Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/W8d7zUByPgk2SYEZ2ktIIUCSEVg.roa
File: W8d7zUByPgk2SYEZ2ktIIUCSEVg.roa (raw, json)
Hash identifier: 9/t/zK6Vxs3A+hfJj+8cGX/nyl/t5po0I9+lqerf9/8=
Subject key identifier: 5B:C7:7B:CD:40:72:3E:09:36:49:81:19:DA:4B:48:21:40:92:11:58
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018E2309D2ADC5AE01C72FE452C0FC6E521F
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/W8d7zUByPgk2SYEZ2ktIIUCSEVg.roa
Signing time: Sat 09 Mar 2024 11:47:10 +0000
ROA not before: Sat 09 Mar 2024 11:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43395
IP address blocks: 5.160.62.0/23 maxlen: 23
5.160.63.0/24 maxlen: 24
5.160.149.0/24 maxlen: 24
5.160.158.0/23 maxlen: 23
5.160.196.0/23 maxlen: 23
5.160.240.0/23 maxlen: 23
46.209.248.0/23 maxlen: 23
92.242.198.0/23 maxlen: 23
92.242.220.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 19 May 2024 10:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:23:09:d2:ad:c5:ae:01:c7:2f:e4:52:c0:fc:6e:52:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Mar 9 11:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bc77bcd40723e0936498119da4b482140921158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:89:eb:0a:2f:92:0e:a1:89:73:7a:1b:88:
67:6d:de:08:c5:68:3b:19:ce:a2:d8:08:f5:e4:66:
92:26:f2:73:96:d9:80:ae:c5:6d:3e:51:5f:54:df:
23:ed:8e:c5:1e:63:17:64:f1:d7:07:9e:71:90:bf:
96:ca:b7:c3:ce:21:b5:e5:76:d3:c8:bf:14:95:46:
26:ee:ac:ef:3a:40:c5:92:4b:45:4a:ac:8d:35:d9:
d0:a8:64:9f:98:3d:d9:1f:fb:03:85:2c:20:3c:05:
8e:07:af:c0:01:10:2c:d4:15:fb:46:dc:4e:7b:17:
74:96:ef:60:8d:7b:ba:a6:c6:35:3d:d8:5d:6e:9b:
b7:1f:ea:5b:78:0e:3c:42:ff:44:4b:ef:41:bb:26:
78:00:b4:14:19:a8:f8:c5:07:32:da:9c:eb:2b:3b:
5b:ef:b1:a3:ba:23:85:98:5e:0a:4a:71:40:d4:20:
e4:65:9a:44:ad:d5:21:08:22:1d:f8:35:86:c8:42:
2d:aa:11:ab:4e:3c:07:1f:a2:8a:64:56:ea:bc:0c:
6a:bb:22:fc:1b:83:46:c7:6c:a4:29:eb:82:84:9f:
39:f0:5b:b6:f4:ba:73:11:a7:1c:33:99:b1:57:1d:
3b:50:fc:b7:e2:ec:41:32:90:6e:bf:88:50:a0:dc:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:7B:CD:40:72:3E:09:36:49:81:19:DA:4B:48:21:40:92:11:58
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/W8d7zUByPgk2SYEZ2ktIIUCSEVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.62.0/23
5.160.149.0/24
5.160.158.0/23
5.160.196.0/23
5.160.240.0/23
46.209.248.0/23
92.242.198.0/23
92.242.220.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:f5:9a:69:1e:23:81:cf:51:3e:43:04:07:14:4b:60:8a:94:
35:d9:b0:54:ac:c6:c7:00:40:46:c3:24:19:09:f2:8b:66:ea:
bf:9e:0d:40:ef:1d:4e:91:7e:d4:5e:03:b0:18:f8:35:7c:3a:
fd:be:1e:ea:c3:6f:33:3a:c4:55:13:0e:51:c3:67:e7:5a:e6:
c7:a4:af:ad:f9:36:73:1c:49:a8:98:3d:bf:b8:bf:61:50:d1:
b8:94:b9:6c:58:49:e8:24:a9:63:58:50:ae:bb:4d:56:2a:4e:
63:f9:0a:b4:5c:eb:2c:e0:ec:6e:97:cc:ff:0c:8b:be:9c:8c:
dd:f5:66:2f:fb:12:a0:a6:b5:17:ee:d9:30:6a:e8:2e:08:7d:
17:68:d1:7f:2c:fe:17:c5:f6:47:8d:c4:12:75:0b:59:de:6d:
01:eb:6c:a4:29:f9:13:f7:23:89:d2:4c:5b:d2:d1:62:e4:17:
21:ea:b9:4f:7d:e5:f1:82:87:99:66:85:80:95:56:24:bb:75:
0e:e4:ae:ee:ce:48:a4:30:4b:5d:17:92:ca:a8:78:b1:b3:00:
8b:b6:d3:b5:b9:31:8c:2d:89:54:2d:ca:59:19:b7:e5:57:76:
79:b9:2d:67:8f:1b:51:cd:51:ca:c0:8f:73:83:58:fa:07:32:
40:51:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org