Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Pi7QxV4exuN_TKNwCMh80M99Yjo.roa
File: Pi7QxV4exuN_TKNwCMh80M99Yjo.roa (raw, json)
Hash identifier: sUlaatqmXdzoZFMgsdZxalKCRUOP7ry/IHEYt+zCy1o=
Subject key identifier: 3E:2E:D0:C5:5E:1E:C6:E3:7F:4C:A3:70:08:C8:7C:D0:CF:7D:62:3A
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019068FD248739E5EAAF2FA74F85AE0F7882
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Pi7QxV4exuN_TKNwCMh80M99Yjo.roa
Signing time: Sun 30 Jun 2024 11:52:18 +0000
ROA not before: Sun 30 Jun 2024 11:52:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51431
IP address blocks: 5.160.47.0/24 maxlen: 24
77.237.66.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Aug 2024 12:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:68:fd:24:87:39:e5:ea:af:2f:a7:4f:85:ae:0f:78:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jun 30 11:52:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e2ed0c55e1ec6e37f4ca37008c87cd0cf7d623a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:38:d2:9c:eb:f6:81:86:38:93:8a:4e:8c:
4e:4f:e4:ec:e7:78:cb:02:40:62:5e:80:84:ed:a4:
ee:b1:cc:96:15:55:b9:fb:39:85:ec:2e:f6:00:fa:
bf:41:06:2d:fe:32:77:67:cb:b3:f2:0e:21:09:96:
1b:75:e7:99:f5:46:3d:95:47:ed:88:7e:3f:08:f2:
7f:bb:0b:0a:37:0c:45:d1:73:71:64:e7:ed:33:f7:
5c:4f:b6:72:f8:b4:b4:a7:82:3b:ac:38:79:56:6a:
12:2c:b8:f9:40:72:b7:d5:2c:6b:98:ad:48:44:23:
6e:95:27:4d:fa:92:2e:00:d8:be:f1:86:a0:be:e5:
ab:9a:c4:3b:27:b7:75:dc:de:cd:4e:3c:9b:c6:2e:
6e:4e:b1:e8:92:d6:b4:5a:c4:84:af:b9:8b:d2:7e:
8f:f8:30:9a:b1:31:a5:63:85:a2:40:4b:c5:ff:27:
92:fe:5e:56:f8:a5:a4:2d:d6:81:d7:15:f6:ba:03:
96:cc:01:59:cd:89:fd:45:64:8d:cb:e9:87:51:e3:
5f:43:33:b3:c7:63:e0:f1:14:09:88:8b:cd:a5:55:
04:07:b0:af:22:02:27:7d:61:3a:29:df:8b:8b:4c:
6c:16:a3:6b:6d:bb:cc:0d:6a:e1:16:4c:35:83:29:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2E:D0:C5:5E:1E:C6:E3:7F:4C:A3:70:08:C8:7C:D0:CF:7D:62:3A
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Pi7QxV4exuN_TKNwCMh80M99Yjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.47.0/24
77.237.66.0/23
Signature Algorithm: sha256WithRSAEncryption
67:f4:b4:b0:a7:b9:02:40:84:1d:59:dc:58:d7:e0:01:10:98:
46:ef:0c:22:86:bb:f7:b9:e1:c9:1b:6c:ee:1c:af:5a:a4:4f:
a5:d1:3f:c5:46:2f:dd:f4:ef:69:51:1d:b2:59:ab:da:10:40:
7b:65:fb:ea:c5:d2:e8:9b:a8:35:41:df:26:60:43:a9:48:6b:
f4:f5:da:b7:44:c1:8f:62:06:17:e4:1b:b8:8b:d8:04:21:9e:
28:cb:10:4c:30:dc:61:c1:5b:79:19:03:0f:fe:8c:c3:65:f6:
4b:93:21:7f:15:cd:5b:91:aa:0a:4b:60:47:2e:6c:fd:52:65:
f8:25:f2:ec:29:e6:c8:c7:82:16:95:ba:5f:6d:2b:2d:4c:c4:
ca:99:af:17:13:de:2e:40:b4:c9:3c:e1:9f:aa:f7:4d:04:45:
84:07:da:a3:44:5b:21:8c:f1:62:7f:66:db:b6:c8:7f:99:01:
43:48:c8:08:23:47:13:39:20:a7:d6:48:28:c1:58:f5:9c:af:
04:d8:3a:4e:62:64:72:5f:55:d2:a9:59:d9:e3:fc:fc:5e:e2:
db:6f:01:5e:79:08:29:88:aa:8f:8a:9d:a5:e1:84:73:f0:64:
ef:f7:8a:01:19:ea:ba:b6:d9:f7:07:25:48:e6:3e:a5:98:d4:
2b:11:94:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 15:25:48 2024 by rpki-client on console-ams.rpki-client.org