Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/Hu3lY1MAjoJR24nyY8Uxkdd7bCM.roa
File: Hu3lY1MAjoJR24nyY8Uxkdd7bCM.roa (raw, json)
Hash identifier: JPQMEjZ3Sn2/8KXpuzFH9YRtcCm7KogCrBkyf0SlfbE=
Subject key identifier: 1E:ED:E5:63:53:00:8E:82:51:DB:89:F2:63:C5:31:91:D7:7B:6C:23
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 0185ABDD58DBD78A51E7ABA5E4139977CBE5
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/Hu3lY1MAjoJR24nyY8Uxkdd7bCM.roa
Signing time: Fri 13 Jan 2023 16:01:28 +0000
ROA not before: Fri 13 Jan 2023 16:01:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200471
IP address blocks: 160.62.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jul 2023 20:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ab:dd:58:db:d7:8a:51:e7:ab:a5:e4:13:99:77:cb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Jan 13 16:01:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eede56353008e8251db89f263c53191d77b6c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:dc:1b:58:ea:a6:64:f3:f2:a3:e1:1b:f2:
fc:a5:ff:9c:91:80:a7:39:bd:c4:ed:1e:e1:2d:5e:
35:b7:dc:af:18:65:65:f6:70:7f:ea:17:39:c1:03:
9a:a4:aa:cb:ac:36:60:b7:c7:32:8e:21:b1:ae:1d:
1e:b9:be:e8:ac:44:b7:40:82:82:11:10:2d:2b:86:
41:40:74:12:e7:f8:7d:2f:aa:3e:68:4e:84:8e:e5:
e6:e5:a8:46:ca:5e:db:6c:d6:ac:6d:46:c7:12:82:
b1:1f:48:d6:45:a9:46:1e:55:c3:70:4e:fb:65:7a:
5f:c5:62:f1:ff:8c:31:10:4c:8d:cf:08:d4:07:60:
01:9c:c4:01:e1:92:13:ba:4b:e9:b6:9b:4f:80:42:
9e:b4:50:91:1d:f3:9e:c9:4b:6f:3e:d7:15:fe:60:
dd:84:31:17:3b:f9:b6:e7:64:a7:f0:8d:b8:64:f1:
96:46:cc:45:57:34:a8:68:3c:ec:10:42:9d:87:cf:
e3:8e:a9:54:fb:ff:51:06:ef:d5:11:f3:28:32:5e:
7b:23:0b:98:8c:01:bd:e8:c8:ec:4e:4d:f7:2d:b7:
24:3d:21:9b:4e:36:92:65:bd:de:12:dd:03:c2:60:
1c:2a:cf:ce:a7:1a:d3:eb:d2:51:17:83:ad:0d:b1:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:ED:E5:63:53:00:8E:82:51:DB:89:F2:63:C5:31:91:D7:7B:6C:23
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/Hu3lY1MAjoJR24nyY8Uxkdd7bCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.62.10.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ea:8b:05:6d:98:85:c2:0c:3f:f6:a1:75:04:4d:18:c6:a0:
b9:a9:ef:71:67:5b:c8:b8:34:09:62:09:9c:d1:bf:b4:e8:76:
c3:c0:68:91:eb:01:72:34:10:15:0b:9d:f3:ce:0a:ba:5d:95:
34:e6:6f:8a:45:b6:3c:06:8e:0e:d6:6a:aa:7c:a0:4c:c3:98:
6c:55:cc:c3:ae:6b:92:f2:7c:38:a7:a5:c3:76:da:e8:48:c1:
19:03:99:b9:c7:f4:14:45:39:90:c8:bd:71:4e:c0:d4:ff:09:
f8:71:01:5b:ac:0f:15:a5:46:53:a1:3b:92:70:ca:c7:61:7b:
65:df:60:66:c3:2e:f1:f6:7e:cc:2e:f2:85:3f:62:5c:a1:aa:
2e:77:af:a7:93:83:70:50:15:85:17:cb:71:56:ce:85:45:81:
92:b6:25:df:15:da:69:bf:ef:11:3c:99:48:5f:ca:89:3e:76:
46:a2:25:2b:93:98:c2:90:9b:3e:00:b5:d6:8b:50:5d:ea:f5:
e8:c1:ff:15:f5:6d:f8:83:39:45:0c:2e:ff:5c:30:d4:66:31:
60:cd:4c:24:cb:ea:5d:b7:04:c0:ed:eb:fe:9f:05:e5:81:19:
f3:58:f2:91:06:70:ca:93:60:78:70:80:a7:09:9b:7f:a7:ba:
d8:f6:0d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org