Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/dlhNolX9E783kevpNUawBCZmeXE.roa
File: dlhNolX9E783kevpNUawBCZmeXE.roa (raw, json)
Hash identifier: wF4cok78JZ2h1Y9csMvALnRW2kXQwKdxD+sSmnZY2a0=
Subject key identifier: 76:58:4D:A2:55:FD:13:BF:37:91:EB:E9:35:46:B0:04:26:66:79:71
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 01856C0A65E24D62F485C8B47B824E4B43DC
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/dlhNolX9E783kevpNUawBCZmeXE.roa
Signing time: Sun 01 Jan 2023 06:34:58 +0000
ROA not before: Sun 01 Jan 2023 06:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6095
IP address blocks: 160.62.3.0/24 maxlen: 24
160.62.22.0/24 maxlen: 24
160.62.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 01:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:65:e2:4d:62:f4:85:c8:b4:7b:82:4e:4b:43:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Jan 1 06:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76584da255fd13bf3791ebe93546b00426667971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:c5:92:d7:36:10:2e:a8:40:e0:c9:62:f1:
6b:e4:e1:09:2e:6e:30:f8:be:1d:2a:30:2a:1c:e3:
9c:a4:14:b9:d0:72:00:ae:da:45:90:0b:09:d3:cf:
99:66:de:96:5a:9f:e9:d4:19:7a:54:b2:2a:57:5a:
8d:86:6f:e2:c6:49:b4:30:ca:fd:f5:5b:86:8f:ad:
d2:dd:2e:52:75:ff:5d:9b:ca:a8:c6:c5:a9:b0:3c:
ae:59:66:ab:e8:d7:18:7f:8e:50:b8:45:cf:e8:7a:
ba:58:0e:0c:ec:32:fb:5c:5f:6a:01:99:40:9f:ce:
c6:4e:b3:77:b6:80:27:f9:ec:51:e3:3c:63:89:3a:
cc:0a:4c:f4:9c:e6:81:c3:78:6c:8b:1b:5a:5d:33:
a4:3c:8d:15:f6:50:a8:1f:0a:7f:74:0c:07:e2:f4:
0c:ab:a9:44:50:c0:81:d4:13:50:85:54:1e:fd:32:
a0:82:c4:93:00:c0:5b:9c:18:05:a8:8d:37:6e:7b:
ab:f7:7e:51:a5:1e:40:51:83:24:32:69:25:d7:6d:
66:56:01:ce:1d:aa:2a:6d:36:45:ef:87:3b:e5:42:
0f:26:ec:3d:88:b6:6d:b9:48:39:e9:72:e1:11:34:
52:41:bd:81:bd:86:6d:fe:d2:35:99:2f:e7:84:72:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:58:4D:A2:55:FD:13:BF:37:91:EB:E9:35:46:B0:04:26:66:79:71
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/dlhNolX9E783kevpNUawBCZmeXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.62.3.0/24
160.62.21.0-160.62.22.255
Signature Algorithm: sha256WithRSAEncryption
09:bd:f5:f9:6c:12:5e:ca:3f:ca:1c:76:e4:13:62:bb:8b:36:
f8:bd:7a:19:60:a4:78:ec:8e:cf:ec:de:5c:f9:87:20:24:2c:
46:d0:ff:f0:07:6f:de:f1:75:17:60:9d:9a:5a:fa:ff:f8:27:
9b:ce:f4:8b:c8:3a:0b:f9:7e:fc:0a:e4:81:2e:e8:43:f2:de:
f0:5d:09:c6:78:83:9b:24:04:3f:90:8f:93:fb:aa:7f:91:d5:
9c:46:fd:d9:99:c5:a8:5d:1b:85:4f:01:1c:39:0c:b1:07:5c:
fa:87:71:d5:32:5b:1d:fe:96:35:3d:44:49:51:3e:91:69:c4:
50:5a:88:4b:38:88:c6:35:00:05:3b:a5:57:1a:c5:16:50:9d:
cb:3d:40:46:35:49:24:22:3c:6e:18:66:52:5e:36:1f:2c:aa:
2b:8d:a7:8f:39:61:cc:1f:1b:e7:7b:1e:69:e0:9c:ca:38:ab:
80:b1:9d:bc:e9:6b:bb:f3:a7:c0:25:3c:67:5a:e9:c8:1a:82:
ec:fe:f3:9b:91:f3:6b:6e:87:67:a0:e7:49:91:fc:ba:04:ab:
83:7f:df:27:d3:ea:6e:58:c7:41:ff:9c:d7:8c:04:0a:6a:7c:
4a:5e:97:43:4b:dc:a0:e6:9c:12:84:ca:51:c9:e3:3e:59:0e:
c0:bf:ec:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:14 2024 by rpki-client on console-ams.rpki-client.org