Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/ZZPQo1u7Ftlj-uDcmNYWcxEYOvQ.roa
File: ZZPQo1u7Ftlj-uDcmNYWcxEYOvQ.roa (raw, json)
Hash identifier: 37BRjmFP4toZPS8lOWuKkiOcK9u11peOrEnNgJEpxJM=
Subject key identifier: 65:93:D0:A3:5B:BB:16:D9:63:FA:E0:DC:98:D6:16:73:11:18:3A:F4
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 01856F798EF4D88DBF2CF9C458548B40EAB5
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/ZZPQo1u7Ftlj-uDcmNYWcxEYOvQ.roa
Signing time: Sun 01 Jan 2023 22:35:15 +0000
ROA not before: Sun 01 Jan 2023 22:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20884
IP address blocks: 160.218.96.0/21 maxlen: 21
160.218.212.0/22 maxlen: 22
160.218.104.0/21 maxlen: 21
160.218.112.0/20 maxlen: 20
160.218.244.0/22 maxlen: 22
160.218.176.0/21 maxlen: 21
160.218.184.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:8e:f4:d8:8d:bf:2c:f9:c4:58:54:8b:40:ea:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jan 1 22:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6593d0a35bbb16d963fae0dc98d6167311183af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:bb:a4:f0:62:34:29:af:53:55:d5:9d:8a:
e9:c1:a9:23:ed:42:72:5f:91:50:04:9a:9a:df:48:
95:17:a4:82:dc:cc:a8:c5:d9:c1:b8:30:58:2b:17:
13:26:51:58:2a:09:c9:df:a1:12:8f:cc:a9:c0:0b:
b4:da:98:c4:eb:63:69:6b:a7:c2:ff:69:be:3d:69:
31:42:35:a5:e5:d4:4c:1c:6e:21:25:c3:8f:b6:68:
b1:03:4b:9c:ec:7d:eb:e5:d0:86:2c:65:38:dc:e1:
f2:af:10:62:a1:8c:b8:d2:ed:08:94:b2:80:29:93:
e1:19:0c:43:18:15:71:60:e1:4c:95:f9:f0:fa:19:
77:dc:6a:1a:14:3e:ab:84:44:f8:e8:66:73:05:d2:
93:21:44:56:68:ca:d7:62:02:b4:7e:15:c0:6f:7d:
01:be:97:8e:87:23:7e:34:4a:1f:5f:e0:c2:1f:b5:
94:53:89:51:9e:c6:10:58:79:b6:27:9b:69:c9:9a:
0b:5f:12:26:cf:e8:44:da:5e:53:10:20:96:58:c7:
04:88:88:03:50:30:23:8d:ae:9a:fc:fa:b0:5b:f2:
9a:dd:1a:32:53:0b:26:2a:24:94:b4:4e:d0:6f:91:
42:4c:5e:2e:cc:57:0e:e6:29:58:b2:03:95:3e:72:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:93:D0:A3:5B:BB:16:D9:63:FA:E0:DC:98:D6:16:73:11:18:3A:F4
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/ZZPQo1u7Ftlj-uDcmNYWcxEYOvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.218.96.0/19
160.218.176.0/20
160.218.212.0/22
160.218.244.0/22
Signature Algorithm: sha256WithRSAEncryption
79:fa:ff:79:b1:bb:f6:01:ea:ff:c4:62:84:0f:5c:ec:6f:a7:
03:6a:f2:a6:60:d0:de:76:09:5a:d1:02:da:66:5e:ea:29:bc:
4e:3a:06:eb:2a:4b:ba:90:81:93:2a:fc:bf:c6:02:32:64:a4:
67:eb:9e:0f:7c:90:a2:bf:3b:51:a6:d0:0e:d8:ff:47:3c:c6:
a8:5a:3e:59:bc:99:c3:30:98:fa:9a:a5:4b:42:1a:ca:58:90:
82:66:21:05:09:62:e0:3b:1c:8f:35:36:70:32:b6:f2:20:f4:
02:cd:8e:85:0e:91:f8:2a:0d:4f:6e:96:7d:28:ee:27:47:a8:
e3:cc:73:8d:23:2c:2c:dc:b5:8b:35:c0:27:b6:5b:27:a2:1e:
37:77:76:79:33:40:72:c3:80:13:46:28:8e:a0:15:67:17:52:
f0:10:77:0a:51:48:f0:08:49:08:18:46:2b:a1:40:4a:32:ff:
d7:a3:c6:a2:27:57:5d:3a:74:7b:cd:2f:2b:ac:08:2e:36:9e:
a5:c9:ab:ac:ad:7e:1c:8f:b3:dd:64:f2:62:b7:a4:30:4d:9c:
35:f0:82:e9:0c:ca:1f:3b:83:1a:e7:4b:c0:ec:a2:7f:fc:e6:
3e:c4:0f:53:2e:84:99:d4:e3:28:74:c5:79:94:09:77:32:48:
13:55:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:02 2024 by rpki-client on console-ams.rpki-client.org