Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/1-cZwu9xYrgxZLdKIn9iUe8tVUBs.roa
File: 1-cZwu9xYrgxZLdKIn9iUe8tVUBs.roa (raw, json)
Hash identifier: 5NSFE3Aw4rrOe2p7+/UF0H89vKzZ8Ow1++uMvKOliSc=
Subject key identifier: F9:C6:70:BB:DC:58:AE:0C:59:2D:D2:88:9F:D8:94:7B:CB:55:50:1B
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 0185701ED693F15C903244C938DC295308F7
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/1-cZwu9xYrgxZLdKIn9iUe8tVUBs.roa
Signing time: Mon 02 Jan 2023 01:35:47 +0000
ROA not before: Mon 02 Jan 2023 01:35:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 147.161.253.0/24 maxlen: 24
147.161.254.0/24 maxlen: 24
147.161.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 23:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:d6:93:f1:5c:90:32:44:c9:38:dc:29:53:08:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jan 2 01:35:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9c670bbdc58ae0c592dd2889fd8947bcb55501b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:95:91:27:93:c3:e3:81:09:50:6a:6d:c3:
eb:82:18:12:5e:13:75:39:bd:ad:62:a3:84:13:da:
66:c9:d7:44:d6:f0:87:ae:84:46:70:96:cf:6a:04:
ef:51:f6:9b:de:2d:18:52:d2:94:f0:f7:de:10:93:
55:6e:fa:87:e9:be:28:d2:a3:ed:63:fb:6f:f2:51:
a4:52:44:0c:a5:f7:4d:e2:9b:a0:5c:68:8d:01:a6:
e0:a5:06:26:18:93:15:67:4a:2f:5f:6b:2a:28:87:
55:08:05:86:1f:99:f8:d9:43:e5:3d:f5:0f:6b:f6:
f0:cd:1c:9c:93:92:97:c7:3b:5a:bb:d5:c8:b3:3c:
f0:45:7f:5f:72:13:d7:0c:80:04:4c:93:0e:47:4b:
1e:3a:fc:e4:1a:0e:66:7d:1a:ec:4e:11:6e:40:96:
b0:09:e4:73:19:23:8d:3a:09:9c:c0:96:1f:35:e2:
b5:74:7c:73:8c:68:d0:63:cd:c3:ef:5e:91:04:53:
67:0e:26:9e:1e:0f:54:4f:d4:e9:d9:14:00:66:ac:
f7:bc:2c:63:a6:7e:d0:a0:f7:d8:2c:45:f8:bb:a7:
2b:1c:af:c9:5d:2d:21:3f:b8:53:95:79:a1:4d:ca:
d2:de:4e:50:2a:1b:61:f0:24:8f:66:ed:93:86:77:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C6:70:BB:DC:58:AE:0C:59:2D:D2:88:9F:D8:94:7B:CB:55:50:1B
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/1-cZwu9xYrgxZLdKIn9iUe8tVUBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.253.0-147.161.255.255
Signature Algorithm: sha256WithRSAEncryption
72:79:fa:1c:f7:11:38:38:5a:d3:0b:f2:c3:c3:3d:c3:6a:a3:
ee:73:0e:38:8d:df:10:83:ea:f3:fb:59:e1:dc:46:36:2c:55:
c8:db:1c:36:8d:2f:f3:37:04:45:bc:b8:bc:d9:d5:8c:fa:74:
1c:00:e2:f8:f3:64:8d:1a:3f:1c:f4:d0:48:2f:af:58:84:e0:
11:b0:7b:34:8f:75:a3:01:20:96:67:ba:68:45:95:9b:15:e3:
ef:58:15:fb:df:7e:52:d8:a3:3f:d5:51:9c:e4:27:b8:37:dd:
2f:31:b3:57:a3:12:36:e6:ea:41:0c:09:67:e3:56:84:1e:eb:
14:12:e6:68:f6:2e:d3:11:63:14:60:31:e9:c9:e2:02:0a:4c:
6a:aa:9a:a1:05:e2:65:5c:b0:ba:30:71:12:48:d6:99:c3:0c:
87:bb:6f:52:1a:02:5d:9c:56:a9:d3:d1:19:d1:ac:6a:ab:38:
f2:6d:9b:17:84:ce:26:4f:fd:ac:65:21:62:56:26:8d:0d:ce:
1d:3d:6f:0e:99:ad:de:45:74:09:2c:d2:29:38:f1:2b:54:0f:
b9:00:0f:f8:64:88:b3:52:ff:37:2d:49:57:64:5a:f1:84:45:
80:22:b4:74:6e:29:b2:8a:34:25:f5:20:3f:71:6c:65:7a:f3:
dc:25:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:01 2024 by rpki-client on console-ams.rpki-client.org