Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/jHGApxPAwozq42weiNJpSlpp-d4.roa
File: jHGApxPAwozq42weiNJpSlpp-d4.roa (raw, json)
Hash identifier: 8fhgiPLpPt0xZ4PvFug0Pg09tRufKgsaZ9h1dChAvDU=
Subject key identifier: 8C:71:80:A7:13:C0:C2:8C:EA:E3:6C:1E:88:D2:69:4A:5A:69:F9:DE
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018B18DA84B5186F83AFB3CE13F4C695319C
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/jHGApxPAwozq42weiNJpSlpp-d4.roa
Signing time: Tue 10 Oct 2023 09:10:55 +0000
ROA not before: Tue 10 Oct 2023 09:10:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60539
IP address blocks: 5.160.77.0/24 maxlen: 24
77.104.92.0/24 maxlen: 24
5.160.110.0/24 maxlen: 24
5.160.111.0/24 maxlen: 24
5.160.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:da:84:b5:18:6f:83:af:b3:ce:13:f4:c6:95:31:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Oct 10 09:10:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c7180a713c0c28ceae36c1e88d2694a5a69f9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:63:ca:b9:2d:4a:23:a9:0a:29:19:25:65:
d7:80:cc:c4:33:18:27:d2:70:e6:48:2e:d8:ec:88:
04:74:c5:de:04:f7:4a:96:80:db:86:c5:ce:76:e8:
36:be:19:f3:34:b6:d4:cc:1c:ac:72:72:b1:15:03:
b2:11:36:cb:90:15:9d:f5:ee:15:47:18:88:9f:91:
39:9f:b3:86:6c:0e:40:eb:24:c4:b3:6f:f4:df:81:
a4:9d:77:e9:89:20:27:b0:ac:89:ef:71:b2:aa:05:
e9:e7:f2:be:ab:9a:44:6d:4f:d2:4e:c8:fc:6f:04:
cd:72:0e:e0:81:f7:4f:c6:48:9c:39:30:68:46:18:
33:50:ff:01:22:83:c2:43:07:1b:50:97:54:37:a0:
9a:cb:29:33:6e:ee:80:2d:dd:68:55:fb:f8:ec:01:
74:ed:ab:cb:b8:3d:7e:15:5f:24:4f:34:89:08:06:
20:4e:92:10:fc:49:de:19:b6:14:38:90:b6:bf:22:
26:af:5f:d1:e8:d6:d2:ef:c8:6a:59:c3:92:a4:61:
84:60:19:5f:90:92:b0:6c:fd:03:15:a1:eb:62:34:
ac:a8:56:4e:7e:27:4c:69:5b:90:b0:21:d9:e4:76:
0c:a8:9e:4a:b7:0a:fc:a9:63:90:0a:ce:03:04:24:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:71:80:A7:13:C0:C2:8C:EA:E3:6C:1E:88:D2:69:4A:5A:69:F9:DE
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/jHGApxPAwozq42weiNJpSlpp-d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.77.0/24
5.160.110.0/23
5.160.131.0/24
77.104.92.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1a:b7:a0:e2:1a:1e:9f:e7:57:5c:94:02:b9:73:e9:1a:35:
a1:df:08:d2:8f:b8:57:66:5e:e0:d1:76:de:5f:79:86:13:e9:
0e:19:b5:6a:bc:61:19:51:31:85:4e:bc:77:80:a9:22:ed:1e:
d9:c3:94:5e:5a:5c:30:17:cd:c9:6b:d6:32:33:fa:1b:39:f5:
80:65:65:de:79:ed:11:64:d2:33:29:b0:51:9f:48:60:b5:98:
18:ba:6c:9a:15:98:95:5e:88:e3:bd:a9:20:a6:d7:de:af:6d:
3a:98:10:f0:29:25:81:9c:97:6b:56:0d:6b:ed:2b:d9:e4:a7:
61:47:5d:03:76:8d:6f:80:e6:11:5f:d3:23:9b:22:ef:31:21:
38:ae:0c:e5:5c:1a:61:5c:00:77:8e:64:bc:96:c1:02:28:89:
6d:9d:34:27:d6:85:a0:07:34:3d:e7:6a:07:98:dc:e3:df:66:
4e:7a:35:e9:61:3d:78:6f:c0:5c:ed:b4:f5:4e:ca:07:b1:28:
bf:7e:e2:7b:f0:dc:1a:69:34:f2:78:fa:0f:b4:b3:8b:0c:4e:
b1:11:71:19:a1:6c:4a:e3:ff:c2:f7:ce:dc:1d:85:22:5f:2d:
97:5d:fc:7c:c8:86:85:1b:64:b0:3c:4c:fa:52:02:0f:4b:45:
e3:7a:b2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org