Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/9BOA_Zr5EK5lsY4_rRDd5u9-3F8.roa
File: 9BOA_Zr5EK5lsY4_rRDd5u9-3F8.roa (raw, json)
Hash identifier: jH4CKJFLiDbYtdNhc6TnkA2ud9DAbIDIXajpsp3HctE=
Subject key identifier: F4:13:80:FD:9A:F9:10:AE:65:B1:8E:3F:AD:10:DD:E6:EF:7E:DC:5F
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42D631923124C3F75502D62303610C
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/9BOA_Zr5EK5lsY4_rRDd5u9-3F8.roa
Signing time: Sun 01 Jan 2023 21:35:29 +0000
ROA not before: Sun 01 Jan 2023 21:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47990
IP address blocks: 5.160.196.0/23 maxlen: 23
5.160.240.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d6:31:92:31:24:c3:f7:55:02:d6:23:03:61:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f41380fd9af910ae65b18e3fad10dde6ef7edc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:be:6a:29:a6:c5:03:9e:f4:d8:a0:a9:7d:
e8:90:80:3b:33:f3:86:fb:17:33:73:03:21:83:78:
b3:5b:95:45:5b:62:3b:5e:2b:fb:fc:9c:7d:7c:2d:
8d:c8:3a:38:45:2d:e5:30:8c:b6:a8:60:10:b5:c8:
c4:ca:36:7c:4a:81:ec:16:96:b6:31:4c:4f:2a:c0:
0a:56:e9:40:67:c7:8b:2c:8d:65:29:a2:25:b5:f5:
5f:ec:89:2e:0d:15:51:ee:32:b9:cc:75:81:ff:f4:
85:39:08:b9:a8:bb:86:5a:73:ea:7d:bf:ba:a9:c9:
75:6f:5f:eb:df:a9:ad:10:a7:38:5e:3a:83:b2:df:
3f:cc:30:2b:c6:09:66:a5:f0:31:af:74:08:9d:bd:
a0:8b:3e:bb:96:fd:03:46:5a:53:3d:06:79:71:87:
55:42:00:c6:f4:74:cf:bf:ee:5b:cc:26:7b:98:6d:
bd:70:39:72:36:8f:68:9f:86:f2:50:8a:eb:01:07:
0a:80:df:c1:1e:a0:7a:06:fe:70:0b:ac:2f:03:62:
ef:ba:b4:44:62:98:7c:fd:95:98:e2:00:1b:6f:b5:
f6:d5:25:97:dc:81:ed:e6:82:83:d6:1d:ee:7c:39:
b6:4c:2d:39:5c:34:a9:78:88:c2:7e:e3:ec:bf:72:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:13:80:FD:9A:F9:10:AE:65:B1:8E:3F:AD:10:DD:E6:EF:7E:DC:5F
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/9BOA_Zr5EK5lsY4_rRDd5u9-3F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.196.0/23
5.160.240.0/23
Signature Algorithm: sha256WithRSAEncryption
11:02:d0:19:90:c7:bc:99:01:f0:e2:fe:8f:c3:9a:fa:f9:0a:
a6:77:db:bd:35:ac:91:49:09:53:ed:da:7c:c7:a3:37:9a:43:
49:b2:09:3f:fc:1d:cc:16:c9:1c:b3:ae:6d:d7:4d:73:32:c6:
94:a6:a2:02:83:25:e3:59:84:be:25:98:13:25:43:48:f3:83:
4a:49:f0:2a:0d:8d:36:e7:a9:f1:5c:93:75:58:f9:d2:1b:2e:
f5:ba:cd:b9:ef:e5:49:03:90:f3:f4:e0:78:ed:8f:d7:10:79:
a5:bd:ec:84:5f:b8:5f:ce:81:3d:d9:e0:02:45:96:f4:f4:11:
22:88:f2:d1:b3:68:95:d7:f9:25:ee:83:88:a0:20:14:a1:3b:
65:7b:4c:63:5d:78:dd:d6:da:df:96:67:67:11:b1:b2:08:bb:
a0:f7:25:22:e6:93:22:7a:2a:2f:61:14:3b:7d:f3:60:09:44:
c7:83:6f:f7:1b:ac:29:18:24:04:68:fd:95:d9:67:dd:c9:b7:
67:0b:b4:8d:c7:8a:36:0e:6d:0d:53:09:80:ee:2e:8d:74:64:
7a:1f:5d:29:fe:b2:c8:e5:02:03:89:80:45:6b:02:d6:11:62:
33:d5:cb:61:4c:7b:2c:ef:11:e5:91:bd:eb:98:5f:e3:4c:31:
14:d1:3f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org