Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/Jj1ctZ3U34ZL8mA0kmJgLDlsonw.roa
File: Jj1ctZ3U34ZL8mA0kmJgLDlsonw.roa (raw, json)
Hash identifier: 9RFcAKEtUZaG4k1aawCr5z46GLd09Xr3BOEWFTD2i9w=
Subject key identifier: 26:3D:5C:B5:9D:D4:DF:86:4B:F2:60:34:92:62:60:2C:39:6C:A2:7C
Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial: 01856B8A2D41195B45597F25A9EDAF188969
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/Jj1ctZ3U34ZL8mA0kmJgLDlsonw.roa
Signing time: Sun 01 Jan 2023 04:14:55 +0000
ROA not before: Sun 01 Jan 2023 04:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.160.152.0/22 maxlen: 22
185.160.152.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 28 Feb 2023 12:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:2d:41:19:5b:45:59:7f:25:a9:ed:af:18:89:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Validity
Not Before: Jan 1 04:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=263d5cb59dd4df864bf260349262602c396ca27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:66:51:8e:f7:9c:01:50:23:6c:21:ce:fb:
20:c6:bc:92:18:b3:30:72:dd:97:79:99:56:15:e1:
88:6d:17:12:1b:cf:64:6d:62:c3:a0:63:1e:b7:fb:
6a:56:4b:d7:aa:d6:cb:c7:10:88:7b:43:1f:7d:74:
3d:06:07:7c:4c:3a:74:0d:87:2a:9f:7c:76:70:1c:
32:06:c0:2b:db:34:20:d2:f9:cf:d9:8d:0a:8d:d2:
5f:3b:e7:91:69:07:fc:92:eb:9e:56:81:79:fd:bc:
7b:e2:fe:fb:a5:55:84:b3:6e:7a:82:b9:4c:d6:4d:
b0:51:da:ac:4b:c2:dd:36:f0:54:0c:4e:e2:aa:a4:
5f:27:af:53:91:99:93:1e:e8:7e:0a:04:ab:f8:6b:
8f:89:40:20:a3:1f:9d:f0:19:6e:ed:d9:64:67:7d:
0a:84:ce:8d:ec:7d:74:01:fe:75:be:83:0d:20:4b:
6d:c6:f6:0f:d1:a6:f2:c1:8b:ad:12:2d:4c:f4:9a:
4d:98:9e:93:81:cf:6d:70:40:ed:ac:44:98:74:34:
c7:09:1d:78:ab:e3:20:fa:5d:69:1c:5c:d2:a9:98:
c9:d8:bc:a9:08:5b:58:b7:0e:e5:9c:f8:bd:9e:77:
fd:d5:dc:a0:1e:85:b5:4f:fd:d4:b4:bb:6b:01:d5:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3D:5C:B5:9D:D4:DF:86:4B:F2:60:34:92:62:60:2C:39:6C:A2:7C
X509v3 Authority Key Identifier:
keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/Jj1ctZ3U34ZL8mA0kmJgLDlsonw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.152.0/22
Signature Algorithm: sha256WithRSAEncryption
08:db:9d:bd:11:15:40:34:50:a5:c9:fd:5a:fa:e7:95:1d:74:
f3:20:ec:1b:cb:35:87:17:03:42:64:04:dd:cf:f5:dd:06:4a:
6a:28:5f:b2:f5:2f:0b:55:0b:b3:15:f6:2c:9e:29:13:3d:bb:
4a:7e:4c:14:91:9f:93:08:92:8f:7a:d6:73:09:05:fe:bd:9e:
5f:c7:1c:8a:f2:17:f0:f6:fb:ab:1c:dc:9b:fd:f3:d3:4f:22:
b7:8b:bb:77:5e:f7:00:80:bc:c4:1c:2c:3e:66:3f:c0:b7:cd:
45:bb:ab:8a:cd:dd:93:b3:17:17:8d:2f:1c:6f:58:2b:89:a3:
1d:fe:6a:99:31:d0:81:3c:0b:be:7f:61:57:e7:97:7f:96:30:
f1:1d:9f:2b:cb:e2:21:fe:10:3d:db:28:5a:fc:70:2a:37:cc:
9d:4c:a3:0b:16:d1:f0:da:af:9f:42:ea:0b:9d:f6:68:0d:17:
85:59:23:cb:0f:c8:9e:b9:c4:de:3f:22:55:8f:9c:59:34:9c:
b0:91:3d:2b:7c:2b:00:59:84:db:42:7a:77:b6:60:1b:aa:05:
48:19:8e:5d:68:b4:eb:5a:81:79:38:2c:48:cd:41:b2:bc:46:
83:ed:ae:dd:18:5e:ab:cb:c4:ab:ed:20:5f:fb:5c:64:37:9f:
9a:6c:7d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:53 2024 by rpki-client on console-ams.rpki-client.org