Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/F3m34pvpa4vXulXqS1ZPTxH1DK0.roa
File: F3m34pvpa4vXulXqS1ZPTxH1DK0.roa (raw, json)
Hash identifier: a6eKOkC7BgNiPJ/mEwZqYAdHYvsi3zXMgu+O+yzxqZ4=
Subject key identifier: 17:79:B7:E2:9B:E9:6B:8B:D7:BA:55:EA:4B:56:4F:4F:11:F5:0C:AD
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42D084C733D7C2621A89DD434A3FEC
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/F3m34pvpa4vXulXqS1ZPTxH1DK0.roa
Signing time: Sun 01 Jan 2023 21:35:27 +0000
ROA not before: Sun 01 Jan 2023 21:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29577
IP address blocks: 5.160.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d0:84:c7:33:d7:c2:62:1a:89:dd:43:4a:3f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1779b7e29be96b8bd7ba55ea4b564f4f11f50cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:0f:40:53:87:4a:f4:94:5a:cf:b3:4e:3e:
65:93:e8:5e:b5:47:ce:18:3b:0f:1c:64:15:d3:ed:
31:90:cd:20:15:be:8c:4f:01:c4:2b:99:9a:be:55:
1e:8b:98:f8:ee:f2:56:7c:db:0d:c4:ce:f5:13:c3:
07:7d:c3:1c:84:b2:6a:25:df:57:3f:ef:1c:b0:a8:
dc:ce:53:b2:4d:4f:2c:d4:db:e8:a6:ea:ae:8d:01:
24:c3:9e:46:52:31:77:1e:43:1d:42:80:96:a5:b2:
5d:1a:c5:c5:50:0e:d9:bd:3e:95:2b:a6:26:9d:9a:
b8:77:53:ee:60:99:fd:b8:4c:5f:fa:ba:d1:39:98:
0f:cd:a9:ee:a1:ab:23:80:fd:34:29:9d:fc:28:bb:
b1:cd:ab:5a:33:be:8c:38:5d:f8:56:27:de:fe:27:
36:19:34:5b:ad:40:6f:60:bc:07:c8:05:5b:0a:ee:
37:77:f9:a1:0a:65:42:22:b1:64:6c:58:12:a2:0b:
e3:bc:b7:cd:11:0c:0d:8e:5b:7d:63:9c:eb:d6:6c:
19:a1:4d:d9:96:31:37:b8:1e:6b:c8:16:ec:45:9f:
2e:ed:c8:05:83:df:e8:48:c7:03:11:6d:4b:12:54:
54:ac:a1:7e:8a:f1:74:a2:41:3c:7b:59:c5:2a:d3:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:B7:E2:9B:E9:6B:8B:D7:BA:55:EA:4B:56:4F:4F:11:F5:0C:AD
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/F3m34pvpa4vXulXqS1ZPTxH1DK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.16.0/22
Signature Algorithm: sha256WithRSAEncryption
92:45:71:87:35:9e:02:1a:b8:9c:70:27:52:40:9d:2a:28:d7:
d9:94:21:7c:23:69:89:d0:6c:a5:7b:1e:a0:76:6d:e3:f8:c9:
ed:0d:6d:06:70:02:7c:f2:11:d8:92:80:37:09:67:06:6f:41:
19:38:ad:0b:c0:d4:79:35:9b:1a:03:c5:72:0e:17:90:16:ff:
fa:2f:ca:94:0f:02:31:23:96:d7:93:e8:df:e1:a2:49:b2:2c:
fc:3f:26:4a:c0:06:c2:88:12:85:2e:3d:ee:a2:b6:ce:fc:7e:
82:0a:0f:57:79:d7:58:64:df:a4:64:83:f1:34:c7:12:81:8c:
a3:ae:bb:ad:45:f7:1a:fb:5e:86:b5:7c:6f:12:0b:75:aa:b8:
2c:ed:9e:fc:60:38:5c:90:d0:18:b2:c8:3e:d2:f6:b1:2e:86:
93:e9:34:8d:77:4f:23:1a:c2:04:dd:ab:09:a6:4e:e7:e7:ab:
74:12:41:09:3c:da:a6:32:4a:72:8e:67:71:c2:ab:12:cb:3b:
10:27:a3:81:43:c4:7b:75:b4:40:66:c5:59:75:22:1d:e8:6a:
d3:18:e7:2c:10:07:e7:c4:bf:2c:7b:2b:df:6a:ea:16:e6:e9:
71:77:51:ee:b2:77:96:5a:94:6f:59:e3:7a:07:14:a5:75:26:
b1:08:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org