Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/5xXxGE-rn--tGA_eOv6zyAYeBRI.roa
File: 5xXxGE-rn--tGA_eOv6zyAYeBRI.roa (raw, json)
Hash identifier: kr6+aTn0e0A0HA6bSu3jJTxHjq4ItwYiATDb3icIu/k=
Subject key identifier: E7:15:F1:18:4F:AB:9F:EF:AD:18:0F:DE:3A:FE:B3:C8:06:1E:05:12
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42EC6BC623D6F20C4764C673BA61DB
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/5xXxGE-rn--tGA_eOv6zyAYeBRI.roa
Signing time: Sun 01 Jan 2023 21:35:34 +0000
ROA not before: Sun 01 Jan 2023 21:35:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202616
IP address blocks: 5.160.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ec:6b:c6:23:d6:f2:0c:47:64:c6:73:ba:61:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e715f1184fab9fefad180fde3afeb3c8061e0512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:32:81:3c:05:51:09:16:0a:62:be:f5:62:
e6:bc:72:28:3c:53:f2:7c:a3:5e:2e:c6:39:55:69:
9d:59:80:ef:8a:63:63:45:40:b5:48:54:8e:6b:5c:
3d:cd:9c:fc:35:6a:6c:0d:fa:8d:1d:87:a4:3b:f6:
57:5f:cb:4c:85:d6:77:36:eb:e7:43:91:e0:b1:c4:
14:12:d9:60:dc:54:7e:16:ce:75:6c:c7:2f:98:be:
d7:44:d6:d2:cb:77:0c:58:74:09:32:c9:42:9f:93:
cc:95:e5:89:e9:78:5f:b2:95:25:df:df:98:48:13:
d1:19:38:55:aa:d5:d9:fe:78:1b:03:45:b4:94:4c:
96:5b:76:ae:9c:da:b8:75:74:32:78:c1:22:34:72:
78:f0:7a:6c:42:52:b9:6e:3f:1f:a2:c9:57:93:67:
3d:64:62:76:4a:64:d4:f8:1c:a4:9b:6b:b6:0a:55:
43:03:58:36:f6:e2:f9:0a:a9:60:f5:90:e7:84:97:
e1:2f:1a:63:64:ec:03:c6:cf:4e:2f:a7:cc:4f:c8:
34:07:72:31:dd:2d:cf:08:31:d6:7f:4f:0c:ab:99:
5d:35:a4:59:79:8e:c4:98:02:5a:ac:15:09:0c:04:
db:d0:8f:5b:f6:d5:e6:69:94:b2:2c:4a:4a:9b:a1:
64:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:15:F1:18:4F:AB:9F:EF:AD:18:0F:DE:3A:FE:B3:C8:06:1E:05:12
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/5xXxGE-rn--tGA_eOv6zyAYeBRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.125.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b1:22:83:3a:80:b5:a7:a1:ac:2b:b9:65:53:75:e8:46:cd:
5f:2c:7f:fe:45:00:0d:fa:8d:56:e7:8a:da:83:af:b9:a6:0c:
e4:4d:de:6f:99:66:35:b5:42:7e:6a:0a:44:96:8c:90:1d:39:
57:bd:9e:19:d0:ba:73:80:bc:df:27:5a:45:3f:a5:95:d3:24:
fa:9b:40:5b:68:3b:2e:c1:14:81:77:a7:58:c3:ca:6e:48:13:
3b:e5:1b:76:61:85:08:fa:5f:31:8e:00:9d:c6:49:75:30:db:
82:96:8c:86:14:2d:ba:22:a6:3c:7f:4f:28:e9:aa:77:63:bd:
28:23:8a:83:9d:ef:f1:36:cb:9a:17:55:fa:b3:35:f2:a5:85:
69:e9:1b:a4:60:e4:9a:33:05:2b:d7:b5:58:74:da:06:ee:8b:
e6:c6:1c:e5:e8:63:31:ba:c7:84:08:8f:60:07:1b:50:7b:58:
e8:7f:0f:1c:30:02:a1:35:c7:fa:6e:b2:fc:1e:f3:c7:40:ed:
e4:7b:b7:10:c7:82:8a:c4:1b:27:52:8e:b4:8d:3c:61:4e:20:
10:87:b0:46:2e:2c:be:17:43:6a:5f:36:34:88:ca:98:cd:b7:
92:23:90:4d:af:9d:6b:91:d4:2d:d4:a3:03:d7:74:9d:34:56:
30:f5:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org