Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/emdsjtxhz8sIAVC78LLBe-jsIvI.roa
File: emdsjtxhz8sIAVC78LLBe-jsIvI.roa (raw, json)
Hash identifier: ef1VWd0gIT1h1MoAs11cYMjnpzEgYZp7yiTQgYhBtIs=
Subject key identifier: 7A:67:6C:8E:DC:61:CF:CB:08:01:50:BB:F0:B2:C1:7B:E8:EC:22:F2
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018D9FBC6B683A4E8307B198CF6820D1A64C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/emdsjtxhz8sIAVC78LLBe-jsIvI.roa
Signing time: Mon 12 Feb 2024 23:52:22 +0000
ROA not before: Mon 12 Feb 2024 23:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24875
IP address blocks: 160.238.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 02:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9f:bc:6b:68:3a:4e:83:07:b1:98:cf:68:20:d1:a6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Feb 12 23:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a676c8edc61cfcb080150bbf0b2c17be8ec22f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:3f:bd:db:66:9a:0a:ed:d2:64:04:a1:94:
f7:07:4c:91:65:4e:d2:94:de:0b:83:60:0b:10:4f:
ac:6a:28:1a:63:1c:49:3c:8e:39:21:b8:87:99:bd:
d6:00:0e:53:e8:a4:dc:24:15:2d:f6:17:3c:23:7c:
d1:98:7a:77:df:04:11:e8:6a:62:8b:8e:e6:dc:39:
04:36:11:19:75:d8:e2:86:1d:6d:3c:9a:a3:c0:bf:
08:e2:ea:9c:dc:d4:a2:00:2b:34:b9:29:be:fb:0d:
80:ca:d6:7f:25:92:ae:1e:be:09:97:02:9a:52:5a:
c6:3e:01:1c:6a:28:89:92:72:66:8e:f0:89:bb:ff:
5f:87:bd:3c:fd:52:8c:e2:de:ac:13:85:8d:5e:9d:
b8:4c:21:6e:99:de:23:cc:90:4d:80:e5:4b:58:43:
0c:bb:b6:f8:33:51:18:b6:07:4c:80:7b:58:be:51:
6b:22:e1:d5:30:46:e6:aa:9a:e5:40:cb:f1:d6:81:
2a:aa:d3:07:3e:c5:a1:2a:69:c5:24:98:ce:02:f6:
e7:eb:11:f8:7b:2d:ef:94:d6:3d:75:14:79:1e:b7:
4f:ea:c4:62:e4:9a:8b:fb:dc:a0:50:c8:3f:a0:e2:
74:a6:f7:b4:47:5a:b2:31:e4:ed:a0:ec:3c:52:c8:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:67:6C:8E:DC:61:CF:CB:08:01:50:BB:F0:B2:C1:7B:E8:EC:22:F2
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/emdsjtxhz8sIAVC78LLBe-jsIvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.64.0/24
Signature Algorithm: sha256WithRSAEncryption
54:51:11:8c:9d:b0:05:7d:45:65:61:7c:23:33:5f:19:55:66:
97:d8:29:f4:45:1e:3b:d2:1d:7a:71:86:13:e1:26:31:e5:8e:
99:58:e9:bb:fc:3e:bd:38:f4:8c:42:b9:7a:5d:6f:cb:a9:fa:
af:09:ae:fe:4f:33:f8:bc:d3:9c:0b:7a:5a:12:fd:9e:a8:e6:
82:10:0c:15:97:ac:a6:a6:1f:6c:6e:61:bd:43:f4:6a:e5:c9:
9b:83:b5:10:ec:60:45:26:55:41:d2:81:65:be:34:63:f4:2e:
07:d8:de:44:e1:57:4f:46:c5:87:d4:fb:a1:fd:bd:e6:e1:d5:
69:be:9f:8e:6d:3d:59:f2:14:3f:bb:a7:ca:5f:6d:97:40:7c:
76:1c:d4:83:e3:e3:4a:2e:3e:8f:e2:bf:25:79:ad:44:c4:c8:
5d:88:b1:e4:81:2d:ae:4d:8e:26:1b:9c:28:e8:50:0d:5c:c8:
e9:95:a6:ab:8f:a4:65:33:75:2e:f8:9e:d5:ef:f1:72:ec:be:
23:97:f0:73:a5:b3:7a:09:ff:c5:35:7b:ca:8a:5b:97:59:be:
a7:87:9d:d6:27:8e:fb:59:ed:cb:2f:85:7b:94:25:1f:e7:ce:
58:4f:47:3b:06:22:15:5a:61:0b:22:be:87:35:44:69:5f:5d:
d3:3b:29:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2fvGtoOk6DB7GYz2gg0aZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwMjEyMjM1MjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTY3NmM4ZWRjNjFjZmNiMDgwMTUwYmJmMGIyYzE3YmU4ZWMyMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqw/vdtmmgrt0mQEoZT3B0yRZU7S
lN4Lg2ALEE+saigaYxxJPI45IbiHmb3WAA5T6KTcJBUt9hc8I3zRmHp33wQR6Gpi
i47m3DkENhEZddjihh1tPJqjwL8I4uqc3NSiACs0uSm++w2AytZ/JZKuHr4JlwKa
UlrGPgEcaiiJknJmjvCJu/9fh708/VKM4t6sE4WNXp24TCFumd4jzJBNgOVLWEMM
u7b4M1EYtgdMgHtYvlFrIuHVMEbmqprlQMvx1oEqqtMHPsWhKmnFJJjOAvbn6xH4
ey3vlNY9dRR5HrdP6sRi5JqL+9ygUMg/oOJ0pve0R1qyMeTtoOw8UsglAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHpnbI7cYc/LCAFQu/CywXvo7CLyMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvZW1kc2p0eGh6OHNJQVZDNzhMTEJlLWpzSXZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoO5AMA0G
CSqGSIb3DQEBCwUAA4IBAQBUURGMnbAFfUVlYXwjM18ZVWaX2Cn0RR470h16cYYT
4SYx5Y6ZWOm7/D69OPSMQrl6XW/LqfqvCa7+TzP4vNOcC3paEv2eqOaCEAwVl6ym
ph9sbmG9Q/Rq5cmbg7UQ7GBFJlVB0oFlvjRj9C4H2N5E4VdPRsWH1Puh/b3m4dVp
vp+ObT1Z8hQ/u6fKX22XQHx2HNSD4+NKLj6P4r8lea1ExMhdiLHkgS2uTY4mG5wo
6FANXMjplaarj6RlM3Uu+J7V7/Fy7L4jl/BzpbN6Cf/FNXvKiluXWb6nh53WJ477
We3LL4V7lCUf585YT0c7BiIVWmELIr6HNURpX13TOynP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org