Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fcrYNkZ2454TshmoNyyFlu6b8go.roa
File: fcrYNkZ2454TshmoNyyFlu6b8go.roa (raw, json)
Hash identifier: ARyljzmEcUyqG3BsBUx8SWXUrI6c85C9Wn+ZBwTB2/A=
Subject key identifier: 7D:CA:D8:36:46:76:E3:9E:13:B2:19:A8:37:2C:85:96:EE:9B:F2:0A
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42EA2A1F67E3DD80DCBD99DCA3F20A
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fcrYNkZ2454TshmoNyyFlu6b8go.roa
Signing time: Sun 01 Jan 2023 21:35:34 +0000
ROA not before: Sun 01 Jan 2023 21:35:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64436
IP address blocks: 5.160.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ea:2a:1f:67:e3:dd:80:dc:bd:99:dc:a3:f2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dcad8364676e39e13b219a8372c8596ee9bf20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:df:aa:45:56:dd:f6:6f:f3:05:c7:48:63:
92:8f:94:25:55:6a:3a:e6:69:0e:b8:02:cf:ed:34:
e1:dc:69:9f:49:db:25:b5:c2:40:c7:df:83:ee:01:
f2:11:4f:d3:fd:58:7c:cc:fb:08:65:4a:fb:49:3b:
6f:05:d5:d2:71:5c:16:1f:7d:48:61:92:ea:20:78:
8a:3d:79:33:b3:a5:90:06:ca:51:af:cb:e7:d9:a5:
72:21:06:67:e8:1f:01:2d:82:72:55:d3:63:aa:8b:
6b:14:7c:45:f2:3b:c6:d7:78:62:f0:6c:2e:98:8d:
c4:5f:6c:94:ef:1c:66:a1:da:ac:97:53:19:42:59:
28:31:6b:ee:28:c0:ef:b0:12:44:e1:ab:1a:ca:34:
bc:51:3e:a3:8d:1b:75:83:26:ee:0e:55:eb:d1:c7:
1c:e2:c8:71:5e:1c:50:02:ae:5d:98:41:a5:a7:44:
98:9e:de:d7:0d:c5:56:89:12:83:af:d7:cd:50:21:
a9:ec:75:f3:b0:77:36:a9:c5:bd:46:79:b5:8e:e9:
3f:33:5f:2b:73:ad:48:d0:e6:5c:ad:2f:30:50:60:
dc:0b:93:fc:6f:46:54:b0:9f:d7:45:13:64:d8:0b:
e2:a4:5d:a6:e9:2d:1e:d5:3d:bf:57:22:2b:1e:bf:
b3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CA:D8:36:46:76:E3:9E:13:B2:19:A8:37:2C:85:96:EE:9B:F2:0A
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fcrYNkZ2454TshmoNyyFlu6b8go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.157.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:27:fb:1d:81:9e:a0:44:bd:68:d7:4c:c3:98:c4:09:a3:20:
12:78:00:d8:ec:0c:29:f9:49:d5:08:0e:63:2b:d3:f5:6b:09:
80:b9:87:c3:8e:90:18:ec:4d:29:19:f6:7f:b5:5f:fd:fd:33:
fc:88:c8:07:cd:e8:d8:85:20:31:e2:bd:c2:e8:4a:09:85:ae:
fc:77:a0:92:af:e8:ae:02:c3:6a:21:78:ad:39:67:70:f2:f5:
08:37:0a:05:de:47:6f:f9:1a:88:07:fc:07:c8:a5:e8:c0:36:
eb:60:a0:1e:17:4e:d1:59:90:a5:88:a8:12:ef:0c:61:9c:1f:
4e:d7:d5:0a:76:d7:d3:13:78:92:91:d6:f9:51:2b:4f:e8:15:
96:e6:c5:4e:84:8d:98:fa:71:61:aa:98:ae:8b:88:82:d8:bf:
3c:13:18:bf:a0:3f:d9:69:bb:a1:62:f5:35:83:62:3c:66:63:
04:d0:69:27:15:03:41:04:e2:43:f5:69:79:32:a3:30:99:6f:
30:4f:42:c2:1d:9f:51:9b:93:9b:b5:e0:83:38:5e:1f:2c:f0:
72:6b:81:d3:11:00:66:86:3c:b1:29:ed:4b:a4:9b:3a:d5:f7:
c5:76:b1:5f:23:92:cb:ac:bb:ca:80:a8:88:a4:4a:14:2a:60:
62:67:0f:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQuoqH2fj3YDcvZnco/IKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjMwMTAxMjEzNTM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGNhZDgzNjQ2NzZlMzllMTNiMjE5YTgzNzJjODU5NmVlOWJmMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQjfqkVW3fZv8wXHSGOSj5QlVWo6
5mkOuALP7TTh3GmfSdsltcJAx9+D7gHyEU/T/Vh8zPsIZUr7STtvBdXScVwWH31I
YZLqIHiKPXkzs6WQBspRr8vn2aVyIQZn6B8BLYJyVdNjqotrFHxF8jvG13hi8Gwu
mI3EX2yU7xxmodqsl1MZQlkoMWvuKMDvsBJE4asayjS8UT6jjRt1gybuDlXr0ccc
4shxXhxQAq5dmEGlp0SYnt7XDcVWiRKDr9fNUCGp7HXzsHc2qcW9Rnm1juk/M18r
c61I0OZcrS8wUGDcC5P8b0ZUsJ/XRRNk2AvipF2m6S0e1T2/VyIrHr+z1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH3K2DZGduOeE7IZqDcshZbum/IKMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvZmNyWU5rWjI0NTRUc2htb055eUZsdTZiOGdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaCdMA0G
CSqGSIb3DQEBCwUAA4IBAQA/J/sdgZ6gRL1o10zDmMQJoyASeADY7Awp+UnVCA5j
K9P1awmAuYfDjpAY7E0pGfZ/tV/9/TP8iMgHzejYhSAx4r3C6EoJha78d6CSr+iu
AsNqIXitOWdw8vUINwoF3kdv+RqIB/wHyKXowDbrYKAeF07RWZCliKgS7wxhnB9O
19UKdtfTE3iSkdb5UStP6BWW5sVOhI2Y+nFhqpiui4iC2L88Exi/oD/ZabuhYvU1
g2I8ZmME0GknFQNBBOJD9Wl5MqMwmW8wT0LCHZ9Rm5ObteCDOF4fLPBya4HTEQBm
hjyxKe1LpJs61ffFdrFfI5LLrLvKgKiIpEoUKmBiZw+D
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:51 2024 by rpki-client on console-ams.rpki-client.org