Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/mfHcvXYCE2GdAJ_FBSu0IJy7Oic.roa
File: mfHcvXYCE2GdAJ_FBSu0IJy7Oic.roa (raw, json)
Hash identifier: 8tCFz9aYdJjw+psT24/2sAvvw41InQzAzN60cxMGQDM=
Subject key identifier: 99:F1:DC:BD:76:02:13:61:9D:00:9F:C5:05:2B:B4:20:9C:BB:3A:27
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 01856EA699659B2C7F81D8F11C4314104361
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/mfHcvXYCE2GdAJ_FBSu0IJy7Oic.roa
Signing time: Sun 01 Jan 2023 18:44:50 +0000
ROA not before: Sun 01 Jan 2023 18:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43824
IP address blocks: 160.238.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:99:65:9b:2c:7f:81:d8:f1:1c:43:14:10:43:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Jan 1 18:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99f1dcbd760213619d009fc5052bb4209cbb3a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:de:df:bf:ec:5d:42:45:ab:9c:79:75:7e:3e:
60:27:bb:27:02:4a:c3:2f:2e:3d:23:f1:f1:0c:3e:
6b:dc:1b:95:71:67:e3:5f:76:e2:27:6c:0e:eb:43:
6f:54:3a:7b:5b:8c:2f:26:9a:13:bb:4d:eb:65:d5:
f8:ea:b7:93:bf:11:0f:d5:74:c8:62:60:96:86:4a:
92:fe:44:f1:f6:3e:55:72:fa:7d:77:60:d1:0f:63:
f1:c3:32:84:d4:df:f4:09:30:5f:51:0f:08:43:e6:
d1:da:84:07:03:72:62:08:67:8e:56:45:0b:8b:4d:
5e:a0:d4:d8:20:7f:26:6e:a1:02:d6:a8:a6:0a:ee:
6f:02:50:77:a9:3b:92:13:ae:85:94:6f:3a:75:e4:
fc:15:ca:b4:6a:d9:1f:ea:18:0a:be:50:8e:6a:f1:
0d:f0:b8:0d:3c:5a:26:f4:63:61:04:6f:13:d9:5a:
c2:bc:7d:13:2c:d3:dd:de:21:5a:5b:ed:6f:0c:36:
60:27:56:e2:b4:29:a2:ca:cd:5f:69:64:06:df:36:
a2:7a:48:62:1a:21:15:b8:d8:9c:69:fd:d5:17:0c:
06:e9:8c:50:33:93:65:73:4b:90:55:97:3d:f2:9e:
6c:f4:21:77:27:ad:5c:e6:ef:bd:43:d8:b7:00:6b:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F1:DC:BD:76:02:13:61:9D:00:9F:C5:05:2B:B4:20:9C:BB:3A:27
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/mfHcvXYCE2GdAJ_FBSu0IJy7Oic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.121.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3a:1a:3a:09:97:3f:24:a9:ea:73:c9:04:d3:af:97:06:00:
ec:b8:47:3a:a5:43:58:6b:b0:75:e9:ac:8a:7b:39:6e:e0:f0:
f8:d1:11:98:72:d9:f4:57:55:f1:c8:f2:38:11:97:f8:14:3e:
61:39:ee:04:84:f5:ab:24:0e:54:5b:92:dd:a8:ea:ea:9c:7a:
c6:e6:a1:48:cf:88:b2:89:ab:0d:cc:d2:4d:a8:e3:56:9a:b2:
22:45:48:b4:ad:52:31:95:2d:b9:04:1b:88:9e:06:a9:16:bc:
49:cf:67:80:20:08:76:a6:db:55:54:c8:8d:73:ab:bf:16:89:
40:96:d1:48:5a:f0:9b:6f:bb:80:82:91:8f:2a:bf:01:c1:a7:
06:0c:41:23:f0:bc:72:56:63:c5:a2:fd:ec:8a:58:f9:5b:ad:
56:c9:78:3c:6c:c3:07:51:35:cf:e9:09:29:24:36:56:ee:12:
8c:db:e3:8b:8c:40:62:f2:00:22:52:aa:fa:6e:de:fd:67:83:
5e:1e:0c:e2:23:65:ac:d8:19:7b:ce:7f:e2:3b:9a:84:48:9d:
f3:a5:99:e3:c2:ea:74:65:93:95:68:fc:2c:f8:8d:8b:ae:e9:
95:c1:c2:ac:9c:a0:bd:51:de:dc:b7:2c:69:5e:22:5a:d2:72:
7d:f1:49:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:10 2024 by rpki-client on console-ams.rpki-client.org