Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/L1QLtYkV6Q7r7oe8K3VHIbBhHj0.roa
File: L1QLtYkV6Q7r7oe8K3VHIbBhHj0.roa (raw, json)
Hash identifier: TPSXlCjiOzeoIyJ5a9t+0XH2XS4neUIHB/iCId72hY0=
Subject key identifier: 2F:54:0B:B5:89:15:E9:0E:EB:EE:87:BC:2B:75:47:21:B0:61:1E:3D
Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Certificate serial: 018DC1A572FD19DA8D016EB6D8E1DD6E1278
Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/L1QLtYkV6Q7r7oe8K3VHIbBhHj0.roa
Signing time: Mon 19 Feb 2024 13:54:22 +0000
ROA not before: Mon 19 Feb 2024 13:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2116
IP address blocks: 193.160.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 28 Feb 2024 16:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:a5:72:fd:19:da:8d:01:6e:b6:d8:e1:dd:6e:12:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Validity
Not Before: Feb 19 13:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f540bb58915e90eebee87bc2b754721b0611e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:39:6f:bf:c0:6f:b8:c7:55:57:7f:e4:58:
69:33:8f:b4:21:5d:83:5f:01:1d:ad:c7:00:d2:af:
64:6a:08:0a:d6:be:aa:ce:93:2c:10:c9:ac:4b:ba:
37:2a:9e:a9:d4:79:d9:0e:9f:14:45:ca:1c:bb:b7:
f4:24:7b:73:09:cf:0a:52:65:6b:21:aa:d3:4e:d6:
26:6a:31:99:92:bb:f0:bf:82:ff:6d:4f:79:13:f7:
b6:41:87:74:63:74:16:d4:da:3f:a6:c9:9e:fa:d2:
17:e1:15:8e:e9:7e:72:e2:a0:32:94:e5:a9:ed:78:
ed:26:54:40:f3:85:1f:c1:7c:3d:90:fd:33:d3:06:
ca:97:be:dc:db:7f:7a:e6:14:96:fe:90:df:1e:6e:
23:26:3e:f7:09:ec:14:f5:9b:8f:9e:44:d0:d6:25:
49:0c:e9:94:37:38:4c:4b:af:09:e1:3f:cf:3c:57:
9a:39:1e:ab:e7:a8:01:97:a1:85:29:04:e4:2f:5d:
60:6e:1a:94:dc:4c:42:3f:7c:76:0b:a1:f4:a1:f7:
aa:8a:df:cd:c3:54:54:af:a2:b8:9d:8e:b3:a7:a5:
a5:c6:22:22:ca:1e:f6:cd:c0:4b:37:7a:4f:c0:00:
3d:c0:3e:f6:32:01:ed:ac:bf:df:0a:c3:99:b7:19:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:54:0B:B5:89:15:E9:0E:EB:EE:87:BC:2B:75:47:21:B0:61:1E:3D
X509v3 Authority Key Identifier:
keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/L1QLtYkV6Q7r7oe8K3VHIbBhHj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.184.0/22
Signature Algorithm: sha256WithRSAEncryption
82:51:a5:50:48:73:11:fb:15:b1:8c:4f:8e:55:ae:ba:88:81:
56:20:e6:5a:d9:79:4b:40:d1:4b:a4:bd:24:ce:f7:0d:bc:b1:
80:e4:8d:d4:7d:85:70:ba:e1:11:b5:42:7d:6e:dd:10:bc:e3:
eb:a9:62:fe:41:42:d6:ce:63:ee:76:c5:9d:61:68:fe:c7:87:
79:72:05:e1:1b:c3:c5:a2:fd:c0:a7:4c:8e:1e:fb:a7:34:9e:
b3:a4:67:d0:7d:fe:92:33:b2:59:61:a1:58:f4:83:0e:c5:c5:
1c:d3:b7:5c:31:25:86:71:04:26:44:ee:61:f9:e5:e0:5f:cd:
dd:d5:d3:7c:2d:98:0f:f6:31:a7:b0:8d:f5:a2:f8:c1:5a:c1:
da:5b:a9:3a:5a:be:72:0f:f7:4c:e1:4d:7b:17:14:29:45:ae:
2d:fa:6b:27:42:88:9c:47:d8:69:15:7a:44:9f:29:a8:b6:a8:
5c:ea:fb:ab:f8:83:3f:99:df:e3:2d:36:1e:93:61:90:06:10:
99:c7:2d:cf:d2:e3:4e:6c:e1:63:a4:e9:c7:2b:d9:43:02:e4:
35:1b:c3:8b:7a:bc:dc:2b:86:56:cd:01:2d:40:82:41:16:7d:
4c:06:e1:cc:3a:db:2f:06:e4:0f:c2:26:a0:43:60:11:2b:47:
43:04:ad:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:17 2024 by rpki-client on console-fra.rpki-client.org