Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/_Uhs6GZCugX6FzOo5dQoQ6ObEDM.roa
File: _Uhs6GZCugX6FzOo5dQoQ6ObEDM.roa (raw, json)
Hash identifier: j48LMRW4gJjP3kGkffbpPwBgUSWumOxHPIzE7SAQXBQ=
Subject key identifier: FD:48:6C:E8:66:42:BA:05:FA:17:33:A8:E5:D4:28:43:A3:9B:10:33
Certificate issuer: /CN=65179265803b7804d0fccf5962a8b163743e0d1e
Certificate serial: 018AF5820BAB04D4341DC67B653BA3B1AA6B
Authority key identifier: 65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/_Uhs6GZCugX6FzOo5dQoQ6ObEDM.roa
Signing time: Tue 03 Oct 2023 12:27:35 +0000
ROA not before: Tue 03 Oct 2023 12:27:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 160.214.105.0/24 maxlen: 24
160.214.104.0/24 maxlen: 24
160.214.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 06:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:82:0b:ab:04:d4:34:1d:c6:7b:65:3b:a3:b1:aa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65179265803b7804d0fccf5962a8b163743e0d1e
Validity
Not Before: Oct 3 12:27:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd486ce86642ba05fa1733a8e5d42843a39b1033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:09:ce:30:5a:e4:19:a1:e6:d2:e4:78:14:
58:18:15:36:a3:65:9b:c0:6a:2c:58:2e:74:16:56:
d6:92:b7:19:4a:eb:44:b9:28:00:c6:b0:c0:72:55:
3f:2a:cd:0e:ac:7d:75:4d:91:3f:ca:78:99:3e:a4:
ad:05:d1:46:e3:6f:4c:2c:be:c5:b0:8e:49:76:f8:
20:95:97:de:32:89:2d:a0:06:26:78:9d:4e:bd:6d:
8b:5e:14:3b:41:0f:20:94:2a:b9:06:5c:cc:2a:50:
33:b8:29:03:63:14:ba:0f:82:b0:c0:77:81:87:89:
86:c7:84:7d:b9:47:21:51:29:e5:c7:ec:a6:6a:f7:
3a:32:fb:09:86:af:d5:57:a9:8f:0a:dc:bc:c9:40:
0a:9d:89:c7:0e:7e:06:a9:8b:f5:e8:55:49:72:6a:
b0:19:06:fe:6d:8a:2f:90:97:f5:14:8d:04:4b:60:
b1:9d:16:6e:e9:dd:cc:78:43:81:ac:2c:01:69:6b:
ea:ea:b2:05:29:71:3a:22:28:61:56:13:13:ff:c6:
d2:0d:96:e6:39:cb:ff:9e:e4:bb:a1:82:47:b8:d0:
58:ee:ca:ee:96:36:19:73:dc:b8:34:ec:d4:5b:d2:
7e:69:aa:3b:3d:c6:54:ea:5b:0a:c6:14:3c:3b:74:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:48:6C:E8:66:42:BA:05:FA:17:33:A8:E5:D4:28:43:A3:9B:10:33
X509v3 Authority Key Identifier:
keyid:65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/_Uhs6GZCugX6FzOo5dQoQ6ObEDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.214.104.0/23
160.214.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d6:45:99:ac:f5:02:5b:94:15:66:26:67:e3:1e:f3:4b:a7:
40:91:7a:9f:84:a1:af:4e:04:0a:0b:d9:f2:6e:22:c2:8c:28:
31:ef:86:30:8a:ca:55:a7:ac:b6:8f:8f:cc:a0:6f:96:83:cd:
d5:90:1f:7b:02:09:8b:78:83:79:19:6c:f9:76:6c:d9:1c:20:
d4:76:f6:77:88:96:05:ba:4e:46:ab:05:70:56:f9:c7:a9:4e:
84:6c:ce:d3:2c:7b:c5:d0:de:0b:31:23:ec:67:18:61:2d:09:
aa:3a:22:7e:76:57:e5:87:ef:76:71:5b:87:5f:5a:b6:26:d6:
d1:14:d1:cc:af:e8:e0:64:12:7f:93:4b:e9:54:aa:a4:a9:ba:
64:cd:df:7d:fd:11:42:97:2d:dc:2a:82:54:b2:fd:a4:22:af:
10:55:90:96:71:32:61:d8:ef:d5:70:82:a5:ca:53:ff:a7:61:
67:20:7d:c8:0b:f8:af:08:a0:93:15:9b:79:57:f8:e2:dc:13:
55:36:bf:35:9b:42:01:ab:70:24:f0:27:08:74:c4:4a:33:76:
eb:09:b8:11:34:c4:58:6e:af:45:6b:73:b2:bb:15:30:31:a2:
bc:52:39:53:20:e9:40:5f:87:65:d5:8f:c4:f3:9a:50:5e:3e:
2c:45:2e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:11 2024 by rpki-client on console-fra.rpki-client.org