Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/wkfFh4AO0GKPg_jOZQnkBLG03fQ.roa
File: wkfFh4AO0GKPg_jOZQnkBLG03fQ.roa (raw, json)
Hash identifier: zZbeXhUpqBYM2bbTRZ5yLn6/Ju37j6RlUp3bV6ggHPQ=
Subject key identifier: C2:47:C5:87:80:0E:D0:62:8F:83:F8:CE:65:09:E4:04:B1:B4:DD:F4
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018570B063572F19B666E2B6A5D116925ED8
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/wkfFh4AO0GKPg_jOZQnkBLG03fQ.roa
Signing time: Mon 02 Jan 2023 04:14:45 +0000
ROA not before: Mon 02 Jan 2023 04:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 167.160.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:63:57:2f:19:b6:66:e2:b6:a5:d1:16:92:5e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 2 04:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c247c587800ed0628f83f8ce6509e404b1b4ddf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:be:de:68:97:46:97:17:50:86:0c:79:59:
02:7e:cd:68:4c:01:f0:0f:e2:9e:74:1a:e6:d5:14:
e7:fe:bf:f5:30:12:01:81:55:a4:46:75:5b:b2:1e:
57:16:e1:05:26:32:87:16:e8:e8:6c:f0:97:be:5a:
0d:54:9c:97:8e:f0:cc:d1:47:a7:5a:e6:d8:c8:15:
98:f0:f4:98:2c:82:c9:9f:06:6a:0b:ae:e6:e6:5f:
1e:5b:44:b5:da:06:9d:ba:9b:10:74:21:1e:eb:4b:
4f:b6:6d:da:3b:17:89:21:80:0b:36:cf:66:32:e7:
69:6d:08:a3:50:29:03:5a:da:42:08:ad:fa:9f:f4:
27:9d:19:85:0a:08:9d:46:75:aa:c5:92:4d:d4:39:
55:52:9d:4f:eb:66:76:fb:c9:b6:b1:c5:59:69:e5:
db:de:a4:d4:e9:65:04:84:f8:d1:35:07:58:b8:08:
9f:e2:06:1c:f1:c9:b7:b9:7a:03:99:ce:0b:52:20:
ea:47:ea:ee:10:0d:eb:74:45:b4:82:f9:82:fa:16:
f7:a6:14:4a:c9:22:6b:1f:39:3b:d2:47:06:40:04:
cc:ee:bb:97:9f:68:c6:86:47:a5:ab:ba:2a:68:aa:
39:34:3a:a1:70:59:5d:22:b3:07:b6:4b:4a:df:8d:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:47:C5:87:80:0E:D0:62:8F:83:F8:CE:65:09:E4:04:B1:B4:DD:F4
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/wkfFh4AO0GKPg_jOZQnkBLG03fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.10.0/24
Signature Algorithm: sha256WithRSAEncryption
90:42:ce:ef:3b:78:2b:49:16:37:ba:fc:b0:bb:73:b2:79:31:
b3:4e:af:6c:31:6e:62:c1:bc:6e:e9:81:9d:a3:73:4a:de:ab:
2d:c9:09:c9:ae:63:de:02:59:fd:b1:05:11:de:24:e3:51:91:
27:20:0d:ed:f7:2c:29:7c:2f:78:26:92:0f:14:17:de:f1:17:
44:9f:5f:c7:85:37:8d:a0:06:55:a2:32:4c:8b:7d:79:14:89:
c5:62:71:5c:3f:a6:bf:ef:e5:0a:29:34:05:5a:19:8c:9e:4d:
14:47:70:29:0c:1c:e3:bc:eb:f1:c4:9a:37:f2:27:2c:e9:7e:
a9:6f:72:a6:a2:ec:dd:5d:c1:e0:d4:13:28:47:1d:bb:01:db:
af:9b:20:f3:df:b9:85:da:1e:26:6d:3c:74:58:2c:66:74:55:
3f:a3:7f:ba:c0:f4:33:3c:4d:02:55:25:e9:cc:d4:8b:b3:c7:
df:d7:32:0a:ef:4a:f1:b0:1c:c2:fc:35:95:42:6a:ad:1d:0a:
0c:b0:b7:b9:34:70:b9:cb:8d:97:c4:2f:50:07:be:20:e5:44:
a7:fd:7c:b1:7c:01:2c:07:eb:3e:4e:c6:4c:e7:53:bd:39:84:
84:00:e9:2c:b6:2b:1c:c5:13:8d:fd:cb:9f:dc:de:af:92:f9:
e1:96:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:09 2024 by rpki-client on console-ams.rpki-client.org