Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/E_hG-Nl2TxooPtIMCq3TSAM3G3M.roa
File: E_hG-Nl2TxooPtIMCq3TSAM3G3M.roa (raw, json)
Hash identifier: bKLLVYrvFL6fWIHBSWYkfv7+7CrC4+dGDRZBKsaEcec=
Subject key identifier: 13:F8:46:F8:D9:76:4F:1A:28:3E:D2:0C:0A:AD:D3:48:03:37:1B:73
Certificate issuer: /CN=65179265803b7804d0fccf5962a8b163743e0d1e
Certificate serial: 018BDDC204547243DC13A4CF7293795F7B10
Authority key identifier: 65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/E_hG-Nl2TxooPtIMCq3TSAM3G3M.roa
Signing time: Fri 17 Nov 2023 14:49:21 +0000
ROA not before: Fri 17 Nov 2023 14:49:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 160.214.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Dec 2023 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:c2:04:54:72:43:dc:13:a4:cf:72:93:79:5f:7b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65179265803b7804d0fccf5962a8b163743e0d1e
Validity
Not Before: Nov 17 14:49:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13f846f8d9764f1a283ed20c0aadd34803371b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:21:c9:78:b7:47:38:20:d1:f4:0e:94:73:e9:
bc:0e:61:de:90:f0:a0:37:d7:fc:32:67:87:20:da:
4e:23:83:ff:3e:ae:38:ac:61:b2:c0:a8:b8:e9:26:
40:65:1f:78:3c:f0:22:32:48:e0:43:d2:33:51:93:
70:e5:bd:7d:30:4f:8a:40:eb:11:6f:c5:ee:69:f0:
a8:3f:94:25:73:5a:a8:74:d1:b0:56:97:e7:6a:53:
00:c7:c7:c4:ae:07:0e:7c:bf:54:58:d5:30:bd:2c:
d2:f2:cf:5b:9c:e3:fe:24:2a:f3:3a:60:07:dc:c9:
cb:1c:f3:96:d3:a1:98:38:e3:c8:81:9f:12:74:f5:
6c:54:28:ee:02:f2:81:01:56:5b:f9:38:f3:e2:7d:
14:fc:44:a0:7b:b5:e7:22:91:db:a5:15:82:28:43:
df:2b:97:05:6f:5f:89:cb:07:5b:d5:8b:55:a5:c9:
16:0b:a0:66:b8:74:90:4f:d8:b1:84:f3:af:b2:88:
f1:fa:6e:12:06:1f:3e:51:05:87:31:91:ae:56:34:
7a:cb:ff:49:46:01:8f:5a:11:6b:4f:29:4c:55:91:
14:59:c0:6b:48:dc:a9:80:2d:3a:7e:a4:af:af:56:
18:96:dc:4d:9d:75:6c:66:54:cf:02:5a:fa:b4:36:
b5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F8:46:F8:D9:76:4F:1A:28:3E:D2:0C:0A:AD:D3:48:03:37:1B:73
X509v3 Authority Key Identifier:
keyid:65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/E_hG-Nl2TxooPtIMCq3TSAM3G3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.214.113.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:92:af:46:41:bc:96:63:71:21:bb:ca:4f:18:2e:25:27:07:
93:b0:59:da:ea:ce:8e:fb:f0:fe:72:a7:c5:ca:45:a0:a6:91:
68:4d:09:78:74:7e:2f:c3:18:35:a4:cb:5c:9d:c5:e2:04:eb:
5d:22:d2:7f:73:e9:f6:e3:3b:fa:0d:e2:00:82:72:12:2d:5b:
fc:fe:33:e1:77:5e:c0:d7:51:5c:c6:1b:3d:5e:7d:9c:aa:28:
b4:bb:32:40:b3:9b:85:52:a5:ce:5b:7c:01:3a:fd:ac:8f:e4:
6a:df:a5:6d:5d:56:74:2e:90:47:82:d9:ac:d1:7c:ca:0b:d5:
ce:f2:18:db:05:da:7a:92:47:76:f8:44:70:3e:d8:b3:6d:66:
5d:aa:43:33:de:1a:bb:be:8d:e6:78:cb:7e:94:d6:9b:2b:77:
52:ab:0e:50:29:17:15:7c:77:96:59:ee:8a:e2:f8:af:b4:bb:
97:d7:31:ac:7d:67:f1:82:20:35:a1:12:54:9a:b6:b8:1f:fd:
a6:c9:fa:ed:15:73:87:40:32:06:e7:8e:e2:f8:b5:bc:c3:a1:
e6:65:a9:d9:c3:4c:21:17:2b:11:40:e2:84:24:ef:88:c0:3f:
49:84:de:95:4a:29:37:1e:4e:85:92:eb:83:85:8c:16:76:fd:
27:99:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:11 2024 by rpki-client on console-fra.rpki-client.org