Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/w-LgojZbVJrC-0JgpICaIHbbuNk.roa
File: w-LgojZbVJrC-0JgpICaIHbbuNk.roa (raw, json)
Hash identifier: nvkka/nuMRFAbtladoJyZR7MHt2vz7muTGCyFpozImk=
Subject key identifier: C3:E2:E0:A2:36:5B:54:9A:C2:FB:42:60:A4:80:9A:20:76:DB:B8:D9
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 018CC94E6072C1CB33FBC7DA33796E77352A
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/w-LgojZbVJrC-0JgpICaIHbbuNk.roa
Signing time: Tue 02 Jan 2024 08:33:25 +0000
ROA not before: Tue 02 Jan 2024 08:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6095
IP address blocks: 160.62.3.0/24 maxlen: 24
160.62.23.0/24 maxlen: 24
160.62.22.0/24 maxlen: 24
160.62.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 04:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:60:72:c1:cb:33:fb:c7:da:33:79:6e:77:35:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Jan 2 08:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3e2e0a2365b549ac2fb4260a4809a2076dbb8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:af:2e:c6:fa:ad:dc:53:42:8f:f7:56:90:
96:a8:76:fe:87:e2:60:72:65:48:c0:e7:ba:0e:41:
82:49:1a:7c:e7:d2:45:7e:f2:be:3f:a7:fd:74:44:
87:9b:1f:56:e8:24:3b:11:13:08:c6:9e:2f:44:f9:
9c:66:39:36:9d:5a:c8:d6:29:53:3c:9a:f1:b7:be:
c3:df:fd:19:d6:e6:81:dd:8e:7f:6d:ce:0f:dc:b2:
60:84:5e:05:7b:36:a3:4e:65:61:fc:7b:f6:51:9c:
00:bf:7f:1f:8a:8a:be:06:98:a7:fb:0a:19:5a:16:
52:b3:0e:5f:18:f8:b3:b0:39:50:da:eb:6b:f8:32:
92:ab:b6:34:eb:61:fb:0f:52:cf:4b:09:cc:18:72:
fa:06:19:74:4b:62:de:57:21:c1:62:ed:d6:1a:89:
88:00:8d:68:0a:fd:a7:28:f6:41:32:06:c0:f5:4e:
01:4c:b2:84:f2:b7:79:99:5b:f1:be:00:05:aa:cd:
23:cf:53:d1:eb:9f:7b:1e:39:c3:6f:63:6e:20:01:
d4:82:be:86:8e:99:46:28:88:35:63:59:2a:29:d6:
34:53:43:18:06:c0:c0:52:11:a3:95:90:63:ac:2c:
31:38:af:c0:dd:73:83:65:f9:18:6f:57:38:74:0d:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:E0:A2:36:5B:54:9A:C2:FB:42:60:A4:80:9A:20:76:DB:B8:D9
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/w-LgojZbVJrC-0JgpICaIHbbuNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.62.3.0/24
160.62.21.0-160.62.23.255
Signature Algorithm: sha256WithRSAEncryption
3b:48:bc:78:0f:42:9a:ca:1a:97:9a:96:d2:a0:8d:6e:de:6c:
22:b4:6e:35:1b:00:55:5f:77:fd:bb:3f:4e:8b:8b:cd:75:4a:
61:fe:a1:40:90:4e:9d:6a:3e:39:43:9d:4e:ad:99:ef:5e:79:
2f:40:47:db:e4:a2:be:74:c0:18:92:12:12:be:72:a1:1c:89:
bf:e7:c3:45:b7:90:20:38:3a:3d:7f:dd:a1:05:70:bf:8f:1f:
3b:51:5c:bc:2e:7d:f7:ab:47:16:ec:7d:0c:ae:61:dd:55:80:
9d:70:05:2e:ca:63:92:5b:cc:6f:dd:be:c0:27:15:65:c8:d9:
c0:bb:cd:ec:4c:4f:44:d4:b5:fb:61:dd:df:5e:a4:41:89:96:
87:40:c9:67:86:3d:25:73:6c:31:4f:81:a5:80:c9:e1:53:f1:
8c:bb:3d:69:2e:e6:ee:1b:55:15:60:59:31:54:79:08:15:71:
e7:67:39:19:3f:8a:d8:69:e9:60:1c:d3:b1:3c:f5:7c:63:97:
8a:44:fd:82:2a:9f:05:ec:27:7b:bb:44:30:33:0f:df:4b:08:
fa:a0:d1:aa:8c:b5:b3:b8:1e:36:3f:01:14:d0:be:6f:8e:01:
04:77:8a:13:f6:85:c2:1c:eb:38:42:d5:17:ed:ae:53:22:d1:
58:b4:96:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:14 2024 by rpki-client on console-ams.rpki-client.org