Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/FFUN3lCFNlW_Vt5fD8W6ebLepe8.roa
File: FFUN3lCFNlW_Vt5fD8W6ebLepe8.roa (raw, json)
Hash identifier: pav2NtejyN4na/jnp4uq1FqKWjfKXH/V5qQ6Hp28UjQ=
Subject key identifier: 14:55:0D:DE:50:85:36:55:BF:56:DE:5F:0F:C5:BA:79:B2:DE:A5:EF
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42E8952A5408CA17C5B0A5EF090C62
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/FFUN3lCFNlW_Vt5fD8W6ebLepe8.roa
Signing time: Sun 01 Jan 2023 21:35:33 +0000
ROA not before: Sun 01 Jan 2023 21:35:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62157
IP address blocks: 5.160.54.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e8:95:2a:54:08:ca:17:c5:b0:a5:ef:09:0c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14550dde50853655bf56de5f0fc5ba79b2dea5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:c2:a1:4c:e7:80:33:b4:a2:bb:49:c1:c5:
66:ed:b8:67:04:80:41:bc:0e:1f:76:a1:ec:c4:e5:
ab:03:99:29:e5:56:aa:ff:f0:2f:60:8e:59:ae:24:
74:35:dd:74:c6:ac:cc:85:9d:1c:48:d5:b7:f3:b5:
c8:0a:68:3d:09:79:1b:8c:f3:ed:61:cb:ae:3a:72:
66:ce:b1:66:c7:84:b5:6f:ff:88:1c:1e:f5:d3:39:
fd:2f:fc:be:cb:4a:ba:91:71:b0:0f:5e:66:02:c4:
b1:af:74:55:d2:be:1f:2e:ed:ed:96:c2:14:66:0e:
b0:5a:53:f8:ba:a1:de:b2:cb:55:8b:08:11:16:4b:
02:16:1c:2f:ef:35:2c:98:36:c8:89:ff:c3:83:6a:
7c:c2:00:ac:8a:92:7e:3f:13:8f:67:9d:42:17:af:
03:32:b8:23:28:f0:44:45:58:64:9b:88:6f:17:ff:
3d:95:52:cf:98:2a:89:bc:40:98:09:a2:05:80:4e:
30:ff:1e:31:4f:a0:68:91:87:37:96:dc:86:20:b4:
e6:aa:48:7d:92:e6:1a:3e:1f:55:78:a5:5c:ec:90:
8f:90:56:f6:6c:84:19:00:a4:62:6d:98:ac:97:ce:
05:49:1d:cf:9f:dd:df:5a:cc:fc:a4:8e:bf:d8:b0:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:55:0D:DE:50:85:36:55:BF:56:DE:5F:0F:C5:BA:79:B2:DE:A5:EF
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/FFUN3lCFNlW_Vt5fD8W6ebLepe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.54.0/23
Signature Algorithm: sha256WithRSAEncryption
89:72:ed:6f:42:0b:ca:f7:af:aa:ae:88:e9:dd:5c:c4:5b:09:
15:2d:2e:7e:d8:58:f1:03:e4:84:92:82:e1:d6:33:50:ba:81:
09:45:85:60:03:d2:3e:87:0b:83:64:5a:de:91:b0:16:dd:46:
c1:f8:d3:d9:00:20:cf:80:a2:11:c7:a9:db:27:da:f0:02:e5:
71:a0:00:3f:7d:95:05:b6:62:38:79:ef:5c:30:24:a1:4e:80:
f5:8f:da:da:92:c4:41:97:62:9f:23:ac:4a:ba:21:c5:b2:e4:
e9:82:88:0c:f8:45:ff:64:76:fc:f0:ef:47:e5:32:9a:d3:74:
f9:65:a2:9d:52:5b:25:dd:f3:19:de:68:95:d7:79:88:fb:3e:
50:20:33:a7:54:d6:60:af:59:1c:1b:6b:4f:5b:36:23:c1:c9:
1d:8e:c0:71:57:29:97:4e:f5:8f:bd:67:ad:24:61:7c:0d:37:
a4:8a:f5:ff:61:36:6c:91:1c:4e:6c:a2:1b:e3:d0:f3:28:c7:
10:d4:c3:f9:90:53:c7:bd:2f:5c:06:10:10:4b:52:e2:7d:df:
d1:2a:7b:ed:c8:b2:c0:a8:dd:e0:ac:ac:0b:2c:04:18:26:0d:
27:bd:c3:97:65:4f:b6:94:60:3f:c9:ae:17:c1:b4:fd:93:ec:
c4:25:ac:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:49 2024 by rpki-client on console-fra.rpki-client.org