Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/wRTbP_3mrSl5THy3zyI4MbnMhd4.roa
File: wRTbP_3mrSl5THy3zyI4MbnMhd4.roa (raw, json)
Hash identifier: uY2RECH+qaoGWSwb1mlkTzDV8oV7hPZqBp+9AVHRQFY=
Subject key identifier: C1:14:DB:3F:FD:E6:AD:29:79:4C:7C:B7:CF:22:38:31:B9:CC:85:DE
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 018570D51D4306E1E5CF9A58BDA41A016ECE
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/wRTbP_3mrSl5THy3zyI4MbnMhd4.roa
Signing time: Mon 02 Jan 2023 04:54:52 +0000
ROA not before: Mon 02 Jan 2023 04:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206610
IP address blocks: 5.180.164.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:1d:43:06:e1:e5:cf:9a:58:bd:a4:1a:01:6e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Jan 2 04:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c114db3ffde6ad29794c7cb7cf223831b9cc85de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:0e:43:56:23:2f:7e:f8:b7:e3:68:18:d8:
eb:1c:3c:6c:2e:59:55:bd:3d:a0:46:fc:fb:06:1a:
a2:6d:e2:db:74:17:7b:5d:d5:59:70:9b:a9:eb:5a:
c4:48:0d:1d:6e:23:44:df:5b:e4:55:94:90:d9:dd:
42:2f:c6:7a:54:2d:5c:39:c3:9b:af:99:2e:9b:0a:
ee:ad:28:c5:12:82:54:1e:99:4a:f4:4a:0b:9a:92:
74:5b:1a:ad:a4:81:f0:f8:06:e1:08:25:24:70:d3:
27:8f:06:f8:6d:b9:ad:4c:51:0d:72:dc:de:e5:29:
2a:58:37:ed:0f:b0:2c:d6:34:f5:63:a8:df:b7:2f:
1b:e8:37:ad:ae:75:a1:22:95:6e:f1:8c:55:9c:ff:
90:dc:98:ce:40:27:59:49:18:05:e8:a1:db:90:41:
25:18:45:8a:e7:23:07:67:51:4a:82:38:db:fc:f6:
ff:2c:17:88:90:0f:1c:a7:fd:af:1b:74:00:23:8a:
5c:c2:c9:85:76:35:1f:3c:a8:c8:a9:0e:0e:2f:59:
d3:0d:f1:a4:d7:db:67:c2:94:b6:69:64:e1:c5:12:
42:f9:ff:fe:cf:25:50:54:0d:de:a9:ff:fe:85:89:
12:75:3a:fd:b3:18:f4:1f:15:26:f4:4f:9f:41:38:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:14:DB:3F:FD:E6:AD:29:79:4C:7C:B7:CF:22:38:31:B9:CC:85:DE
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/wRTbP_3mrSl5THy3zyI4MbnMhd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.164.0/22
Signature Algorithm: sha256WithRSAEncryption
03:3c:a9:a7:cc:09:46:88:c8:83:c9:4a:17:5c:dc:15:d0:af:
ac:d4:5e:89:c8:a0:b5:56:c3:f1:72:c6:2d:01:09:23:a0:b5:
d0:06:ef:b4:73:40:d2:68:e1:e6:43:4e:c1:92:5a:75:d2:14:
53:02:33:10:62:1b:1f:00:18:3e:73:d1:30:52:49:19:65:48:
61:f2:b0:2d:f9:07:ce:66:26:2e:95:c4:f2:09:e6:7c:cf:04:
d6:ea:74:f0:2d:69:c4:3b:6e:79:a6:a9:6a:23:3d:7e:ea:e2:
93:5c:84:15:82:bd:f1:f9:11:52:31:81:53:20:84:54:32:fc:
b5:35:a6:a6:54:69:ff:64:f9:2e:91:b1:23:02:c0:07:9c:c8:
67:c9:12:2a:7e:5b:87:08:c0:23:b4:4c:54:a9:9c:57:33:6e:
bf:bc:1f:8e:54:96:53:90:08:73:ad:f0:9a:5c:09:72:1e:28:
7a:d3:c1:70:5f:86:6f:05:1f:c8:2d:10:7a:a3:98:e6:04:20:
dd:7e:96:3f:d5:3f:61:dc:ef:1d:9e:63:61:e3:3e:78:d4:88:
3f:a8:0c:24:0f:5e:05:ae:45:dc:8f:5a:c5:fb:16:97:d4:1e:
66:74:90:56:ca:10:0e:c4:0a:cf:9c:ad:2c:91:60:0a:8f:34:
63:3a:d0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:24 2024 by rpki-client on console-ams.rpki-client.org