Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/AHW8pwP9V4CMYQhQ4fJHVd8IgJk.roa
File: AHW8pwP9V4CMYQhQ4fJHVd8IgJk.roa (raw, json)
Hash identifier: G9QjG1dr+DUJlCMQEtB/f7JrFb6dATfO9LwBEdHmn/4=
Subject key identifier: 00:75:BC:A7:03:FD:57:80:8C:61:08:50:E1:F2:47:55:DF:08:80:99
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01864C475D7E95AE4603FC0F6E2921629DD3
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/AHW8pwP9V4CMYQhQ4fJHVd8IgJk.roa
Signing time: Mon 13 Feb 2023 19:36:30 +0000
ROA not before: Mon 13 Feb 2023 19:36:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13347
IP address blocks: 166.108.16.0/22 maxlen: 22
166.108.28.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4c:47:5d:7e:95:ae:46:03:fc:0f:6e:29:21:62:9d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Feb 13 19:36:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0075bca703fd57808c610850e1f24755df088099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:f8:00:2c:cd:05:db:1f:05:71:97:37:06:
43:13:98:1b:95:66:20:3e:bb:63:98:29:f0:e7:3f:
27:9e:0d:48:f6:b2:90:44:d7:53:55:49:13:8e:b7:
b0:ca:cd:a3:e1:c4:50:41:a7:a1:f0:ed:58:08:14:
3d:a9:e2:83:2b:c3:0f:44:cc:6b:0f:17:3f:7a:46:
2b:18:08:87:d3:d2:2d:c2:3c:12:7d:8e:49:4f:3b:
da:27:20:5d:e7:d8:5c:a2:20:a3:1f:b8:11:a6:a5:
bb:72:4c:83:74:a0:0b:93:85:ab:87:90:f2:e8:97:
35:30:f7:65:00:15:b1:30:6f:b3:8a:c1:52:c4:de:
9b:a0:f9:1b:7e:10:6f:63:2a:13:4b:2c:fb:f4:e0:
32:7d:69:e4:97:28:44:03:91:51:7d:c5:f7:1e:7e:
3b:8e:04:58:22:c3:21:5c:bb:99:9e:e2:50:15:16:
d7:0d:5a:12:eb:01:40:3b:a8:ea:df:47:03:76:f8:
b8:e6:7b:6b:bb:34:61:2a:27:46:cc:f9:de:17:96:
3a:71:0c:2b:61:17:78:81:7c:86:3e:24:9b:3c:c5:
21:ca:69:2c:b3:08:70:ac:a8:7b:be:ad:9d:e2:71:
f9:2f:41:8a:9d:d5:23:0f:70:0a:dd:17:b2:23:17:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:75:BC:A7:03:FD:57:80:8C:61:08:50:E1:F2:47:55:DF:08:80:99
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/AHW8pwP9V4CMYQhQ4fJHVd8IgJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.16.0/22
166.108.28.0/22
Signature Algorithm: sha256WithRSAEncryption
61:39:74:f3:71:d6:d8:03:b9:c3:ea:43:97:b3:da:7a:61:e2:
b5:70:07:ca:3d:85:2f:13:2f:d4:51:cf:0a:9a:bc:30:a6:2f:
cf:62:f0:35:92:5c:f8:f6:f9:f3:18:4e:75:75:1a:b2:82:40:
77:2a:d6:aa:9b:e9:b5:c2:55:6e:ce:58:cf:6d:3d:10:eb:b2:
de:bd:86:ee:a9:7e:2b:d7:92:21:45:a9:cc:f1:b8:ad:ca:bd:
17:7f:a0:98:97:74:64:cb:8c:d0:bc:4e:03:4c:c4:d2:b6:b8:
20:de:75:5f:e9:7f:bf:5c:8f:02:85:27:a3:4a:ce:79:a9:80:
c4:1b:8f:d3:93:43:08:39:e2:96:ae:0f:f9:fe:04:6f:5d:48:
cf:97:0d:0b:78:d1:03:dc:17:3c:bc:bc:12:56:f4:6d:97:8b:
81:ef:a1:c5:43:c3:e4:8c:b1:d9:61:c8:62:24:c9:02:cb:e6:
8f:d5:68:78:1e:93:60:27:77:36:78:95:a1:42:74:f5:16:29:
67:ce:d2:c2:41:34:20:88:8f:72:35:5c:d7:4f:38:be:b6:31:
79:64:22:2b:91:3c:9e:f2:1f:9e:dd:b6:72:fa:de:eb:1e:79:
f5:d5:52:67:5c:e5:5e:89:b6:f1:ff:86:ba:fa:b3:03:c3:f0:
f6:03:16:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 15:28:53 2023 by rpki-client on console-fra.rpki-client.org