oxAWecU0pGeRRnt8ed0TL3tBpe99zwxJb4xXH56ZQ=
Subject key identifier: 8D:3C:3C:21:DE:88:C0:91:6E:80:4B:1A:37:03:E0:C0:1F:4C:AC:E8
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 018984A75757D29863D2CE2073CBD6AFF2AD
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/jTw8Id6IwJFugEsaNwPgwB9MrOg.roa
Signing time: Sun 23 Jul 2023 21:28:26 +0000
ROA not before: Sun 23 Jul 2023 21:28:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.180.155.0/24 maxlen: 24
5.180.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 20:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:84:a7:57:57:d2:98:63:d2:ce:20:73:cb:d6:af:f2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jul 23 21:28:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d3c3c21de88c0916e804b1a3703e0c01f4cace8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:a8:ee:91:44:89:02:20:9f:4e:d4:3c:77:
ca:a6:a1:3b:4b:fa:56:58:fc:50:bb:cc:33:85:22:
43:02:ef:b3:44:bb:20:1f:8e:e9:87:c4:f5:92:57:
ca:f6:0a:f7:54:bd:b1:16:ca:cb:a7:34:f0:4e:3c:
59:e7:b8:b5:7d:14:29:59:b8:f3:e6:50:81:77:f6:
ea:08:99:03:26:3e:2d:ff:d2:8b:7a:4f:97:85:67:
f6:d6:a7:6b:38:56:09:e6:52:13:fb:a2:6a:21:6e:
a7:18:7d:87:5c:b3:44:b4:58:23:81:79:1f:a8:d3:
29:4f:be:6c:0d:ec:a6:92:0c:ea:86:be:e3:4b:d5:
9b:0e:2e:31:67:95:0f:b8:32:51:24:cc:d0:61:9e:
88:e8:2e:cf:6e:04:ea:0b:b6:f8:0a:34:46:14:5f:
95:fc:74:5b:e2:bb:47:7a:9c:f5:97:83:c6:d3:9f:
58:27:08:f4:1a:db:83:a6:c0:d9:df:8d:de:2d:7d:
2c:ed:5f:8e:47:c7:10:fa:21:35:d1:3b:5c:8b:ad:
5b:86:0d:e5:54:6a:52:c6:96:29:c1:2d:01:2e:79:
58:11:30:4c:6e:6b:75:22:51:a1:96:1c:a5:54:b3:
d8:39:90:6d:42:f4:7e:55:ab:af:a6:3c:f3:4a:dc:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3C:3C:21:DE:88:C0:91:6E:80:4B:1A:37:03:E0:C0:1F:4C:AC:E8
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/jTw8Id6IwJFugEsaNwPgwB9MrOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.153.0/24
5.180.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c3:89:8f:36:3c:d3:63:6b:9e:4c:c5:b3:11:66:13:d5:15:
c4:6f:f6:b2:3d:5c:d4:cf:f2:4e:cf:7a:c9:9b:f0:96:e8:24:
85:aa:d1:b8:db:97:cf:f8:e0:15:a2:3e:89:51:13:c8:2c:8e:
ac:0c:26:bb:fb:ae:72:8a:bd:e9:08:b4:ef:71:9d:47:2e:63:
87:9f:c0:82:d2:2f:48:54:b7:2e:16:da:7c:a0:7a:27:54:56:
2c:0a:99:43:4a:16:6b:86:b6:29:28:35:c5:5a:2c:bd:da:fb:
09:0a:ee:e7:ca:c4:89:af:73:e7:b8:8d:21:7e:63:88:3e:fa:
17:3b:b9:46:c8:45:49:cc:7e:7d:f9:c6:94:de:10:35:03:9d:
cc:e7:4f:13:89:d6:da:fd:8d:89:76:c8:a7:c3:e6:12:74:78:
58:0c:96:38:01:2a:61:7b:a0:a6:70:07:40:40:34:7b:fa:bc:
d5:39:32:a5:ce:b3:b1:fb:55:cb:a3:46:8f:c8:1f:d0:cd:76:
c8:09:c1:57:54:27:34:c1:a3:90:72:72:c3:27:c6:22:23:e5:
b5:57:86:ab:a1:1b:4f:e7:b7:39:8c:fd:26:af:65:c5:12:84:
4f:d7:17:ac:ce:2d:a4:42:c5:84:ff:cf:8c:0a:c2:07:b2:9f:
eb:45:d1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org