Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/ORnOOoAAabvHlCEB7oAAQNbnd84.roa
File: ORnOOoAAabvHlCEB7oAAQNbnd84.roa (raw, json)
Hash identifier: 1q7JuldAp65tjf2J1GaTfyHY/CWOMOxTa7quw2I3bSg=
Subject key identifier: 39:19:CE:3A:80:00:69:BB:C7:94:21:01:EE:80:00:40:D6:E7:77:CE
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42D87745E921B2E3706BEE4D05D3F6
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/ORnOOoAAabvHlCEB7oAAQNbnd84.roa
Signing time: Sun 01 Jan 2023 21:35:29 +0000
ROA not before: Sun 01 Jan 2023 21:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49433
IP address blocks: 5.160.242.0/24 maxlen: 24
2a00:15c8:1000:3000::/64 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d8:77:45:e9:21:b2:e3:70:6b:ee:4d:05:d3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3919ce3a800069bbc7942101ee800040d6e777ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:31:92:fc:73:d9:01:d5:16:a5:e8:f6:9e:
07:ba:8f:ef:04:09:51:dc:d2:7b:b2:72:22:eb:e7:
2e:6e:71:3f:69:74:ab:cd:54:13:a7:e0:c7:45:a7:
c1:ba:ca:03:3f:fa:af:95:ed:5e:4d:3f:a8:41:f9:
4a:bc:c9:e0:0f:9f:57:21:22:bb:93:c1:cd:64:8f:
a9:0d:11:2d:16:3e:5e:a3:82:a3:5f:67:fc:e3:52:
75:4d:ca:b6:9d:56:36:d3:af:06:1c:0b:57:5f:62:
c6:43:af:18:1a:35:b4:a8:3c:46:e2:8b:d3:fb:82:
ef:fe:66:5f:24:79:fa:eb:28:07:7f:27:6a:1e:07:
69:40:ca:33:5e:b1:eb:c6:54:3f:81:23:96:35:73:
13:02:48:d7:c3:9f:72:99:a7:de:75:f4:c3:0e:3c:
fe:34:55:9b:2c:ea:1b:9b:35:7d:62:c3:c9:04:58:
a6:e4:d2:63:88:99:83:e1:cd:1a:bb:72:91:f2:13:
ea:19:f7:5f:e8:72:54:60:b8:81:f9:fc:9e:59:d3:
a9:93:67:3f:05:bf:a0:b6:6d:a3:d7:6d:d1:f1:16:
8d:d9:0b:13:5e:4b:63:f4:db:9d:6f:41:f6:6c:44:
1a:d3:bc:27:00:06:2c:2f:93:2d:12:f7:7e:17:1f:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:19:CE:3A:80:00:69:BB:C7:94:21:01:EE:80:00:40:D6:E7:77:CE
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/ORnOOoAAabvHlCEB7oAAQNbnd84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.242.0/24
IPv6:
2a00:15c8:1000:3000::/64
Signature Algorithm: sha256WithRSAEncryption
50:00:7b:a1:ae:79:a1:ee:c8:23:11:ae:db:74:e0:a7:66:cc:
9e:a5:50:b2:1f:fe:fd:ed:94:8a:65:d6:59:0d:34:9e:63:e8:
29:cd:c9:9a:41:da:af:84:93:ef:28:17:90:a8:ab:4f:d6:16:
72:4a:0d:56:d2:17:67:00:45:a0:50:ab:5f:41:d0:17:6a:16:
07:ff:12:9d:70:3f:da:90:e0:32:12:7c:17:d6:4b:2d:ec:85:
6a:bd:ba:f7:a6:07:b1:87:08:93:b2:5f:ff:9f:ae:7e:cc:a5:
14:45:e1:38:0d:f5:76:b7:81:d7:d9:82:d5:0b:07:63:57:78:
a4:c9:9d:8f:91:7c:7c:f4:0f:c3:c5:00:3f:09:6a:92:7c:39:
fe:ce:b1:c8:78:2f:26:42:3d:5f:6b:01:ab:01:de:e0:79:e4:
fc:58:0b:17:d7:f7:30:84:09:65:24:3d:59:77:d9:2c:28:b4:
20:c2:2d:2b:86:98:58:70:dd:22:c7:54:f8:3a:4e:62:10:b4:
b9:3c:8d:e2:4b:7b:3d:ec:87:a7:64:d9:3d:2c:f9:8c:6d:e2:
a2:47:ec:3d:7e:30:6c:6b:86:90:fa:53:bd:8b:96:98:38:1f:
d3:92:7e:60:91:25:72:36:0b:d1:ed:5f:a2:a5:af:7d:c6:00:
21:75:af:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org