Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/EsO0_3VNYgfYZ_HtgxyKfnZgv3s.roa
File: EsO0_3VNYgfYZ_HtgxyKfnZgv3s.roa (raw, json)
Hash identifier: 3CGc4WSk7Bx1lgFakdQuMJoA/gbUzwQEIJTfIJ81mGs=
Subject key identifier: 12:C3:B4:FF:75:4D:62:07:D8:67:F1:ED:83:1C:8A:7E:76:60:BF:7B
Certificate issuer: /CN=65179265803b7804d0fccf5962a8b163743e0d1e
Certificate serial: 018B12EF23806E5319B6DC5C228007C49C06
Authority key identifier: 65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/EsO0_3VNYgfYZ_HtgxyKfnZgv3s.roa
Signing time: Mon 09 Oct 2023 05:35:43 +0000
ROA not before: Mon 09 Oct 2023 05:35:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8772
IP address blocks: 160.214.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:12:ef:23:80:6e:53:19:b6:dc:5c:22:80:07:c4:9c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65179265803b7804d0fccf5962a8b163743e0d1e
Validity
Not Before: Oct 9 05:35:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12c3b4ff754d6207d867f1ed831c8a7e7660bf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:51:86:8a:b7:d7:dd:e8:aa:cc:1b:03:b5:
85:67:10:b0:2b:0b:37:db:98:13:cc:c0:9d:07:d0:
d7:c2:28:d3:aa:0d:e6:f8:ca:74:75:29:f6:75:5a:
84:5e:39:7a:9e:cc:e8:f7:84:12:41:8c:50:fa:52:
42:76:63:a0:9a:42:c3:06:0f:2c:a8:90:05:20:2f:
be:d1:22:dd:0c:1e:cd:e5:00:96:48:6e:6e:f1:18:
3a:1c:2a:5e:55:29:57:7f:90:cb:ee:a4:aa:c3:82:
da:8c:42:a3:46:53:c3:89:28:94:9a:77:52:21:f0:
62:57:b7:68:56:9b:56:77:d5:f4:c1:c3:52:97:2b:
82:9c:e3:7e:ca:ae:71:1c:19:6d:ec:b2:fd:e6:6f:
5a:56:05:9b:85:6e:8d:ac:ab:6e:2e:41:a8:c9:c5:
c2:29:19:17:1a:be:ed:43:2b:cf:6d:c6:a2:98:09:
8a:02:16:ea:43:de:ef:c2:6e:dc:f9:3e:80:a0:0b:
0b:bd:d2:5e:04:ea:ce:31:e0:7b:7f:9f:41:10:c2:
ae:f3:48:8f:a8:6a:40:95:89:3d:27:ea:19:27:5d:
1a:f1:d6:4e:c9:87:35:57:12:53:73:97:fe:44:9f:
c9:84:8b:ea:90:3f:6b:a2:1b:4d:64:55:80:e0:53:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C3:B4:FF:75:4D:62:07:D8:67:F1:ED:83:1C:8A:7E:76:60:BF:7B
X509v3 Authority Key Identifier:
keyid:65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/EsO0_3VNYgfYZ_HtgxyKfnZgv3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.214.110.0/24
Signature Algorithm: sha256WithRSAEncryption
13:84:5b:b9:4e:df:7a:ba:a1:59:98:67:3a:3b:f3:29:8f:73:
10:97:65:6d:e2:3e:0b:7d:4c:3e:34:b2:5e:4f:23:ba:be:c9:
9c:bc:df:9c:b8:61:1b:8c:02:83:54:f7:67:cf:65:7d:80:e8:
77:61:7e:08:c8:c8:dd:93:71:41:af:68:ae:8d:0a:4a:4c:8f:
55:fe:e3:09:53:e6:7a:84:20:d9:1d:50:d8:08:2b:9a:4b:71:
b5:31:53:75:02:41:96:ff:f2:26:c6:45:bc:26:51:df:b9:4b:
6c:57:a9:7f:04:05:03:91:8f:18:fa:6d:fa:76:74:32:f4:0f:
5b:02:6d:05:3b:a7:06:cb:b2:c9:bb:bb:b4:ff:68:c5:8c:5a:
c6:86:4e:5e:99:05:2d:bf:f9:61:6f:1e:07:ef:e6:20:1f:a6:
ca:0c:89:a1:b1:8c:c3:24:99:ac:b2:cc:51:f8:94:1c:10:d6:
cc:50:a0:b7:4e:c4:36:4b:95:c7:76:d0:9a:47:71:d2:33:22:
2e:26:a3:4a:18:76:1c:27:1f:e5:2e:87:60:af:8f:07:04:52:
9e:a1:ac:3c:f9:40:2e:ba:42:b9:67:55:88:e8:2e:bd:ca:62:
44:61:da:23:ba:9d:ba:61:a4:4d:b3:dd:24:68:0b:a0:07:7c:
70:bd:d6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:33 2024 by rpki-client on console-ams.rpki-client.org