Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/pulZyRNX0_M7CAMajeGqj-WZCB8.roa
File: pulZyRNX0_M7CAMajeGqj-WZCB8.roa (raw, json)
Hash identifier: 16Celtf5+l4to/ucxWZ2rcT+6z6W/vfhxg00iu3LqO8=
Subject key identifier: A6:E9:59:C9:13:57:D3:F3:3B:08:03:1A:8D:E1:AA:8F:E5:99:08:1F
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 0188671F9C1BC413446F14B8653E2D2C4821
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/pulZyRNX0_M7CAMajeGqj-WZCB8.roa
Signing time: Mon 29 May 2023 10:48:24 +0000
ROA not before: Mon 29 May 2023 10:48:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 5.160.77.0/24 maxlen: 24
46.209.57.0/24 maxlen: 24
46.209.56.0/23 maxlen: 24
46.209.214.0/24 maxlen: 24
46.209.134.0/24 maxlen: 24
46.209.134.0/23 maxlen: 23
46.209.133.0/24 maxlen: 24
5.160.208.0/23 maxlen: 23
5.160.111.0/24 maxlen: 24
5.160.110.0/24 maxlen: 24
5.160.110.0/23 maxlen: 23
5.160.131.0/24 maxlen: 24
5.160.130.0/24 maxlen: 24
46.209.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:67:1f:9c:1b:c4:13:44:6f:14:b8:65:3e:2d:2c:48:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: May 29 10:48:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6e959c91357d3f33b08031a8de1aa8fe599081f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:bd:52:16:f2:71:20:b3:ba:80:14:cb:ca:
e1:c7:80:2c:f6:b2:02:e3:cf:71:67:85:67:a0:d9:
ce:ce:29:32:5b:33:03:74:9a:26:d0:e2:52:eb:c5:
0f:c8:06:f4:64:6e:89:0a:dd:70:d7:91:46:6a:a7:
a7:56:8f:70:0b:fd:cb:e8:53:80:d6:05:ec:7b:fb:
f2:f9:5c:70:f5:cc:5b:92:55:e5:68:49:3f:f7:f7:
22:3f:c8:96:c3:0a:e2:19:a3:74:66:0f:fd:11:54:
12:e4:09:2a:74:7c:79:54:48:5b:2b:5c:9c:50:51:
97:4d:27:1b:20:55:1d:a5:b4:15:7c:fc:df:12:52:
2c:f1:69:fd:ae:d3:91:a5:e5:2a:80:b4:9d:ed:cd:
00:68:03:02:ee:cc:40:77:73:bd:5a:af:41:31:f0:
e0:5a:68:b9:40:52:fb:4c:a9:67:63:be:73:22:a8:
e8:11:38:59:e9:e6:ed:f8:66:6a:f4:cb:07:fa:21:
ea:cc:13:9a:c7:ce:20:f7:c9:2a:f6:dc:c9:62:e3:
74:d1:fd:b5:c3:1d:28:cd:77:98:d9:6f:90:57:d3:
61:d5:3d:33:f7:8c:40:d6:55:21:83:ef:bc:25:77:
e8:fb:77:ff:e5:6a:98:21:31:c5:4c:35:28:b4:53:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E9:59:C9:13:57:D3:F3:3B:08:03:1A:8D:E1:AA:8F:E5:99:08:1F
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/pulZyRNX0_M7CAMajeGqj-WZCB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.77.0/24
5.160.110.0/23
5.160.130.0/23
5.160.208.0/23
46.209.56.0/23
46.209.108.0/22
46.209.133.0-46.209.135.255
46.209.214.0/24
Signature Algorithm: sha256WithRSAEncryption
80:bd:21:5e:75:1d:ec:c8:9c:1e:c1:32:1d:d7:0e:7b:a2:16:
d1:77:41:2a:c5:3a:04:c3:78:dd:63:4d:c4:06:5f:e3:d0:79:
d0:97:f8:d8:17:0c:c2:ef:46:3c:14:69:1d:88:d9:83:bc:83:
d6:e7:09:fd:47:4c:14:dc:89:e6:c0:ad:8a:4a:c6:ca:48:af:
78:7e:53:bf:cb:23:47:3d:de:bd:1b:f5:ce:9a:0b:3d:84:c5:
06:db:85:ee:4f:d7:48:6a:d5:f4:4f:ab:2c:77:c0:3c:c5:91:
79:4d:27:ee:cd:2d:9a:69:95:2d:56:b2:d2:89:4d:5b:4a:02:
13:1a:61:5d:1a:f8:55:d7:a4:56:46:61:55:9b:24:ed:68:23:
9b:03:a9:6b:ce:ab:24:63:b5:d2:6d:f8:b3:8f:63:63:bb:8c:
09:41:b1:72:97:d3:a0:4b:c4:bb:28:2f:da:30:d9:46:ec:95:
33:e1:0d:56:c2:5e:1e:94:96:1e:e4:52:ae:f7:f8:0f:54:d6:
41:89:99:89:83:2d:7f:d4:e8:18:2d:1f:8e:d3:d6:00:d9:a4:
23:f8:88:d5:28:27:c3:43:35:f9:b9:d2:5b:85:d6:1d:b3:59:
3b:58:38:c9:b3:d4:54:ff:cc:03:1d:71:7b:63:4c:e6:b8:3b:
c3:cb:6b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org