Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/8WD2SSQY3HdoS5bcpDhWUspEXwI.roa
File: 8WD2SSQY3HdoS5bcpDhWUspEXwI.roa (raw, json)
Hash identifier: WtKoaRkqpS/vcOwbr59dIWVss0Y2Aj+UC6pe9ECVniA=
Subject key identifier: F1:60:F6:49:24:18:DC:77:68:4B:96:DC:A4:38:56:52:CA:44:5F:02
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 018CC5DC7782981025A44D237724F1404B4B
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/8WD2SSQY3HdoS5bcpDhWUspEXwI.roa
Signing time: Mon 01 Jan 2024 16:30:09 +0000
ROA not before: Mon 01 Jan 2024 16:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 159.197.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 20:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:77:82:98:10:25:a4:4d:23:77:24:f1:40:4b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 1 16:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f160f6492418dc77684b96dca4385652ca445f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d0:2c:7f:9f:19:a9:03:a9:f8:52:a9:e9:d4:
02:12:7a:48:2e:0e:27:b6:95:32:55:12:34:58:2b:
b2:34:41:ea:9a:fb:25:c1:f7:37:30:15:58:b2:09:
17:78:2a:1a:fe:f3:3d:dd:66:36:80:5b:13:23:7f:
b3:ca:ea:ac:cc:21:48:53:72:4c:e6:45:00:c5:62:
08:99:fe:83:27:1f:a4:79:e1:47:82:4c:84:57:99:
3d:96:ca:dd:ca:98:32:a0:c8:b9:a1:c9:a5:c5:b9:
3c:14:68:3e:03:ee:5c:b7:6e:9b:df:a2:35:32:af:
43:a1:f6:78:6e:18:f7:79:34:a2:d6:fd:b5:b8:c6:
c0:3e:8c:bb:e9:91:f3:e8:99:4d:44:b9:ec:45:26:
9c:97:b0:6f:02:f3:6e:8e:2c:b9:48:9d:21:de:32:
9c:90:fa:6b:ec:78:63:67:82:fb:ac:57:52:08:e1:
d7:e8:ce:70:85:4f:e7:bd:93:c5:01:d5:d4:4c:de:
43:be:72:fd:f0:d3:30:50:f9:39:05:9a:59:5f:7e:
1d:db:25:43:a2:ff:63:13:64:ce:87:30:5d:26:71:
02:28:b6:ca:c5:39:87:ea:a1:32:89:31:98:2e:cd:
af:fd:de:11:21:80:05:84:42:c4:d0:4d:41:6c:cc:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:60:F6:49:24:18:DC:77:68:4B:96:DC:A4:38:56:52:CA:44:5F:02
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/8WD2SSQY3HdoS5bcpDhWUspEXwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.197.224.0/19
Signature Algorithm: sha256WithRSAEncryption
43:70:6b:77:69:c6:b3:f9:48:bd:42:a9:c2:9a:fb:e1:e2:8b:
59:0b:a5:62:64:cb:56:a4:06:54:ac:21:c1:a5:09:00:3a:68:
b1:c3:e5:ed:cd:08:33:00:d6:c6:5f:12:ef:23:b5:73:b7:87:
dd:09:f6:1b:38:ea:00:8a:c9:f0:57:8f:f1:08:cc:09:18:ef:
6d:c8:d3:bc:24:16:a8:54:51:1f:55:5a:d8:de:c0:1d:3e:83:
04:66:c9:ce:38:c1:04:7b:a3:c9:e6:8b:56:e0:30:87:ce:f8:
ab:2c:65:ac:d8:bc:ed:06:78:54:08:a5:12:d0:61:24:7e:99:
57:bd:78:5e:8a:d3:fb:c3:b4:cb:40:0f:14:de:f0:4c:82:0b:
3e:92:01:31:bc:52:b6:d8:08:22:0e:2b:2c:b0:b9:d5:9f:18:
5f:14:9a:ad:e7:d0:4b:d8:0f:b9:f7:7b:2f:ce:c9:0b:95:d6:
57:ff:3d:fd:51:e5:40:83:28:a3:e1:75:85:e0:42:13:10:f4:
ef:fa:67:b6:78:0c:3f:33:07:62:ac:e7:73:64:dd:ab:df:df:
fa:bd:a5:ed:56:76:a0:0f:5f:a4:a9:7f:56:87:19:82:49:2e:
47:54:e3:0b:a1:36:13:2a:cc:e3:bf:5b:db:6c:dc:d7:80:ec:
75:34:db:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:14 2024 by rpki-client on console-ams.rpki-client.org