Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/cSH0QOrie3bxd3e6K2pMAnTmt0w.roa
File: cSH0QOrie3bxd3e6K2pMAnTmt0w.roa (raw, json)
Hash identifier: qSPjXJ1TKX52vGRxKvelYHCtRtJaNQyf43JZ6EcqqqY=
Subject key identifier: 71:21:F4:40:EA:E2:7B:76:F1:77:77:BA:2B:6A:4C:02:74:E6:B7:4C
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01856F14F2141A3444728BB39C4461ABDA9D
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/cSH0QOrie3bxd3e6K2pMAnTmt0w.roa
Signing time: Sun 01 Jan 2023 20:45:21 +0000
ROA not before: Sun 01 Jan 2023 20:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202141
IP address blocks: 88.199.95.0/24 maxlen: 24
88.199.94.0/24 maxlen: 24
82.160.140.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f2:14:1a:34:44:72:8b:b3:9c:44:61:ab:da:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 20:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7121f440eae27b76f17777ba2b6a4c0274e6b74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:07:db:06:99:8a:0e:ba:f9:65:b6:d0:c4:50:
05:15:bd:e4:96:0a:16:dc:ae:79:85:d7:ee:ce:f8:
df:18:0a:66:d7:c6:f6:0f:f0:ca:12:d7:65:17:08:
1e:82:14:5c:25:f2:b5:6a:35:84:1b:42:77:8e:58:
00:4f:a2:8d:59:a8:e5:c5:1d:f8:45:15:ec:3a:63:
74:57:f7:55:85:c0:4f:cb:78:92:0d:cb:01:f2:60:
0f:cd:85:cd:4e:6c:00:75:87:93:d5:3e:95:31:f2:
6a:02:f1:b7:4b:ac:d1:4c:4f:c2:01:dc:16:a0:46:
65:1d:db:e8:78:4e:dc:fe:4b:e1:6b:34:54:30:ad:
bd:73:f5:37:f4:1e:f2:33:fe:0e:b6:c3:a5:34:b9:
af:94:32:e4:de:42:45:c0:09:35:14:4b:f5:ea:70:
45:28:4c:ef:e1:0a:e7:ae:b1:d7:92:2f:a4:36:6b:
a4:94:0d:a0:1c:95:64:5e:d7:c8:ad:1d:51:04:ad:
2a:70:5a:c0:ae:4a:fb:21:02:d2:e8:d9:ab:6c:a4:
8c:ba:c8:f5:b4:37:83:2d:40:ec:36:c3:a6:80:3e:
26:e6:11:b3:31:b0:48:86:57:48:b2:3b:d2:fb:76:
74:22:b9:3f:84:cf:69:e3:f1:a2:86:79:93:7f:a2:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:21:F4:40:EA:E2:7B:76:F1:77:77:BA:2B:6A:4C:02:74:E6:B7:4C
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/cSH0QOrie3bxd3e6K2pMAnTmt0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.140.0/23
88.199.94.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:c6:b3:6b:7f:15:ec:1e:23:fc:c6:d1:b1:90:36:4a:8b:c6:
1d:11:d3:bd:ea:37:5e:62:83:2f:78:b4:e3:18:a3:29:71:43:
3f:55:1c:b1:2f:e7:12:16:29:69:5f:40:cf:0b:d8:ba:44:a1:
9f:b1:17:b1:cc:25:69:f6:32:da:d3:c1:f5:ed:1f:1a:ce:28:
60:11:fc:1b:89:b9:7b:9d:6f:e0:76:5a:11:b1:88:52:ab:97:
43:d2:36:92:ea:47:ed:73:07:af:30:84:da:63:5e:0d:cb:c0:
9a:fe:30:71:38:5b:0c:26:de:63:3a:f3:ab:5d:12:8b:15:a6:
ee:2c:3c:32:96:48:46:4f:c1:7a:0a:06:27:3a:45:cf:d3:3a:
3a:55:ed:e4:a3:63:a4:9b:56:e7:d4:85:bd:15:69:11:eb:7c:
c7:75:63:46:b2:20:32:62:09:a2:fa:43:d2:03:44:e7:dd:46:
73:0b:1c:15:d6:e3:d6:e4:0e:a6:29:1b:69:3b:08:c8:63:bc:
11:86:0e:c1:6b:83:ed:5c:93:0c:2b:19:04:81:f9:85:3a:28:
fe:2e:37:24:8a:22:71:25:1b:4d:fd:90:51:24:fc:83:c2:0e:
fe:96:92:d8:1e:f7:c6:79:9b:37:b6:64:3f:64:8d:31:50:1b:
45:f7:b0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:58 2024 by rpki-client on console-ams.rpki-client.org