Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/UeetYe12JmUW5s5w5rluJsN2mR8.roa
File: UeetYe12JmUW5s5w5rluJsN2mR8.roa (raw, json)
Hash identifier: ra3rIJ200ccFe4I4AjXbPH8PJ27Cdk+6Ky52hIwYGNA=
Subject key identifier: 51:E7:AD:61:ED:76:26:65:16:E6:CE:70:E6:B9:6E:26:C3:76:99:1F
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42E1D36111BEAD05E2F777D06FEDCB
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/UeetYe12JmUW5s5w5rluJsN2mR8.roa
Signing time: Sun 01 Jan 2023 21:35:32 +0000
ROA not before: Sun 01 Jan 2023 21:35:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59838
IP address blocks: 5.160.203.0/24 maxlen: 24
5.160.202.0/24 maxlen: 24
5.160.202.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e1:d3:61:11:be:ad:05:e2:f7:77:d0:6f:ed:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51e7ad61ed76266516e6ce70e6b96e26c376991f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:18:bb:f1:d6:17:f1:53:e6:1c:c6:64:c6:
ad:58:40:39:e8:ad:c3:c4:cb:4c:a2:f8:8e:0d:96:
a4:5d:52:5f:08:31:e9:ed:9b:50:dc:9c:b5:f4:7d:
e3:1d:9c:5d:87:34:16:7c:ac:b1:b7:62:63:25:c8:
2d:a3:86:95:27:83:8d:98:5c:e0:cb:16:fa:d3:bf:
6d:dc:ec:84:9c:30:11:b2:8a:2e:0a:8c:97:86:f3:
b9:bc:18:0a:20:c7:55:a6:30:b3:87:6e:29:d9:74:
ab:87:24:1e:5e:be:23:8f:ef:c5:3f:6b:b8:c5:a2:
30:3e:b3:77:71:61:25:88:1d:6e:2a:95:15:61:5a:
ea:84:af:cc:fc:a7:2e:e6:4f:67:89:b1:cb:e6:77:
82:8a:1d:62:76:0f:8c:b9:eb:d9:99:18:89:c7:54:
29:c6:cf:85:0b:90:63:ef:30:c3:e2:50:e3:fb:74:
38:12:26:d0:a9:35:9e:55:8d:fe:9d:0e:68:a5:dd:
06:c0:af:81:0f:49:32:62:65:95:c6:97:1c:b4:5a:
a9:23:8d:85:4a:76:c2:98:d6:52:2a:a1:0b:61:77:
88:ef:d4:39:91:78:b3:60:50:57:94:03:1f:22:af:
63:85:2f:ad:9d:f0:2f:73:4b:0f:56:67:8a:bf:76:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E7:AD:61:ED:76:26:65:16:E6:CE:70:E6:B9:6E:26:C3:76:99:1F
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/UeetYe12JmUW5s5w5rluJsN2mR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.202.0/23
Signature Algorithm: sha256WithRSAEncryption
15:c7:93:08:76:e8:e8:f7:81:c5:d9:95:8a:f6:00:9c:08:1c:
13:6d:a5:d1:a9:d3:9b:da:0a:b8:87:c7:e1:4a:10:26:8a:df:
be:74:a5:18:26:61:3d:9d:b1:a5:55:8c:2f:65:05:6a:41:0a:
b6:eb:da:e1:58:cd:66:1a:2d:24:50:f2:d8:b5:6e:40:64:b7:
94:56:a3:73:42:53:18:1d:7e:12:3e:bc:2c:ab:6e:02:d8:af:
bf:25:36:73:3e:b0:4d:91:66:bd:c7:d1:91:5f:c0:2c:75:10:
d6:1e:4f:65:59:69:4b:be:1c:82:64:43:c7:3f:b0:2f:ac:b6:
a5:f9:71:48:5d:b5:ce:19:50:80:3b:f4:a7:f1:43:a1:2b:bb:
b1:5e:45:ab:1c:d7:c2:51:cd:6f:ba:27:94:f1:7c:6d:51:32:
f6:cb:7b:fc:dc:17:e8:ac:2b:78:fb:3e:4b:4c:6a:91:87:1c:
dc:9f:e3:cc:a6:ff:d5:aa:27:9f:05:08:e2:8a:61:35:f8:67:
6b:2e:d3:4b:a7:1a:0a:cb:b9:0b:de:da:96:56:e7:f1:7e:fe:
10:13:b5:58:01:af:13:14:06:d6:e4:6d:69:e9:ba:5d:48:92:
e1:8d:51:b9:12:fa:41:d7:ad:c0:ab:11:03:57:2c:5f:4d:4e:
f5:36:7b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org