Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/F3Em-jfNL72UX6Pqb5I_DNK0bcg.roa
File: F3Em-jfNL72UX6Pqb5I_DNK0bcg.roa (raw, json)
Hash identifier: nOErUIYxAAww0C/OIdpNSJlA3J2q2qe3lilouDnFTck=
Subject key identifier: 17:71:26:FA:37:CD:2F:BD:94:5F:A3:EA:6F:92:3F:0C:D2:B4:6D:C8
Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6
Certificate serial: 01856F5486E03580E00F6F22649F73D1274B
Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/F3Em-jfNL72UX6Pqb5I_DNK0bcg.roa
Signing time: Sun 01 Jan 2023 21:54:48 +0000
ROA not before: Sun 01 Jan 2023 21:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59573
IP address blocks: 91.243.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:86:e0:35:80:e0:0f:6f:22:64:9f:73:d1:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6
Validity
Not Before: Jan 1 21:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=177126fa37cd2fbd945fa3ea6f923f0cd2b46dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:94:73:09:db:cd:30:ee:38:f0:ce:97:67:
28:81:e5:27:bc:70:dd:50:55:23:cd:1b:52:33:ba:
0d:69:ba:f7:6e:0b:7b:79:3e:06:c2:b9:7b:86:9d:
6d:07:c8:87:16:0c:33:58:cf:82:17:1b:15:db:82:
ea:03:36:91:c2:25:78:78:c9:be:87:b7:b0:3b:65:
df:25:3c:db:da:6c:55:ac:32:12:60:c3:99:37:fe:
17:74:df:49:f9:7e:b3:42:ac:3c:f1:d9:24:dc:a6:
48:ff:79:42:fe:b4:b4:2c:01:71:c7:30:46:e6:9d:
3c:12:bf:c4:10:89:54:e6:f3:31:ec:17:01:11:3f:
5d:c4:ff:dc:a3:9e:33:91:bb:4d:fe:d1:b6:47:18:
22:bf:59:1e:c7:f8:cd:7e:99:33:f6:9b:d2:79:68:
3a:9e:8b:0b:3c:b5:1a:48:bd:4c:19:42:57:65:c8:
0c:41:5a:86:15:6e:90:c0:49:96:3a:5f:fb:3c:b3:
2d:5b:ca:f2:0c:e5:cf:99:ca:b2:36:c4:47:c7:e4:
e7:4e:dd:7c:46:3c:10:15:b0:2f:22:e8:f4:2e:4a:
7e:13:0b:80:4f:82:83:4c:a4:1f:ca:09:b0:fd:84:
17:33:39:3d:36:71:1b:9a:2c:0c:c7:93:9c:4c:9b:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:71:26:FA:37:CD:2F:BD:94:5F:A3:EA:6F:92:3F:0C:D2:B4:6D:C8
X509v3 Authority Key Identifier:
keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/F3Em-jfNL72UX6Pqb5I_DNK0bcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.160.0/20
Signature Algorithm: sha256WithRSAEncryption
32:60:52:86:c4:4a:88:b3:60:f9:77:21:e1:01:6f:75:03:e1:
1a:7a:ec:2e:43:59:f1:88:4d:a9:e6:4a:f9:39:e8:a3:cb:09:
df:3d:7b:69:02:6a:15:f5:a0:7f:80:52:c7:03:d3:f1:82:66:
d2:3a:e1:f8:a2:7a:ff:f2:cc:33:2e:ca:00:2f:d6:ec:ee:0f:
a3:51:58:96:24:ac:ef:f4:a4:d0:09:b1:bb:52:7b:21:79:56:
f9:6a:c4:44:b4:39:46:93:ac:02:20:08:4d:0b:06:2f:ef:d6:
ae:96:2f:db:84:6c:36:10:21:24:2b:50:56:ce:51:2f:ea:46:
61:55:60:5e:34:2d:ad:7a:a2:37:23:af:0f:ad:d5:c4:30:be:
96:39:48:c3:6d:58:e8:4c:89:29:e9:eb:e7:b5:9a:00:35:6d:
c3:82:90:ed:83:3a:e9:81:ac:31:d4:5a:2c:dc:2d:fb:49:82:
c2:7e:39:a4:af:2c:16:38:21:be:35:88:f6:9a:c0:6a:63:05:
63:2d:65:5b:3a:43:e6:69:d0:88:50:37:57:82:98:3b:61:8d:
03:49:08:d7:3d:e5:b8:0e:b1:5a:25:9d:38:2d:dd:22:34:7a:
74:0f:83:e9:cd:bd:50:23:e9:5a:50:9c:00:d2:69:7c:d7:c3:
b3:f4:d4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:53 2024 by rpki-client on console-ams.rpki-client.org