Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/HrHaWU9ao3lRnog5L2rpT1WTMH0.roa
File: HrHaWU9ao3lRnog5L2rpT1WTMH0.roa (raw, json)
Hash identifier: Vd5ASQzBs8eRKxuzYTXQ+TAjuqTaa7zUOXW+OhOQL48=
Subject key identifier: 1E:B1:DA:59:4F:5A:A3:79:51:9E:88:39:2F:6A:E9:4F:55:93:30:7D
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42D90F6B9A0B3D29EE1CC96FA96280
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/HrHaWU9ao3lRnog5L2rpT1WTMH0.roa
Signing time: Sun 01 Jan 2023 21:35:29 +0000
ROA not before: Sun 01 Jan 2023 21:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49847
IP address blocks: 5.160.160.0/23 maxlen: 24
5.160.164.0/23 maxlen: 24
46.209.54.0/23 maxlen: 24
46.209.178.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d9:0f:6b:9a:0b:3d:29:ee:1c:c9:6f:a9:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eb1da594f5aa379519e88392f6ae94f5593307d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:86:25:54:9f:8c:7b:b0:f9:b7:5f:a7:d3:
21:26:dd:8a:1a:c7:4a:4f:f3:1c:13:d8:68:3a:85:
f6:e7:5d:92:ba:cb:77:32:e4:7c:2c:e9:73:ac:25:
46:e4:82:d9:b1:f4:8c:25:5a:c9:9c:31:7b:76:62:
75:0f:38:5e:12:14:4a:35:18:a1:47:44:1e:d2:e5:
d9:2f:fb:05:7d:89:2e:93:88:fc:00:f7:10:86:2d:
54:7d:62:9e:46:9a:cd:f6:5a:cc:66:84:c2:68:a6:
b5:59:10:81:24:33:13:55:e9:ee:39:8d:9a:e2:46:
15:af:4f:5b:90:01:42:4a:18:eb:fa:6c:51:f6:4a:
e9:96:c3:a2:6a:c7:d7:ee:99:75:c6:38:bf:d6:40:
2d:3c:8f:36:75:8b:8c:9a:ac:1b:ad:7d:7d:04:c9:
ad:39:57:69:55:5b:85:08:0d:3a:da:4c:ee:4d:74:
a8:78:77:0c:a0:3d:dc:64:02:6f:85:ca:45:fd:71:
c9:4c:19:80:17:7f:fb:ec:4f:c0:5c:c7:8f:ea:9c:
12:f5:bc:75:e8:4b:6f:38:59:25:d5:d0:9b:0b:31:
5b:24:4a:67:fd:60:fe:5d:8b:63:7d:3b:2d:ed:31:
44:af:96:a6:67:60:0e:e8:49:06:5c:78:0d:76:b6:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B1:DA:59:4F:5A:A3:79:51:9E:88:39:2F:6A:E9:4F:55:93:30:7D
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/HrHaWU9ao3lRnog5L2rpT1WTMH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.160.0/23
5.160.164.0/23
46.209.54.0/23
46.209.178.0/23
Signature Algorithm: sha256WithRSAEncryption
57:57:9f:40:de:6c:74:17:88:fa:2b:ae:e0:11:02:ff:9b:2f:
21:84:23:77:9f:e9:5c:79:51:a6:8a:e3:2e:fb:b9:26:f7:ec:
fe:b1:7b:f9:04:ee:1f:fa:24:fa:a3:c8:9b:f7:63:98:15:2b:
bb:eb:c3:0e:41:24:08:a0:f0:74:af:ff:5b:62:ce:a5:16:d4:
fd:dc:40:0f:f4:32:93:f7:32:18:e0:6b:0c:bc:cf:c6:6c:31:
cc:3a:af:00:5c:7b:39:d6:7d:a3:2b:69:8e:7f:7d:fe:57:9a:
b2:5b:4c:e3:5c:6f:e0:cd:7b:11:a9:fc:82:9f:e6:6f:38:e1:
82:82:00:a3:a6:fc:93:d3:48:45:c7:36:c7:99:e8:81:51:8a:
71:d2:c1:85:6e:b5:5f:25:62:d7:b1:41:e4:64:83:ae:f2:2f:
74:00:c9:79:28:8c:0c:78:34:b9:a7:2b:af:25:68:58:9c:97:
21:19:d3:42:16:bf:cc:8d:ff:c7:2c:9d:99:c4:29:08:36:15:
e6:58:e8:6c:27:71:91:ff:ec:ac:7a:01:d4:ea:c1:41:45:28:
bf:5e:6f:ec:f3:82:d4:bc:c0:97:13:04:0b:74:59:28:46:25:
06:dc:1f:85:36:59:2c:5f:29:63:d4:c4:02:12:5a:a5:4a:8d:
7a:b2:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:49 2024 by rpki-client on console-fra.rpki-client.org