Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/7Ki3HEpTPuyPPNul930j5Z-EHjw.roa
File: 7Ki3HEpTPuyPPNul930j5Z-EHjw.roa (raw, json)
Hash identifier: 7h0t0AOSuW0iVQojZI2Uxvr9C5E6rLxb+A7L5H2m08M=
Subject key identifier: EC:A8:B7:1C:4A:53:3E:EC:8F:3C:DB:A5:F7:7D:23:E5:9F:84:1E:3C
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 018571B9E88D0DE335435DFAC9F1CF317E7A
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/7Ki3HEpTPuyPPNul930j5Z-EHjw.roa
Signing time: Mon 02 Jan 2023 09:04:47 +0000
ROA not before: Mon 02 Jan 2023 09:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210287
IP address blocks: 185.160.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:e8:8d:0d:e3:35:43:5d:fa:c9:f1:cf:31:7e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Jan 2 09:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eca8b71c4a533eec8f3cdba5f77d23e59f841e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:ea:9a:ee:58:18:e2:be:83:16:db:62:0b:
8e:8b:bf:a9:4a:42:a3:56:d1:75:9c:7b:40:71:92:
ad:aa:80:c6:a6:15:de:c3:93:20:10:31:a0:11:6b:
b5:01:0a:c8:16:a0:ac:ba:29:ce:c0:34:ad:32:ea:
68:f2:44:bc:06:a0:13:4f:f5:cc:b6:64:e6:be:83:
16:d7:af:e1:d9:62:fb:75:c7:1d:a3:61:46:2d:ee:
4a:8b:66:2f:00:4d:83:3a:ae:ee:ec:c6:dc:9a:d4:
ef:8b:65:dd:67:72:05:b7:60:b6:20:71:af:47:3b:
d3:4d:a8:96:12:d3:b5:2c:cb:65:73:d8:c5:c4:09:
e2:67:62:84:43:f3:c4:0f:42:92:6f:28:80:85:32:
af:3b:7a:28:a4:01:58:ba:28:50:5e:39:38:11:50:
32:90:d2:8c:5a:a7:f7:3d:9a:de:4c:c9:6e:18:61:
f7:9b:e4:a6:d0:51:43:3f:e6:17:21:8a:10:c5:ef:
73:0f:1f:67:33:3f:89:d1:80:37:38:69:7e:54:b7:
3c:4c:8f:70:0f:64:52:f2:1c:73:b0:68:57:68:d2:
3b:17:64:ed:5a:d6:8d:0e:dc:de:f8:e2:cf:01:3c:
60:b8:4f:a6:56:2c:e9:7c:b1:75:d3:dc:82:50:22:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A8:B7:1C:4A:53:3E:EC:8F:3C:DB:A5:F7:7D:23:E5:9F:84:1E:3C
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/7Ki3HEpTPuyPPNul930j5Z-EHjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.48.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:82:61:c7:ab:a7:81:e1:31:34:37:6a:ed:cf:e2:16:bf:ea:
0d:af:32:16:df:e5:55:9a:f5:8f:0e:8e:5c:e2:65:c0:2f:b9:
62:0a:b7:47:f3:0f:e5:14:68:00:97:42:30:4b:82:2e:02:2e:
99:cf:2b:3d:21:2d:49:ca:36:8c:6e:10:4d:38:e9:d9:b8:15:
ac:08:8a:40:38:da:7a:40:1d:c9:f0:2c:08:8a:f1:45:04:78:
73:14:61:46:49:98:dd:89:3f:32:7b:17:e2:2a:88:96:4f:eb:
1f:97:0a:8d:25:e5:2e:55:9a:a8:40:7b:da:e7:a0:44:43:06:
4a:c2:87:85:57:1c:55:e0:82:f0:8d:89:99:10:5f:2b:24:03:
a3:0b:b0:38:41:a3:4f:d8:82:de:f0:33:be:65:4f:2f:8b:56:
e7:77:d3:49:eb:45:09:d2:e2:41:6c:ba:d2:e9:ec:31:d2:d8:
ad:7b:81:ed:38:6b:54:8f:48:3a:e7:26:79:fb:82:d4:20:f1:
cc:c4:45:84:93:ae:9e:13:81:0b:33:f8:16:f3:3a:2c:a8:11:
cf:6f:71:83:95:5a:01:82:16:aa:f6:72:76:6e:ae:42:dd:10:
4d:d2:58:f5:a0:50:0b:fb:18:66:06:12:bc:48:d6:d6:5c:cb:
76:29:48:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:42 2024 by rpki-client on console-ams.rpki-client.org