Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/O2ji3QqXeK4j8zHiJtLTCO0uq1c.roa
File: O2ji3QqXeK4j8zHiJtLTCO0uq1c.roa (raw, json)
Hash identifier: 0aaNaXklGGkN+sOzrqN7JVIgImFPHXyu/w2uf93z7k0=
Subject key identifier: 3B:68:E2:DD:0A:97:78:AE:23:F3:31:E2:26:D2:D3:08:ED:2E:AB:57
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 01880357D0614B74D46B80B2B23EC8807E56
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/O2ji3QqXeK4j8zHiJtLTCO0uq1c.roa
Signing time: Wed 10 May 2023 01:47:46 +0000
ROA not before: Wed 10 May 2023 01:47:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6095
IP address blocks: 160.62.3.0/24 maxlen: 24
160.62.23.0/24 maxlen: 24
160.62.22.0/24 maxlen: 24
160.62.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:03:57:d0:61:4b:74:d4:6b:80:b2:b2:3e:c8:80:7e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: May 10 01:47:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b68e2dd0a9778ae23f331e226d2d308ed2eab57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2c:32:68:3c:18:1b:37:6a:39:d4:6b:7e:39:
21:90:48:c6:3d:1a:83:08:62:ec:b4:76:1d:d7:6e:
9c:47:9b:0b:79:7b:88:34:29:f2:51:48:d7:eb:d2:
b3:9d:73:ca:ff:7d:23:69:db:34:0d:e2:36:6d:85:
8a:ba:92:b3:77:9a:08:ae:67:64:38:5b:81:6b:48:
a4:f7:dd:e3:61:c3:b7:0d:1c:43:93:13:d0:12:78:
3c:a1:e6:f9:39:af:93:71:96:86:a2:4e:96:16:c3:
05:74:99:70:0e:cc:a6:49:78:4d:86:75:9b:c4:51:
99:47:d5:c8:42:c1:3c:c7:c3:47:24:41:86:f8:90:
24:d0:37:58:22:bb:6b:d0:68:8d:dc:fc:23:95:4c:
3c:84:28:d4:7b:b3:f7:d7:99:0b:3e:22:6c:10:51:
11:7c:da:53:c5:af:9a:67:04:15:c8:ae:a4:1d:44:
b1:29:fd:da:1c:c4:d7:2d:a6:62:cb:e6:f5:10:68:
3a:8f:41:71:d3:c3:98:ee:d4:68:5d:d2:31:46:32:
9d:fe:59:6c:db:7b:13:a0:a7:21:82:f8:09:95:ef:
a0:26:93:84:66:5a:3b:e7:e1:f8:51:e2:f0:77:69:
a2:80:b7:fa:ad:90:25:7a:b3:72:53:8e:4b:90:2e:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:68:E2:DD:0A:97:78:AE:23:F3:31:E2:26:D2:D3:08:ED:2E:AB:57
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/O2ji3QqXeK4j8zHiJtLTCO0uq1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.62.3.0/24
160.62.21.0-160.62.23.255
Signature Algorithm: sha256WithRSAEncryption
9e:81:27:77:ab:e3:c6:c2:3b:ad:bc:25:7a:5b:1f:75:69:02:
7e:08:82:2a:c8:4a:7f:26:42:39:1e:e9:7f:4e:ae:3a:5f:d9:
01:32:3e:47:ca:9c:3e:14:af:7a:18:11:3b:26:ca:91:64:aa:
0b:c4:2e:98:80:af:5d:63:07:e3:ff:cc:67:23:2d:1a:9b:fc:
36:59:6a:9f:62:63:d2:aa:53:80:2b:f0:03:94:bd:f1:54:7b:
18:fd:f7:30:9d:e8:10:a8:c2:9d:b4:d1:9a:0c:c8:96:aa:7c:
0e:4f:04:1e:67:ec:9d:b1:40:ad:74:9a:e2:7d:7a:e4:47:f3:
f6:47:58:e6:e0:12:37:d2:3b:33:3d:cf:71:cf:0a:6f:50:b8:
b5:ce:70:a2:ba:94:50:5b:31:ee:8f:41:32:81:3d:cc:f9:dc:
a9:1e:2b:01:0d:7b:15:e1:90:fb:fa:c6:fa:70:75:d0:93:5b:
2e:86:e0:d0:e5:ae:af:7a:9b:06:fe:60:c6:68:a5:60:8f:2c:
a0:e7:d5:ed:e8:0b:d0:62:17:53:e9:9a:1a:58:e1:4e:87:6c:
b9:98:64:47:2b:9c:99:37:40:30:a5:b1:91:99:2c:32:75:f0:
3c:2a:36:57:73:0c:56:98:8a:24:a3:40:47:39:83:74:b3:67:
42:ab:93:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:25 2024 by rpki-client on console-ams.rpki-client.org