Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/_z55wkxTmT47PErxaMJHTO0TPt4.roa
File: _z55wkxTmT47PErxaMJHTO0TPt4.roa (raw, json)
Hash identifier: QRnzD9Y15jxhrHbdkiqaBmEQ7+ivTHgpKYBg/+PBglY=
Subject key identifier: FF:3E:79:C2:4C:53:99:3E:3B:3C:4A:F1:68:C2:47:4C:ED:13:3E:DE
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42D2D191E848AB6878BB2BCAF1ED1B
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/_z55wkxTmT47PErxaMJHTO0TPt4.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 5.160.206.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d2:d1:91:e8:48:ab:68:78:bb:2b:ca:f1:ed:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff3e79c24c53993e3b3c4af168c2474ced133ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:60:3d:8f:d4:17:78:4f:ef:70:d4:2f:fa:
a9:63:99:64:5b:fd:c1:a3:d3:db:1f:1e:c2:1b:20:
44:f0:63:8f:bd:81:03:bd:21:47:7f:4d:f2:e2:6f:
51:58:de:dd:b9:f1:ba:b2:a6:f0:72:fa:ed:f1:83:
d1:37:bf:ae:4f:c2:cf:a1:3c:f1:d3:42:bd:65:81:
eb:51:51:a2:33:3c:47:0e:c3:fd:c3:87:cb:26:1d:
45:a9:ca:36:11:5c:8e:e9:5a:47:90:13:8c:4d:64:
d7:da:c6:63:c0:eb:2d:e7:d0:67:49:3d:f8:df:dd:
54:e2:e6:df:23:02:8c:41:c6:40:c9:67:95:d2:e7:
68:be:57:6f:84:25:a2:6a:77:e5:8d:70:3b:d4:bc:
5a:f7:3b:e9:67:9d:1f:c0:51:a3:20:fe:4d:1b:44:
fb:6c:28:8b:34:8e:ba:7b:4d:16:99:ed:d0:9c:08:
50:1d:86:cf:6b:72:6c:b8:3f:d3:2f:67:d8:70:cc:
15:47:39:79:f6:59:40:ff:05:bf:e6:07:d9:49:c2:
96:6d:a7:43:ae:36:8a:4e:d6:6a:d8:90:9c:e5:49:
8a:47:fc:49:37:0f:eb:85:5b:5d:8c:7b:9e:71:87:
1b:cb:e8:d1:a2:cf:1a:cb:10:e1:34:36:0f:ec:d2:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3E:79:C2:4C:53:99:3E:3B:3C:4A:F1:68:C2:47:4C:ED:13:3E:DE
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/_z55wkxTmT47PErxaMJHTO0TPt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.206.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:3e:57:a4:cb:f2:5f:d2:0c:cf:03:ff:46:c6:62:5c:f2:9c:
0d:09:46:e5:ba:5c:74:b2:50:e9:41:ec:12:ad:fc:c0:ea:e8:
3c:e0:33:59:97:3f:44:bd:1c:25:73:1e:17:96:f4:75:eb:9a:
cd:04:72:a0:bf:06:b9:77:95:84:e9:ff:6a:c4:d4:d7:e2:cd:
6d:34:b5:65:8f:44:da:d0:b0:fa:85:2e:45:68:21:c1:b6:db:
3c:5e:3c:63:44:ff:08:bf:32:6a:d8:0f:0a:25:c2:c4:0b:24:
3b:bb:96:1c:73:a5:a6:7f:7b:59:e8:5a:45:ba:10:67:48:ea:
4a:57:c0:36:ee:c3:c7:7f:d2:27:62:4f:6b:e1:77:7c:50:49:
0e:a2:54:0a:01:ca:7c:ef:9c:1c:90:e5:c0:e7:83:09:d6:9b:
37:e7:cd:8a:be:e1:c7:62:6f:e4:f1:ba:7d:8b:e0:9b:64:96:
82:6e:7d:c1:db:cc:fe:d7:66:f1:13:06:b8:15:3a:7a:3d:b5:
2d:78:7e:da:3d:e2:50:8c:05:09:10:07:0d:fa:2a:ef:30:46:
51:d9:57:5b:c8:44:4a:c7:c2:28:50:65:9f:05:da:c8:2a:ae:
9d:a4:5f:f4:01:23:27:98:30:0a:0b:0a:e4:a8:93:c7:b7:58:
c8:2e:f6:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQtLRkehIq2h4uyvK8e0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjMwMTAxMjEzNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjNlNzljMjRjNTM5OTNlM2IzYzRhZjE2OGMyNDc0Y2VkMTMzZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhVgPY/UF3hP73DUL/qpY5lkW/3B
o9PbHx7CGyBE8GOPvYEDvSFHf03y4m9RWN7dufG6sqbwcvrt8YPRN7+uT8LPoTzx
00K9ZYHrUVGiMzxHDsP9w4fLJh1Fqco2EVyO6VpHkBOMTWTX2sZjwOst59BnST34
391U4ubfIwKMQcZAyWeV0udovldvhCWianfljXA71Lxa9zvpZ50fwFGjIP5NG0T7
bCiLNI66e00Wme3QnAhQHYbPa3JsuD/TL2fYcMwVRzl59llA/wW/5gfZScKWbadD
rjaKTtZq2JCc5UmKR/xJNw/rhVtdjHuecYcby+jRos8ayxDhNDYP7NKdNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8+ecJMU5k+OzxK8WjCR0ztEz7eMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvX3o1NXdreFRtVDQ3UEVyeGFNSkhUTzBUUHQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBaDOMA0G
CSqGSIb3DQEBCwUAA4IBAQBePleky/Jf0gzPA/9GxmJc8pwNCUblulx0slDpQewS
rfzA6ug84DNZlz9EvRwlcx4XlvR165rNBHKgvwa5d5WE6f9qxNTX4s1tNLVlj0Ta
0LD6hS5FaCHBtts8XjxjRP8IvzJq2A8KJcLECyQ7u5Ycc6Wmf3tZ6FpFuhBnSOpK
V8A27sPHf9InYk9r4Xd8UEkOolQKAcp875wckOXA54MJ1ps3582KvuHHYm/k8bp9
i+CbZJaCbn3B28z+12bxEwa4FTp6PbUteH7aPeJQjAUJEAcN+irvMEZR2VdbyERK
x8IoUGWfBdrIKq6dpF/0ASMnmDAKCwrkqJPHt1jILvaA
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:49 2024 by rpki-client on console-fra.rpki-client.org