Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/4nkfnPOsC7iP4HBsEofvcuOAYsU.roa
File: 4nkfnPOsC7iP4HBsEofvcuOAYsU.roa (raw, json)
Hash identifier: lP0AOqeJuBg0bOBgTuR6JFJvvXIWJCUf8DVQz1lZ3FY=
Subject key identifier: E2:79:1F:9C:F3:AC:0B:B8:8F:E0:70:6C:12:87:EF:72:E3:80:62:C5
Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial: 018571FA185BBBCEC061078554AB89431EF7
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/4nkfnPOsC7iP4HBsEofvcuOAYsU.roa
Signing time: Mon 02 Jan 2023 10:14:53 +0000
ROA not before: Mon 02 Jan 2023 10:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2852
IP address blocks: 160.216.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:18:5b:bb:ce:c0:61:07:85:54:ab:89:43:1e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
Validity
Not Before: Jan 2 10:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2791f9cf3ac0bb88fe0706c1287ef72e38062c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:89:89:24:9a:ab:13:2f:f8:f6:49:98:be:68:
f9:cb:2a:bf:48:00:28:e8:57:aa:2a:a9:9f:80:22:
08:0d:84:18:0e:1e:14:10:81:9d:ff:bc:38:9c:19:
29:b6:aa:28:0c:09:a2:87:02:ac:e0:e2:00:22:9f:
d2:cf:5c:94:5e:b9:23:3c:9a:37:6d:93:af:79:8c:
99:1f:f3:d5:28:38:c0:18:12:70:30:d9:07:85:17:
a0:40:57:51:7d:7b:d1:c3:82:71:33:84:a7:2b:76:
7b:11:7b:25:04:52:39:70:24:3f:28:bc:cb:4d:1a:
0e:03:7f:90:a2:b8:f3:dd:65:94:3a:09:93:91:e9:
d4:7a:d9:dd:a5:11:79:f9:e0:84:cc:94:66:8c:3e:
f4:60:f1:d2:cb:5e:e3:c8:f3:c8:06:a2:d5:ed:85:
9b:4c:71:49:61:33:d0:97:d3:7b:93:8a:41:80:79:
8e:94:0c:50:a6:ac:07:83:78:29:aa:73:85:ab:b7:
09:60:64:f7:03:b2:a8:f2:47:b4:8b:1d:18:5a:1f:
98:57:86:66:11:a5:b0:b1:04:4c:20:35:a7:fb:a9:
5d:28:07:ca:de:45:45:50:35:a5:5e:c4:74:e1:88:
93:57:a9:c6:fd:14:d5:60:12:5e:9b:c9:31:b2:bf:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:79:1F:9C:F3:AC:0B:B8:8F:E0:70:6C:12:87:EF:72:E3:80:62:C5
X509v3 Authority Key Identifier:
keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/4nkfnPOsC7iP4HBsEofvcuOAYsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.216.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:1f:7e:77:79:d1:a3:fa:4e:ca:14:77:6f:7b:c2:8f:3c:6e:
2d:48:64:21:27:f3:5e:5e:b7:f5:5a:aa:28:2c:bf:48:a8:67:
2f:23:8c:4b:da:21:ad:5f:d1:7a:18:c6:d3:c4:72:2f:38:5e:
c3:38:08:1c:6d:cc:e3:69:81:71:a7:76:6f:be:ca:bc:a3:c7:
69:f1:1d:33:3d:48:ec:92:99:cf:c9:f3:db:53:b0:b4:34:5e:
ed:0b:6c:ee:74:ab:4c:bd:b4:14:9d:21:8a:a5:66:60:3a:6e:
a0:b6:36:b3:36:68:14:cb:93:89:c3:be:e5:df:bd:ed:94:33:
35:3c:53:8b:8a:b8:d0:a0:9d:24:36:07:75:e5:b5:f2:78:a4:
81:0f:1c:56:eb:0a:f9:f3:ea:69:bc:fc:dd:c2:db:83:7b:73:
5c:3c:eb:2f:a9:e6:a2:58:13:49:7c:fa:66:12:59:aa:66:5e:
4c:66:a3:97:28:b2:60:b5:af:ff:da:0a:50:34:86:70:64:3b:
d3:a8:65:26:29:24:4e:ce:5b:b1:dd:a1:07:44:71:c9:c1:73:
79:40:47:a9:c1:c3:a0:58:f4:9e:e5:dc:19:83:d9:70:02:cf:
23:5d:dd:fd:b6:ae:25:6e:67:3e:bf:d4:46:f6:e2:a6:3f:af:
ee:4d:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:21 2024 by rpki-client on console-ams.rpki-client.org