Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/h-KQvky5z49LcJG4xgUeuIorfmg.roa
File: h-KQvky5z49LcJG4xgUeuIorfmg.roa (raw, json)
Hash identifier: FbkxouU97zPLFD0aQovbY0bHCaTQPkmu1lspi7bhr1s=
Subject key identifier: 87:E2:90:BE:4C:B9:CF:8F:4B:70:91:B8:C6:05:1E:B8:8A:2B:7E:68
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018B18D246FECF580AE568E1A6332552CBAE
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/h-KQvky5z49LcJG4xgUeuIorfmg.roa
Signing time: Tue 10 Oct 2023 09:01:55 +0000
ROA not before: Tue 10 Oct 2023 09:01:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60539
IP address blocks: 5.160.77.0/24 maxlen: 24
77.104.92.0/24 maxlen: 24
5.160.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 09:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:d2:46:fe:cf:58:0a:e5:68:e1:a6:33:25:52:cb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Oct 10 09:01:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87e290be4cb9cf8f4b7091b8c6051eb88a2b7e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:75:4e:19:06:d7:ac:26:f6:ee:95:4f:97:af:
32:2c:78:ed:ff:8e:4e:c7:d0:2e:c2:b6:70:a4:0f:
01:bb:3d:ed:84:ac:9a:7b:5d:9e:05:96:72:69:b7:
08:ff:48:fa:24:9d:f2:0d:0f:24:4d:21:ca:dc:af:
0d:5b:71:86:2b:0d:3b:f6:00:8b:c5:70:03:78:a1:
9b:af:41:11:48:eb:b8:b1:8a:56:f0:45:ef:34:6b:
a3:a5:47:ae:7b:34:02:25:36:26:11:06:71:ef:a0:
87:5e:83:78:24:76:65:5b:5d:df:d3:9c:59:40:1a:
68:c5:b5:d4:a8:b6:9c:2e:6a:66:52:4e:64:cb:5b:
05:69:96:7c:74:cc:34:45:ec:fd:9c:c0:a0:4b:3a:
3f:ee:5a:e3:75:fe:dd:dc:da:31:55:9c:e3:9e:ac:
8d:a5:01:f8:d1:89:94:0e:66:d6:ea:3a:e2:be:a6:
c8:37:58:63:64:83:68:1e:5e:58:49:30:15:54:a5:
0e:9b:dc:11:c6:a3:35:0e:00:0c:cc:82:9f:ff:1c:
54:8a:d9:50:c5:09:79:f5:b4:2c:80:e4:94:98:28:
04:8a:6b:aa:1d:0e:d8:66:cf:9c:3a:ad:e3:bb:5a:
9f:69:b5:1b:d9:d6:c4:30:94:93:b0:2e:70:bf:18:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E2:90:BE:4C:B9:CF:8F:4B:70:91:B8:C6:05:1E:B8:8A:2B:7E:68
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/h-KQvky5z49LcJG4xgUeuIorfmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.77.0/24
5.160.110.0/24
77.104.92.0/24
Signature Algorithm: sha256WithRSAEncryption
45:12:de:2f:94:d9:67:8f:f4:a2:4c:a6:6f:cf:22:5b:56:01:
ae:31:c6:89:df:a3:75:ab:eb:4e:51:45:33:0d:47:ea:89:88:
a5:39:3b:e9:4e:42:3f:d8:fd:fc:f9:41:a7:a8:72:76:54:c1:
e3:5d:00:c3:32:86:53:e6:8c:a2:55:4c:1b:b6:8e:ca:3e:a9:
c3:08:0c:51:53:45:57:73:af:5d:9b:ef:b5:68:6c:95:70:a9:
26:72:ea:b9:16:95:26:88:e7:ed:a9:af:7a:86:ce:7b:80:d2:
87:51:a5:e2:73:bc:c2:9c:e8:53:4e:9d:b1:fe:62:93:d3:37:
c8:cf:45:dc:fc:62:bb:b7:e8:a2:3e:40:12:be:9b:aa:58:91:
53:ef:1c:cb:12:0c:fa:e9:76:0a:40:91:da:2e:f8:0a:fd:52:
c7:fd:a9:97:2d:9c:56:b2:6f:02:c7:65:ef:c7:fb:c9:c4:03:
43:c1:e7:3f:d4:a9:35:b2:bd:f4:fb:19:4e:2a:2f:c2:4a:cf:
4a:45:84:03:60:c5:32:8e:d8:3d:6a:3e:0e:85:38:a7:71:ce:
99:8e:2b:6b:ea:16:c3:a8:5b:a3:77:5e:fe:93:7c:00:13:8b:
19:bd:38:fb:f2:fa:dc:43:e4:30:a8:5d:d8:b0:19:e5:e0:07:
ce:2d:e3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org