Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/DsuTqaPaZ37q-Ptv02eR5Q4EetI.roa
File: DsuTqaPaZ37q-Ptv02eR5Q4EetI.roa (raw, json)
Hash identifier: kosuoipW6IkrzR/JJjqNbR50GIhigZFyR/00WzlNYc4=
Subject key identifier: 0E:CB:93:A9:A3:DA:67:7E:EA:F8:FB:6F:D3:67:91:E5:0E:04:7A:D2
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492DA7C4EA66584BBF05ABE54331635
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/DsuTqaPaZ37q-Ptv02eR5Q4EetI.roa
Signing time: Mon 01 Jan 2024 10:30:07 +0000
ROA not before: Mon 01 Jan 2024 10:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51235
IP address blocks: 92.242.208.0/24 maxlen: 24
5.160.180.0/22 maxlen: 22
5.160.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 May 2024 10:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:da:7c:4e:a6:65:84:bb:f0:5a:be:54:33:16:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ecb93a9a3da677eeaf8fb6fd36791e50e047ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:60:43:3d:34:5c:50:4f:97:2b:22:5c:13:
fa:cb:84:5a:6b:aa:c8:39:24:31:72:17:46:a5:a4:
98:19:da:4d:86:49:0d:e5:10:8a:b8:29:c9:7c:54:
9d:2f:42:38:c1:fc:bc:a8:6d:35:68:c0:0a:f9:cc:
3b:c7:18:a2:c4:91:9b:14:47:46:17:c5:04:3b:78:
88:0f:ce:45:cc:56:f4:cf:a0:ae:99:a5:7f:af:fe:
fb:b4:9f:b7:f8:e1:ff:0e:8a:86:d6:f5:ce:c1:22:
8b:a5:09:5a:b2:f8:a6:cb:40:91:8c:04:58:85:5f:
f6:47:ec:6a:44:43:fb:96:88:e8:2e:a0:2a:a1:28:
be:42:11:06:3e:1b:64:50:1a:d9:3a:7f:e0:b4:9f:
92:6d:20:f2:ca:28:df:68:fd:11:cf:b0:ae:40:a8:
77:a9:64:e1:fb:9a:ff:4b:05:77:e9:0b:a2:ba:45:
ee:b0:81:6f:1d:43:fe:5b:15:7e:90:22:ac:be:8e:
cd:9c:ff:e1:e9:25:ff:b2:cc:db:22:e2:16:5e:e3:
c2:ac:80:84:9b:c1:12:f7:6e:43:60:5a:26:87:97:
d0:11:72:3f:f9:22:96:f0:54:05:3d:b2:4b:cc:10:
6a:82:07:09:11:6e:b1:bf:8e:09:33:f4:93:f5:a5:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CB:93:A9:A3:DA:67:7E:EA:F8:FB:6F:D3:67:91:E5:0E:04:7A:D2
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/DsuTqaPaZ37q-Ptv02eR5Q4EetI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.128.0/24
5.160.180.0/22
92.242.208.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f4:b8:00:ec:60:c4:54:5d:70:e9:80:ca:e0:40:c2:7f:9e:
4f:af:3f:da:cf:a9:51:eb:f2:ad:37:b4:0a:1c:03:b9:a6:0a:
45:e5:34:75:ed:6e:2d:cc:bd:96:7c:b7:c5:be:06:c1:c7:9d:
f0:30:73:19:97:94:76:2c:02:56:d0:cd:90:3e:a2:e5:bb:01:
62:e0:97:4e:84:74:ad:62:b8:cd:bf:9f:b1:e3:4c:1f:15:44:
bf:6e:08:cb:6a:1a:f3:7f:a5:ad:44:d7:e2:5c:79:c1:2d:2e:
2f:f7:67:59:96:39:8d:2a:66:ad:d2:3f:1c:45:6a:70:33:20:
f4:51:a0:0e:67:f8:d0:38:90:79:a9:97:56:e3:6f:d7:a9:14:
14:11:5b:8c:35:ad:6d:a0:bf:1b:7b:57:80:eb:23:8f:ef:00:
6b:0e:01:2f:1c:6f:d3:f1:82:ca:ef:5b:a7:86:b4:37:39:00:
1f:29:09:85:d6:6d:3b:53:99:db:d8:26:26:85:c1:f8:d2:54:
02:3b:ad:96:84:f4:1f:73:18:80:7a:57:e1:a4:ce:50:80:ad:
b2:e3:85:8e:c8:54:0b:a6:db:8e:a3:65:02:75:f1:44:2f:90:
b1:e9:26:19:c2:bd:74:02:8c:d4:cb:f7:d3:1c:3b:25:fb:eb:
81:b0:ff:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:20 2024 by rpki-client on console-ams.rpki-client.org