Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/PSjBP2LPtoo-7d4rpl-ARfp3YB8.roa
File: PSjBP2LPtoo-7d4rpl-ARfp3YB8.roa (raw, json)
Hash identifier: j4L9jsLhQjFFsdel5ZqAsr/tT9Y0ZaOvAQHatYgkWTc=
Subject key identifier: 3D:28:C1:3F:62:CF:B6:8A:3E:ED:DE:2B:A6:5F:80:45:FA:77:60:1F
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01856F14ED69B5BF5EA1917734C8659342E5
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/PSjBP2LPtoo-7d4rpl-ARfp3YB8.roa
Signing time: Sun 01 Jan 2023 20:45:20 +0000
ROA not before: Sun 01 Jan 2023 20:45:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199910
IP address blocks: 82.160.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ed:69:b5:bf:5e:a1:91:77:34:c8:65:93:42:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 20:45:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d28c13f62cfb68a3eedde2ba65f8045fa77601f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:00:be:91:65:f9:ce:af:63:e8:24:59:d1:
63:64:9d:3c:68:15:35:9a:89:34:7b:5a:57:76:90:
7a:5e:3a:3f:b2:1b:b2:30:0b:31:8c:cc:8d:d0:32:
17:06:d8:2a:62:0a:7b:a1:4e:44:70:a0:79:f5:0b:
58:ee:4a:50:4e:fc:b3:f2:55:20:9d:89:7d:4a:ef:
55:67:ac:fd:06:dc:b1:49:59:4a:b2:fa:38:1b:d3:
9a:ec:cf:b8:a7:c2:f2:0d:2e:b1:fd:50:81:24:df:
8f:72:79:25:f1:90:66:5b:3b:fa:8e:f9:eb:d9:83:
8f:fe:4b:be:e0:9b:d0:2c:bd:73:d0:d1:86:ff:94:
8b:ee:34:03:69:48:fb:24:fa:e0:4a:71:2c:19:4f:
0a:4c:56:1c:87:77:8d:aa:93:9b:9d:50:e8:a3:33:
df:c8:cb:5f:38:f1:00:ed:ac:30:0f:29:48:4e:9f:
12:63:66:9e:1a:e2:e6:51:f5:d2:a2:17:42:4e:4e:
75:f6:a7:12:f3:c0:68:ed:40:fd:c2:a4:39:6b:ce:
30:bb:1d:82:7a:fb:cc:1d:93:22:f1:af:6e:87:c8:
3c:a4:67:c9:8d:8e:79:1c:e3:eb:05:3c:1a:1b:28:
ff:56:55:ff:39:89:37:22:85:7b:f2:39:1b:fa:d8:
b6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:28:C1:3F:62:CF:B6:8A:3E:ED:DE:2B:A6:5F:80:45:FA:77:60:1F
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/PSjBP2LPtoo-7d4rpl-ARfp3YB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:65:97:f4:b0:c9:56:5b:28:b1:a4:11:79:8f:d9:58:9a:0c:
2e:ec:5a:df:23:34:5f:91:54:61:d7:da:8a:33:9e:79:c2:16:
07:38:3b:01:63:75:68:75:64:5c:a9:a1:67:b0:b1:b1:4a:fb:
f6:e8:16:48:a0:8c:21:55:c2:37:39:84:60:52:f3:c1:d4:f5:
9b:6a:82:50:33:82:01:18:e6:ba:a2:44:c5:e2:73:8d:aa:4c:
34:b0:4a:b5:4d:2c:db:37:59:5c:9a:5f:48:53:33:04:af:23:
c4:b0:99:6d:f4:23:ca:20:13:fe:bf:cf:96:30:33:32:df:49:
60:aa:44:c1:53:70:0a:11:a7:e8:e0:bb:e6:13:3c:e0:61:31:
65:a3:03:f4:b6:7d:a6:4b:7f:09:95:1d:61:6f:fb:de:4a:ee:
95:18:e1:49:0d:28:60:2a:de:da:29:97:d8:b6:03:f8:d4:8e:
f3:81:91:94:a9:46:c3:8d:fd:87:14:5a:6a:78:8e:b9:c2:91:
1a:5c:5e:ed:90:a6:8a:e4:d8:e6:d9:fb:11:61:37:81:a8:f9:
fc:c3:75:c6:3b:c2:47:5c:b9:80:a0:a1:91:32:54:3b:47:d2:
f4:35:a9:3c:26:08:ae:55:46:e4:0c:50:94:ba:fd:c5:2c:a9:
1d:29:b7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:58 2024 by rpki-client on console-ams.rpki-client.org