Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/FDIhiUKCu0RWdMSncbms36goX-Y.roa
File: FDIhiUKCu0RWdMSncbms36goX-Y.roa (raw, json)
Hash identifier: Q/loAdGDUGFQibiG603o3BZ04+Jb/qh3/vpWbmWcr+0=
Subject key identifier: 14:32:21:89:42:82:BB:44:56:74:C4:A7:71:B9:AC:DF:A8:28:5F:E6
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42DDAC314036CC833F0238D0DA552B
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/FDIhiUKCu0RWdMSncbms36goX-Y.roa
Signing time: Sun 01 Jan 2023 21:35:30 +0000
ROA not before: Sun 01 Jan 2023 21:35:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51469
IP address blocks: 5.160.116.0/22 maxlen: 22
5.160.132.0/22 maxlen: 22
5.160.144.0/23 maxlen: 23
5.160.142.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:dd:ac:31:40:36:cc:83:3f:02:38:d0:da:55:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=143221894282bb445674c4a771b9acdfa8285fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:69:4d:53:5e:48:2f:ea:fc:81:8a:c5:44:
f0:db:1f:bf:bb:16:69:92:15:0b:fa:02:b6:01:c9:
5d:0a:be:2e:53:8d:5a:3c:43:ec:cc:8c:9a:98:a5:
ba:e3:ec:02:d6:08:5f:2e:4d:c8:b8:96:c3:51:5a:
d2:0c:fe:87:8b:a7:8a:08:e8:c6:56:54:91:29:12:
c9:86:ff:71:ac:5e:ec:53:04:df:41:1e:48:2f:f2:
ef:8b:45:4e:66:3d:c2:65:10:a3:8b:6f:d6:80:9d:
cc:55:e9:00:1a:8e:e9:f3:48:0c:94:87:60:81:af:
20:e1:d2:a5:e7:aa:35:b2:e1:14:af:5a:db:22:ad:
6a:cd:21:a1:1d:10:46:de:d6:f0:ec:06:46:a8:fa:
59:34:a1:10:03:c1:e4:f6:5d:26:c3:13:01:a5:f9:
55:9d:d4:c8:e7:f6:22:61:4f:b6:98:e4:d0:e8:2e:
b5:43:55:6c:52:ba:c2:3b:6c:b9:3e:4e:7e:71:d3:
9e:19:7f:d1:23:ad:30:0e:f6:a0:59:00:19:af:95:
0f:b3:2b:b4:43:b1:93:a3:d9:db:48:3d:76:cf:2c:
77:55:6f:6a:c0:e6:1b:5b:96:5f:92:6b:8b:3f:4f:
3a:9f:6d:75:95:ad:4a:76:37:60:c3:bd:2f:ad:9a:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:32:21:89:42:82:BB:44:56:74:C4:A7:71:B9:AC:DF:A8:28:5F:E6
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/FDIhiUKCu0RWdMSncbms36goX-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.116.0/22
5.160.132.0/22
5.160.142.0-5.160.145.255
Signature Algorithm: sha256WithRSAEncryption
65:3f:fc:45:e2:1c:36:d3:c6:cb:07:fd:2c:73:cd:16:d9:e3:
ac:b4:1d:b0:ff:20:84:eb:1d:5b:94:d4:03:d4:4b:45:5c:8d:
26:0e:48:03:e3:8e:9d:4e:f9:df:0f:66:e4:cc:cf:ea:37:65:
3d:77:03:36:3d:f7:54:4a:29:b8:8c:bc:11:e3:96:2d:67:da:
40:69:c5:e6:cd:49:c4:54:8c:46:40:44:83:e4:1a:6e:fc:0e:
52:2f:36:14:16:c8:c8:bd:cc:94:88:ef:ee:55:68:7b:b4:d6:
31:42:a7:26:9c:73:03:ee:b6:8a:87:5f:83:88:a6:d3:a9:5f:
b1:01:28:39:6f:6c:8c:78:5e:47:6d:23:e9:9e:e5:a9:9f:42:
5d:51:3f:64:4d:1b:da:98:e9:6c:31:3f:a8:99:b6:96:c3:7b:
77:f7:f1:b1:2e:d4:3f:d9:cf:a1:f7:ca:41:49:22:cd:37:88:
9c:93:59:c6:9a:4e:dd:cb:9f:e9:92:e1:ec:64:31:54:da:62:
78:9e:4e:b8:a8:54:c7:fb:aa:0c:ec:4e:ba:df:63:17:5a:f8:
f2:0c:cd:15:13:e0:df:2b:6d:76:43:73:28:e4:2d:64:c9:5d:
97:f4:18:33:81:8c:d3:9e:f1:9d:fc:d3:43:a8:d2:30:5f:ef:
42:d1:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:20 2024 by rpki-client on console-ams.rpki-client.org