Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/zpQPbrvhASBkKYncLGyeA3fj_Bo.roa
File: zpQPbrvhASBkKYncLGyeA3fj_Bo.roa (raw, json)
Hash identifier: Egbl0cHcYOQ9+vUHtVHKdiOVzlm8iZhA10KWFoGncMw=
Subject key identifier: CE:94:0F:6E:BB:E1:01:20:64:29:89:DC:2C:6C:9E:03:77:E3:FC:1A
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 018E14DC892D6DCA6CA0A5FDE6A4B153055A
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/zpQPbrvhASBkKYncLGyeA3fj_Bo.roa
Signing time: Wed 06 Mar 2024 17:43:01 +0000
ROA not before: Wed 06 Mar 2024 17:43:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61185
IP address blocks: 109.238.160.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 17:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:dc:89:2d:6d:ca:6c:a0:a5:fd:e6:a4:b1:53:05:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Mar 6 17:43:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce940f6ebbe10120642989dc2c6c9e0377e3fc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:cd:6f:98:8b:37:8e:d7:21:aa:34:99:fb:
50:05:94:ba:d6:72:f2:81:01:65:d4:5d:71:7f:a2:
20:c4:96:35:4c:08:f5:2d:af:39:94:30:22:b4:2d:
bf:09:51:93:01:73:9e:41:f9:1a:7a:42:fd:5f:d9:
83:16:43:76:24:1e:e3:03:9f:b7:f3:32:09:e2:cd:
9c:95:79:c8:d8:4b:7e:29:c6:a5:c6:07:5a:5f:5e:
b6:e7:a6:39:65:c2:f5:c9:ac:35:19:60:f3:e2:2c:
26:09:cf:28:3d:dd:40:f6:fa:03:3e:ad:63:aa:6f:
15:b6:c0:54:16:65:bb:73:9c:44:a7:f0:14:af:70:
b9:23:f0:15:8f:c0:e6:d4:2b:59:7e:1d:21:5d:d3:
5c:85:3e:1f:e8:01:af:60:1d:48:ea:dd:41:bc:a3:
ed:a1:fc:ba:3c:f8:61:5d:e3:21:b0:92:10:7e:09:
93:43:ff:34:28:12:64:ea:6b:df:dc:00:41:4e:54:
9e:60:ca:8a:f8:00:7c:ca:c6:c3:ba:b0:71:f1:1e:
2a:d0:cb:12:f2:6a:35:d4:c3:1e:f0:13:1d:86:4e:
de:70:7e:62:5b:fd:a5:15:a8:47:da:31:0d:9e:68:
77:96:2c:8f:e5:7a:17:97:33:a1:91:50:b0:2b:5f:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:94:0F:6E:BB:E1:01:20:64:29:89:DC:2C:6C:9E:03:77:E3:FC:1A
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/zpQPbrvhASBkKYncLGyeA3fj_Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.238.160.0/21
Signature Algorithm: sha256WithRSAEncryption
00:c9:a1:c3:c6:fc:78:fb:ba:68:ca:be:64:c7:a3:ba:4c:2a:
17:c5:7e:89:f2:ac:e8:fd:26:40:62:90:a2:e8:5e:41:15:77:
b8:95:40:7d:3f:2c:96:c5:32:8c:d1:bf:17:91:f6:22:1b:60:
da:32:1e:de:5e:78:b2:20:26:48:b4:d5:ab:74:e1:cc:92:79:
1b:1f:c4:d1:61:f8:f8:b9:e6:0b:2e:a2:9f:b8:95:ed:3b:27:
11:fd:e0:66:70:25:5f:91:0d:93:c0:fd:d3:6d:ae:ee:9f:7c:
e2:b7:dd:8d:d5:5b:05:a2:b3:02:9e:6c:f1:fc:ff:38:2b:81:
c6:ad:7c:f7:6c:2d:d1:be:e1:ea:72:cc:bf:f6:50:15:89:fe:
11:9b:26:52:2e:62:fd:8e:70:58:60:4e:99:65:c5:2b:6a:69:
8c:0a:31:85:5f:2e:90:5a:b6:f8:f0:ab:3e:fb:42:00:1e:be:
ca:b2:c5:dd:f7:55:87:94:4e:92:c9:5f:fa:99:27:6f:64:94:
a4:7a:35:5d:32:fa:b7:ab:db:74:24:f4:36:b0:d2:12:0b:19:
c8:91:e6:eb:7b:ee:9f:23:b5:f0:7c:14:ce:cf:b6:f9:43:ce:
a6:49:fc:f7:65:26:95:f0:1c:cc:30:ab:b8:cc:93:a4:60:5a:
25:d5:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 20:02:13 2024 by rpki-client on console-ams.rpki-client.org