Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ReGAlsFeuLMRpemoXn-cMvcslyc.roa
File: ReGAlsFeuLMRpemoXn-cMvcslyc.roa (raw, json)
Hash identifier: JV68pdu14N83674wHv8nweynHpho2G9Rp5NeLA6i6KQ=
Subject key identifier: 45:E1:80:96:C1:5E:B8:B3:11:A5:E9:A8:5E:7F:9C:32:F7:2C:97:27
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01856C53D94130A5804493EF2CBFCFD00501
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ReGAlsFeuLMRpemoXn-cMvcslyc.roa
Signing time: Sun 01 Jan 2023 07:55:12 +0000
ROA not before: Sun 01 Jan 2023 07:55:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212512
IP address blocks: 160.20.109.0/24 maxlen: 24
185.250.210.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Mar 2023 20:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d9:41:30:a5:80:44:93:ef:2c:bf:cf:d0:05:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 07:55:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45e18096c15eb8b311a5e9a85e7f9c32f72c9727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:dd:6b:86:8c:b4:69:9c:45:95:84:c2:8b:
86:91:a1:c8:37:ea:c8:cc:8a:96:8e:8c:24:4e:b8:
c4:b2:41:04:99:c5:d3:ef:97:a1:5c:ed:57:3c:c8:
60:b5:4a:2e:08:6d:32:c0:da:92:8b:c8:a9:58:f1:
48:4d:0d:48:de:11:d8:ee:af:ff:fc:d5:96:19:a2:
dd:b9:f2:65:47:09:60:4c:aa:65:5f:9d:c2:ff:2a:
d1:e8:92:40:02:af:8c:22:04:a8:b3:bb:b4:f6:c8:
85:78:10:bd:aa:2a:96:27:30:4e:d9:94:cd:66:e8:
dc:a0:e3:47:bd:ef:d6:b1:c9:ca:a7:02:e4:97:67:
45:37:54:37:51:28:6c:91:38:8b:da:23:05:8c:c2:
20:65:ff:f5:c2:ad:94:b4:9c:2e:83:fe:0d:c9:b2:
71:77:1f:48:0b:72:3e:46:9f:58:de:f9:6b:82:5e:
17:5f:8b:53:ea:de:74:8d:0d:64:6f:f6:93:88:76:
9e:a3:f8:e2:f6:5a:09:05:e9:05:14:8e:df:2a:31:
6d:53:b0:ef:f0:f4:30:0b:f9:0a:15:78:f0:dc:65:
16:40:89:49:7c:83:95:d5:7d:59:d9:10:88:a7:ed:
1e:fd:af:13:04:7a:a0:c4:f1:d6:7d:75:c9:f0:c6:
cf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E1:80:96:C1:5E:B8:B3:11:A5:E9:A8:5E:7F:9C:32:F7:2C:97:27
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ReGAlsFeuLMRpemoXn-cMvcslyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.109.0/24
185.243.181.0/24
185.250.210.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ce:c2:ce:94:8e:c5:ac:53:c3:2c:fa:17:1f:3d:00:12:fa:
2d:14:d8:40:df:0a:11:88:ce:90:36:c7:b4:6a:98:ad:2a:09:
b5:25:cc:58:21:96:0a:8a:29:a2:08:1e:43:c6:b7:ac:7d:96:
48:88:95:d6:a4:af:8e:25:6d:20:3f:31:e8:eb:d2:a7:90:cb:
ae:a9:b1:19:77:bd:5e:36:6d:6d:6e:eb:b3:3c:07:18:4a:36:
9c:18:ea:2a:89:37:4e:d4:7d:94:be:a2:41:8f:16:18:2a:91:
66:b2:15:75:ab:8e:12:9e:05:5b:70:57:54:08:47:00:ed:de:
86:ea:04:45:2b:93:97:99:1e:7c:02:87:dc:ab:98:63:b2:89:
9c:51:9a:06:75:10:a8:56:ed:87:34:69:2c:85:a4:4e:28:c8:
c4:7b:54:a6:fb:7b:cf:5f:89:1d:c7:46:40:78:9f:6b:44:f1:
67:89:11:bc:55:67:21:fe:1b:f2:3e:92:03:61:ef:20:b9:85:
42:1e:95:0d:d5:55:70:68:71:8e:ed:0f:aa:81:e5:55:5b:7d:
c8:4c:ff:d5:47:62:e5:10:c5:e5:9a:fd:90:49:ae:15:aa:65:
4b:46:ac:ad:95:6f:ac:eb:88:33:a5:31:55:d7:3c:58:12:1b:
3d:35:1a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org