Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fi7rds_exnZSHZPHqoe_QHsQVsw.roa
File: fi7rds_exnZSHZPHqoe_QHsQVsw.roa (raw, json)
Hash identifier: +uWYwzseGkkVD6RPTz2CnIDWfOAYCvZ3Fbxsi9pNzAs=
Subject key identifier: 7E:2E:EB:76:CF:DE:C6:76:52:1D:93:C7:AA:87:BF:40:7B:10:56:CC
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42E343BBA0A86A43CD6EDB951704E8
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fi7rds_exnZSHZPHqoe_QHsQVsw.roa
Signing time: Sun 01 Jan 2023 21:35:32 +0000
ROA not before: Sun 01 Jan 2023 21:35:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60320
IP address blocks: 5.160.78.0/24 maxlen: 24
46.209.0.0/23 maxlen: 23
46.209.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e3:43:bb:a0:a8:6a:43:cd:6e:db:95:17:04:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e2eeb76cfdec676521d93c7aa87bf407b1056cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:bc:f2:aa:25:1f:92:42:c7:7d:04:c5:8d:
2d:df:ae:85:5f:de:0d:18:aa:b8:41:e9:2e:e2:21:
ee:18:4b:0b:0a:92:12:b3:e8:0f:21:f8:72:41:4a:
7b:ca:80:32:6d:b6:46:b2:88:ea:dc:ac:1b:e7:05:
09:01:32:aa:4e:57:6b:cd:aa:d2:ad:19:fe:0e:fe:
56:fb:22:df:87:0c:ea:e0:19:db:49:8e:40:16:35:
ec:6f:3d:ef:d2:2f:b2:fe:74:96:25:fa:37:04:db:
b3:21:41:ec:3e:21:1d:0f:f9:1c:69:f4:df:6a:bf:
bc:c1:4d:30:2e:81:4d:db:2d:7a:c0:82:8f:a5:08:
7f:4c:de:bc:ac:83:ae:09:75:5d:28:b5:d3:1d:49:
68:7e:2f:fd:50:84:80:99:c5:67:94:c0:ea:35:2b:
0b:22:a3:c7:25:b6:19:b4:14:32:fa:fd:96:f4:b7:
11:77:9b:99:cc:ea:1d:36:50:8e:ef:7f:f2:4c:70:
c6:f1:8d:60:b7:66:c7:1c:15:83:3a:f4:ca:8a:7f:
ae:e4:32:69:46:b3:70:80:b1:46:9e:03:a8:d6:1e:
1f:f4:cf:89:a9:71:1a:ed:12:11:90:4c:b2:8e:73:
34:3c:4b:17:27:0c:e6:b7:f6:b4:f0:77:75:7f:d0:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2E:EB:76:CF:DE:C6:76:52:1D:93:C7:AA:87:BF:40:7B:10:56:CC
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fi7rds_exnZSHZPHqoe_QHsQVsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.78.0/24
46.209.0.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:75:15:9b:18:7b:95:7e:ea:51:67:6e:6a:c3:5b:b7:96:91:
2f:6d:c7:8d:55:5f:b1:12:c7:f2:7a:8e:54:b7:d0:b3:65:97:
0f:e6:e5:73:85:95:3f:19:88:3f:e1:7a:92:b9:4b:00:c0:e3:
3c:b7:3e:4d:b5:10:d9:3d:63:e2:1d:54:0e:58:8c:2e:d5:e5:
2a:c8:71:39:b3:85:21:f7:9e:bf:b2:1c:a0:49:f0:3f:ff:e6:
9a:19:15:46:de:96:23:63:11:84:03:4d:a2:43:5d:fb:14:2d:
72:46:77:f2:70:ed:dd:13:a4:e8:d8:f8:41:06:62:7e:1b:e2:
69:97:72:ce:ad:dd:a6:aa:36:44:4d:cc:a9:aa:6d:28:10:44:
eb:2d:f0:19:70:65:e9:67:95:0a:d1:bd:9e:fb:12:97:ba:c8:
de:23:bb:21:c0:7e:79:c9:7b:a8:31:de:0c:5f:e9:b4:62:1d:
a2:10:bd:f3:d6:55:1f:3d:8f:7e:2d:27:76:a4:0c:3a:f5:52:
7a:e5:7d:57:75:08:c8:4b:25:7a:28:12:00:61:9b:fb:a9:c2:
86:74:a7:ed:9b:83:28:5f:65:38:d5:d0:c2:7e:63:4b:19:9e:
5a:c6:63:9d:31:42:ab:d1:06:d9:f9:12:89:7c:a4:ba:69:d7:
67:f9:0f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org