Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/HfPx24ZYqjrz5Pq6Fv51NHnQudc.roa
File: HfPx24ZYqjrz5Pq6Fv51NHnQudc.roa (raw, json)
Hash identifier: GjklTeWBFQPMFm7V3FPnIKBG4s8aVzZgUHEyeVpvXb0=
Subject key identifier: 1D:F3:F1:DB:86:58:AA:3A:F3:E4:FA:BA:16:FE:75:34:79:D0:B9:D7
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42D119B9C5A41F69E214C363A4FE40
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/HfPx24ZYqjrz5Pq6Fv51NHnQudc.roa
Signing time: Sun 01 Jan 2023 21:35:27 +0000
ROA not before: Sun 01 Jan 2023 21:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31549
IP address blocks: 5.160.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d1:19:b9:c5:a4:1f:69:e2:14:c3:63:a4:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1df3f1db8658aa3af3e4faba16fe753479d0b9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:17:6d:d5:85:7a:72:86:5d:58:82:61:2c:
b0:13:aa:e6:21:1e:0c:ab:0f:cb:b2:b6:c9:05:92:
06:11:ae:ca:70:aa:28:eb:e1:69:79:e8:82:60:7e:
06:04:5e:92:9e:c2:89:15:f7:ba:63:e1:33:25:32:
79:84:25:93:c7:bc:7d:00:83:32:26:4f:b1:20:9c:
67:79:38:6a:0d:cc:d4:54:c6:9d:42:79:31:b9:a0:
40:40:60:64:0f:2d:c9:23:f2:55:2f:a6:33:74:07:
ad:67:65:3c:88:53:e2:a5:d5:59:a1:86:77:1b:ad:
a6:92:ce:ee:70:6c:36:aa:63:14:55:10:0a:6c:c7:
3d:1a:ec:13:36:09:ca:65:25:f2:70:fe:3c:2d:94:
18:7e:ae:a4:80:fe:23:98:88:50:04:77:c4:7f:c5:
a1:e4:a0:79:2e:94:d1:ac:97:8e:22:a0:6b:70:a9:
78:88:71:c3:e7:13:b4:1e:f1:7a:4b:2a:bd:1e:88:
6c:b8:69:87:54:01:10:b1:7c:98:4f:d1:14:f5:ef:
b2:1b:e9:17:83:71:7b:60:9f:49:7c:b3:e1:3f:c1:
a3:c6:6c:f3:2b:79:77:8b:92:84:54:9f:7b:70:2c:
c3:01:5a:0d:c8:d3:db:77:cc:90:2e:33:0b:64:58:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F3:F1:DB:86:58:AA:3A:F3:E4:FA:BA:16:FE:75:34:79:D0:B9:D7
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/HfPx24ZYqjrz5Pq6Fv51NHnQudc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c4:87:e6:94:66:a4:fd:67:08:56:63:f9:70:9f:a6:32:b5:
bf:c3:00:7d:f6:77:92:fe:9b:e6:31:3f:ac:5d:b8:34:61:21:
33:76:18:1c:30:36:ac:ef:ba:15:90:ed:81:e7:db:f4:34:03:
42:ab:63:9b:92:c0:17:ce:6c:d1:d4:b9:ea:e3:ad:05:c3:7c:
a9:63:43:84:3c:51:10:98:12:1a:59:41:5b:ff:90:cf:db:b4:
11:6a:aa:5b:09:20:3e:d3:68:70:fb:a5:cc:08:fa:e4:bc:eb:
f7:3a:49:f4:59:4b:8f:63:15:1c:47:7a:f4:36:14:ae:6c:e2:
60:f8:4b:7d:5d:6e:f0:7b:c8:50:de:cf:4e:13:04:7f:b6:53:
88:0a:ee:30:4d:72:55:37:63:c4:5c:c2:4f:3b:f0:d5:f4:13:
9d:d9:69:21:5b:aa:92:50:ef:99:5c:e7:86:a9:a4:ea:b5:a6:
44:77:aa:d7:23:0b:54:dc:81:14:60:76:47:c4:03:f1:14:a1:
ca:d7:4c:8a:91:78:dd:03:54:4d:a4:6e:91:3a:08:0c:15:44:
a9:f6:48:49:a0:ab:b3:91:a7:56:ed:dd:42:c3:ca:52:f9:8f:
f2:e3:6e:fc:6b:f5:4b:3d:cc:d2:ff:a8:b4:b1:d5:76:1a:cc:
66:67:de:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org