Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/pKL7LnxyIPPV69guyC_jYjS4k_c.roa
File: pKL7LnxyIPPV69guyC_jYjS4k_c.roa (raw, json)
Hash identifier: JTSNsOcRF6aQZeHhBm3ZKjV8Lu8hqhj8eJKjE7XgOMI=
Subject key identifier: A4:A2:FB:2E:7C:72:20:F3:D5:EB:D8:2E:C8:2F:E3:62:34:B8:93:F7
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42D23D1371DF75DB3209D24F25F367
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/pKL7LnxyIPPV69guyC_jYjS4k_c.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35615
IP address blocks: 5.160.244.0/24 maxlen: 24
5.160.245.0/24 maxlen: 24
5.160.244.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d2:3d:13:71:df:75:db:32:09:d2:4f:25:f3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4a2fb2e7c7220f3d5ebd82ec82fe36234b893f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cc:a4:bc:06:51:5b:5e:72:60:17:0e:18:a0:
d7:46:85:80:c6:06:85:66:5a:cd:1a:c8:f2:d4:49:
a5:a7:c6:09:a7:ed:ad:d3:05:c4:58:bd:b7:fa:8a:
7c:e1:df:bd:9d:83:30:fc:fd:c2:35:8b:de:6d:d8:
97:dc:4c:38:de:71:59:61:36:c6:cd:33:f9:e0:fe:
a5:85:dd:43:0e:eb:5a:4a:a9:3d:48:66:70:83:98:
ac:d7:8a:4a:5f:c0:9b:61:93:97:ff:66:a5:d6:0f:
26:5c:49:0d:fe:7b:c8:48:76:6a:67:37:22:e4:80:
70:6f:4c:69:05:d8:4e:c8:83:66:89:bb:d6:63:d0:
c5:7b:76:2c:57:3e:ed:26:e4:be:cf:60:69:34:54:
8d:d2:10:b0:c5:49:15:88:82:8b:a1:ac:4e:de:b4:
7a:0c:dd:74:e9:ab:da:83:ee:f5:c8:80:67:8a:8c:
0b:81:ef:21:46:41:9e:f7:9c:a9:b2:9e:77:55:2c:
13:b1:96:07:c3:77:21:f6:85:13:00:8e:0c:3a:bc:
0d:a9:02:67:8e:f2:54:8f:06:da:1f:13:70:9d:47:
1f:36:77:5b:bc:00:79:4a:e3:54:b4:37:cd:46:19:
e6:ad:ae:99:ff:94:cb:8b:a3:68:6c:9a:fd:79:63:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A2:FB:2E:7C:72:20:F3:D5:EB:D8:2E:C8:2F:E3:62:34:B8:93:F7
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/pKL7LnxyIPPV69guyC_jYjS4k_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.244.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:d5:4f:86:af:9a:eb:92:55:10:43:da:fc:76:b6:15:1f:24:
4b:3e:be:d3:34:bd:4b:4e:08:83:78:86:0a:7d:bc:fc:07:b1:
28:b7:32:e4:ca:db:50:0c:67:c9:96:90:60:95:2a:e5:9a:54:
68:e1:7e:e2:f7:4e:53:4e:d8:2e:71:da:1b:12:d6:b2:d0:43:
9a:d7:cb:81:fe:3d:89:9d:c0:70:fc:8d:25:f0:b4:9c:48:66:
90:14:3a:d1:d4:a0:12:12:f6:8c:e4:34:ef:f0:c7:77:28:10:
66:f2:5a:6d:3e:af:d4:20:78:8c:52:1c:60:ec:ca:3e:af:52:
61:01:f7:fc:c2:e9:0a:f8:76:42:d3:e4:bb:cf:04:e1:3c:08:
20:51:92:db:32:a0:cc:a3:a7:1a:57:7d:c5:4f:0b:f9:10:5d:
08:a2:6f:ce:9b:b1:f8:8d:7b:e9:1c:37:ab:8b:da:f0:a8:bd:
49:8c:47:6d:67:dd:a1:86:12:97:07:3d:e1:6f:01:6d:e3:93:
1f:74:88:06:05:a6:8d:f4:c8:76:dd:f9:70:5b:a3:79:cf:be:
cd:dd:8f:89:0d:66:61:5e:28:dd:f8:c4:d2:7c:42:14:ae:ac:
5c:0d:f8:b2:2f:e2:5f:16:b2:38:e1:3b:93:c9:b0:0d:a9:6b:
ec:35:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:52 2024 by rpki-client on console-ams.rpki-client.org