Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/GUka79Fkc7ofrD0meIobx379jC4.roa
File: GUka79Fkc7ofrD0meIobx379jC4.roa (raw, json)
Hash identifier: BN/TKLUhlzrUiYjAZhlCh/lxfLjbjqVQlafarkJygSc=
Subject key identifier: 19:49:1A:EF:D1:64:73:BA:1F:AC:3D:26:78:8A:1B:C7:7E:FD:8C:2E
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42E005A837E790DF34023AD1134FB0
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/GUka79Fkc7ofrD0meIobx379jC4.roa
Signing time: Sun 01 Jan 2023 21:35:31 +0000
ROA not before: Sun 01 Jan 2023 21:35:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58224
IP address blocks: 46.209.40.0/22 maxlen: 22
5.160.154.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e0:05:a8:37:e7:90:df:34:02:3a:d1:13:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19491aefd16473ba1fac3d26788a1bc77efd8c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:2b:50:d6:e4:01:45:09:1e:be:2f:4e:4e:
0a:cb:bc:6c:3e:27:2b:80:90:b7:4a:8a:2c:f0:5b:
18:cf:48:ca:18:83:a7:80:47:fe:fe:e4:ef:1d:ca:
46:0f:a2:af:f2:3d:9f:97:7f:36:d2:4c:8e:78:ac:
ab:6d:bd:0b:83:ef:28:55:69:0f:cc:7c:11:7e:3b:
52:f9:7a:e0:be:8b:cb:40:1c:2f:01:36:e6:b8:e5:
13:81:e3:cd:39:5f:1b:a2:13:79:9b:c7:e0:a8:88:
8a:66:98:54:fc:06:10:8d:f8:de:6b:ba:be:2a:4c:
0c:b1:65:ab:b0:65:b1:de:b8:9a:6d:04:dd:a6:34:
27:7d:7f:71:8a:32:2c:d9:c5:7b:66:5b:bc:f6:ca:
98:4c:00:4c:02:90:35:61:15:e3:88:29:4d:61:de:
f0:2f:7b:76:93:f5:68:5c:29:7d:6d:6e:8e:f2:83:
5a:87:6c:e9:9f:2a:7b:c5:62:41:b9:b6:30:4a:cf:
0c:12:0c:0d:cc:87:c8:1a:27:ec:d5:c1:54:4f:d1:
ea:0a:50:3a:bd:33:38:1f:21:ee:77:01:13:f9:da:
71:23:32:97:b8:93:ba:c5:2b:31:28:ec:7a:b3:81:
97:ed:c1:c5:58:f8:d6:4a:57:b2:15:f5:a0:28:31:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:49:1A:EF:D1:64:73:BA:1F:AC:3D:26:78:8A:1B:C7:7E:FD:8C:2E
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/GUka79Fkc7ofrD0meIobx379jC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.154.0/23
46.209.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:d5:96:92:8b:e4:6c:a3:4c:ca:33:20:76:a4:28:8b:5b:6d:
a7:80:b3:7d:f9:d3:f8:4e:89:b3:3f:93:47:e5:bd:58:81:51:
ff:ed:8c:ab:d9:d1:8b:20:5b:3e:76:9b:d6:11:33:94:2b:0e:
e8:02:d6:73:9a:42:13:e4:6e:f7:ab:0a:16:70:d7:4c:be:fa:
ca:9f:f7:ef:c2:f4:7d:42:61:f9:50:d6:cf:88:14:44:51:2a:
4a:e4:47:9a:ac:56:04:4c:15:4d:70:90:af:c4:3c:47:29:42:
51:1d:44:cd:8d:da:ee:02:11:4b:4f:24:f9:3b:c5:12:cf:ae:
62:5c:0b:5f:16:8d:0e:8b:4d:45:b5:e9:29:91:8d:00:a6:b9:
7a:d3:ca:93:34:d3:16:c1:fc:e5:9c:0c:7b:4e:30:dc:41:77:
3a:72:a9:4b:af:02:2b:0c:58:d5:83:a9:c2:9b:1d:85:22:38:
e3:c0:a7:53:e1:d4:95:52:7a:a6:48:d8:8f:84:b6:c8:90:b1:
c6:12:7f:02:94:e6:66:4b:e6:aa:1d:e2:f3:b7:f7:29:34:0e:
bc:3e:57:47:df:90:f4:2a:b8:44:64:db:42:97:ab:49:3b:fc:
2d:f0:1d:03:7b:1d:5c:e2:b8:6d:24:97:d9:d7:23:e6:66:ee:
24:d7:4c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org