Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/2efRJ78Z0NnsN-33tVUm4cTyJKY.roa
File: 2efRJ78Z0NnsN-33tVUm4cTyJKY.roa (raw, json)
Hash identifier: pJxE9+ZSTkys8eYa5FmiJRyLgZBxvZbSdL7F+iJqU94=
Subject key identifier: D9:E7:D1:27:BF:19:D0:D9:EC:37:ED:F7:B5:55:26:E1:C4:F2:24:A6
Certificate issuer: /CN=65179265803b7804d0fccf5962a8b163743e0d1e
Certificate serial: 018BF0E1573E035B570829717D8B708FDF7D
Authority key identifier: 65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/2efRJ78Z0NnsN-33tVUm4cTyJKY.roa
Signing time: Tue 21 Nov 2023 07:56:21 +0000
ROA not before: Tue 21 Nov 2023 07:56:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 160.214.98.0/24 maxlen: 24
160.214.97.0/24 maxlen: 24
160.214.96.0/24 maxlen: 24
160.214.101.0/24 maxlen: 24
160.214.99.0/24 maxlen: 24
160.214.102.0/24 maxlen: 24
160.214.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:e1:57:3e:03:5b:57:08:29:71:7d:8b:70:8f:df:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65179265803b7804d0fccf5962a8b163743e0d1e
Validity
Not Before: Nov 21 07:56:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9e7d127bf19d0d9ec37edf7b55526e1c4f224a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:15:8e:e8:78:c9:3a:ad:3e:63:c5:e2:67:
28:f3:10:07:f8:55:ef:3f:ba:ab:93:e7:e5:b3:64:
9f:4a:03:ee:1a:e6:e1:7a:89:a7:55:24:a4:4f:8c:
cf:68:1c:ad:a9:5b:f9:f9:13:9c:a0:bd:2b:50:4b:
a2:bd:da:06:f8:96:c0:13:ea:3e:41:7f:d4:82:a9:
60:2d:88:91:e8:a1:cc:e0:46:23:c7:bf:d3:8b:02:
5d:4d:f1:79:e4:92:3f:09:f2:57:14:d5:ff:f0:f5:
8f:d5:27:76:80:11:27:7f:7b:6d:e5:ff:43:ec:b4:
c1:de:2c:83:0c:07:27:30:ce:a4:8a:42:44:7a:33:
14:21:5b:c8:63:70:a4:89:fd:5b:eb:16:6d:a4:71:
75:bd:95:16:de:48:19:23:9a:5e:88:02:59:8d:d0:
94:df:23:f4:27:ef:ff:2a:43:53:b5:13:df:57:c3:
d7:34:de:da:4f:4f:f3:9e:93:c1:ee:c4:64:60:15:
9e:ca:01:55:c7:32:b2:8b:e0:a9:81:be:0f:fa:bd:
c7:f9:25:7f:89:37:3a:d6:f8:8f:f7:fe:78:0a:df:
84:0e:72:b3:ed:ba:dc:5a:20:41:85:ad:24:d0:af:
5e:7d:e9:37:8b:71:2c:d7:31:0b:87:de:f6:89:b8:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E7:D1:27:BF:19:D0:D9:EC:37:ED:F7:B5:55:26:E1:C4:F2:24:A6
X509v3 Authority Key Identifier:
keyid:65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/2efRJ78Z0NnsN-33tVUm4cTyJKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.214.96.0/22
160.214.101.0-160.214.103.255
Signature Algorithm: sha256WithRSAEncryption
a4:cb:de:92:68:f7:70:b1:a1:b8:a8:cf:8c:e1:d7:64:dd:c3:
aa:a6:55:3d:96:52:f9:05:d6:c2:cc:bc:99:e6:9f:93:f3:36:
98:db:6b:ee:e8:3b:3b:9f:c6:a5:bd:75:91:46:50:f3:f1:9b:
1f:7f:89:13:4f:07:a4:d9:d3:93:f1:7b:e2:39:86:7d:fc:d4:
cb:5c:d7:a7:c3:e8:0c:a9:c6:b9:e8:56:57:8d:41:b8:b6:32:
3d:8d:68:ac:fd:ce:04:be:0e:60:c0:5e:f2:77:1a:d1:eb:6d:
a1:b4:ef:ba:73:b8:b0:32:4c:34:d2:6a:a6:d3:da:00:eb:82:
6b:8d:28:65:ce:37:28:71:b2:8e:cd:fa:fb:14:63:68:9c:4e:
1b:97:d0:ac:58:d5:d4:56:a6:2d:62:30:58:2d:5f:c1:bb:c6:
cd:3f:33:a2:8a:73:33:7d:9a:6f:d4:be:96:2b:bd:68:b6:99:
af:92:97:32:db:53:f0:fc:25:6a:b6:81:22:79:99:8a:1d:a7:
62:39:ab:f0:7d:83:ce:a7:48:b0:ed:90:e2:9e:e4:c8:4b:50:
8c:9e:d5:6b:b4:57:1e:32:1d:e2:cd:92:7a:31:de:1a:53:55:
06:2b:76:6e:48:40:81:89:09:24:0a:d2:9d:4a:ce:be:08:6c:
2a:2a:0e:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 6 14:00:22 2023 by rpki-client on console-fra.rpki-client.org