Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/S7tAHT1_OdOfKOvarV3lOZQHYgg.roa
File: S7tAHT1_OdOfKOvarV3lOZQHYgg.roa (raw, json)
Hash identifier: 8CQhIec72Ay+d0Iw6YagP0w7Qo1WLHC4X18lVHQho0U=
Subject key identifier: 4B:BB:40:1D:3D:7F:39:D3:9F:28:EB:DA:AD:5D:E5:39:94:07:62:08
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 01856FD537896FFD93822631FCA8E6FECA6F
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/S7tAHT1_OdOfKOvarV3lOZQHYgg.roa
Signing time: Mon 02 Jan 2023 00:15:22 +0000
ROA not before: Mon 02 Jan 2023 00:15:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206459
IP address blocks: 5.181.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:37:89:6f:fd:93:82:26:31:fc:a8:e6:fe:ca:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Jan 2 00:15:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bbb401d3d7f39d39f28ebdaad5de53994076208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:d2:e7:de:94:df:54:02:1d:84:09:6c:0c:
58:a7:34:b2:f6:5d:56:cf:53:b3:a6:ec:c4:51:e8:
e2:e6:4d:13:3e:dc:9f:1c:fe:59:b2:20:25:ee:14:
e4:00:db:23:1d:92:81:c5:d6:03:24:28:c1:14:da:
78:23:79:2e:de:df:b7:b4:6c:ef:08:d6:de:73:fc:
6a:c1:43:bb:0a:b8:bb:58:ba:be:fb:63:90:fd:a7:
e0:ed:46:f1:ff:f4:ed:58:17:15:51:bb:2d:6c:e4:
5f:e9:0e:c7:b0:e3:75:e0:b2:61:fc:fb:70:f5:81:
98:e1:76:00:b7:f9:24:4a:71:f3:a2:9d:a4:b9:2f:
af:3a:d2:3d:8a:36:58:33:aa:56:46:d2:38:db:24:
69:5f:73:c3:9a:a3:5c:6c:b7:92:ff:78:0c:63:ac:
ec:f8:ac:b2:7e:a5:07:93:c4:40:40:e8:8e:be:c2:
ec:93:69:ae:2f:1f:29:99:4d:d6:82:1c:4b:da:09:
38:26:b7:3b:13:21:fb:e0:f4:bb:15:e0:79:b7:3c:
c2:64:75:2a:0d:92:ee:2b:75:4d:a6:34:b2:65:b9:
18:10:af:85:40:35:72:18:78:e2:42:8a:0d:c9:89:
f2:31:ad:79:1a:b0:34:04:29:19:fd:9c:7e:40:ad:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BB:40:1D:3D:7F:39:D3:9F:28:EB:DA:AD:5D:E5:39:94:07:62:08
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/S7tAHT1_OdOfKOvarV3lOZQHYgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.160.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a5:d2:d4:12:3f:a9:29:f4:9a:32:cf:63:df:27:c8:28:31:
21:f2:1e:1e:14:4c:e4:ba:a5:41:f4:9f:22:91:50:a2:fb:ea:
38:94:4b:02:e6:4b:39:71:94:e4:aa:3f:31:0f:e0:a7:9c:ac:
56:26:41:01:56:9c:3f:f8:74:0d:f3:95:c5:4d:04:2a:fe:b4:
a2:12:e1:2b:95:6c:bc:75:9c:26:fe:ec:b0:9d:d9:79:11:27:
de:e7:44:9d:fd:3a:cf:48:6d:c2:6c:59:8f:38:85:88:63:38:
de:20:5f:86:6d:b7:b4:c5:d7:d0:1e:56:8f:9a:29:54:1d:ed:
c1:21:c7:f6:50:e3:70:b4:3a:b9:8c:a6:ef:a6:56:d1:29:5f:
21:6a:08:e1:75:7a:2b:d3:1f:30:09:b4:54:0e:d7:cb:91:d3:
42:78:b2:11:2d:02:93:6d:f4:cd:e9:d8:05:1b:88:86:9a:09:
c0:8e:71:56:2c:7f:25:39:f2:10:60:ae:26:2e:ec:cb:a5:22:
77:51:c9:e0:1c:04:0f:31:1b:9e:c9:c1:2f:37:00:9f:6f:15:
86:a5:00:49:71:92:dc:75:ab:d8:13:80:3d:7e:0c:e1:13:fa:
64:63:fb:b5:8a:10:64:96:f8:70:8e:2b:f2:60:82:e9:40:16:
df:c7:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:24 2024 by rpki-client on console-fra.rpki-client.org