Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/exFL_eVSrHMfXHuft9cBlTAAEn4.roa
File: exFL_eVSrHMfXHuft9cBlTAAEn4.roa (raw, json)
Hash identifier: SFH5HMYduxoiJMLWKUGSRozJPIYIFE0FwsyWbwY9lhU=
Subject key identifier: 7B:11:4B:FD:E5:52:AC:73:1F:5C:7B:9F:B7:D7:01:95:30:00:12:7E
Certificate issuer: /CN=65179265803b7804d0fccf5962a8b163743e0d1e
Certificate serial: 018A6A23395EC01FA868EF4CE243F9C905F8
Authority key identifier: 65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/exFL_eVSrHMfXHuft9cBlTAAEn4.roa
Signing time: Wed 06 Sep 2023 10:56:47 +0000
ROA not before: Wed 06 Sep 2023 10:56:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 160.214.111.0/24 maxlen: 24
160.214.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:23:39:5e:c0:1f:a8:68:ef:4c:e2:43:f9:c9:05:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65179265803b7804d0fccf5962a8b163743e0d1e
Validity
Not Before: Sep 6 10:56:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b114bfde552ac731f5c7b9fb7d701953000127e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:51:4a:9a:c3:d8:13:5f:e0:9f:e6:8b:ee:
fe:a4:87:79:2e:3e:01:0e:03:a9:b4:35:ca:03:12:
0b:61:b3:a6:0a:35:6f:d9:df:29:80:7b:24:f0:a2:
70:c9:94:e7:40:cc:81:87:8d:df:ba:06:ed:ab:d9:
35:be:f3:0f:63:05:22:06:83:29:ed:0a:e6:7a:4b:
b0:63:f0:62:bc:74:53:51:e9:1c:93:65:fd:71:1e:
b4:a2:b2:0c:cf:7d:6e:6f:93:a0:69:92:ff:4a:32:
6c:80:bc:a3:af:05:00:9e:c0:66:a3:3e:ce:95:cf:
7b:46:c5:57:9b:42:9a:d1:41:1a:72:ca:e8:38:73:
de:be:c6:91:f2:19:ca:e0:6c:2e:21:e5:6d:1c:e4:
d6:51:e6:8f:7c:29:ba:52:bd:d9:39:e1:78:cb:3c:
9c:50:e9:27:d5:ea:31:df:18:44:eb:41:82:fb:e4:
fa:cb:77:e7:a3:7e:f9:f1:ec:70:93:ac:30:cd:38:
1c:cd:75:f3:1e:85:16:a9:91:6d:20:ff:cb:e8:ba:
0d:7e:55:2b:ff:cc:51:22:40:07:e9:3b:c3:2b:31:
5c:1a:cd:c0:c9:9f:b5:7e:9b:ce:db:03:45:9f:b4:
20:57:80:f0:3c:ae:80:d8:6d:28:1a:c2:93:73:5a:
f5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:11:4B:FD:E5:52:AC:73:1F:5C:7B:9F:B7:D7:01:95:30:00:12:7E
X509v3 Authority Key Identifier:
keyid:65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/exFL_eVSrHMfXHuft9cBlTAAEn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.214.111.0-160.214.112.255
Signature Algorithm: sha256WithRSAEncryption
43:8f:10:74:90:bb:f3:83:ea:9b:bd:52:71:e9:4a:31:f8:89:
19:53:6a:8e:16:d6:aa:1d:20:b3:76:db:17:6d:4a:3d:36:8a:
b5:3a:88:13:49:48:3d:5c:20:9a:ee:4d:a8:5c:a0:66:c2:e4:
c7:88:49:bf:dc:b0:2a:3a:0d:47:15:5a:aa:cb:00:1d:58:4f:
ee:21:ce:87:90:c7:4d:e2:57:b6:f5:f8:db:6f:02:b7:17:76:
91:81:bf:db:de:97:41:1f:66:5a:6e:4f:9b:29:67:81:04:99:
fa:05:2c:8d:0f:e3:eb:58:9c:9a:c1:14:1a:de:ce:dc:d1:b9:
63:e3:87:97:31:d3:cf:73:fb:b3:68:ca:22:87:6d:8e:fe:78:
86:3b:23:fc:2b:fd:f8:51:d9:b0:86:18:32:c6:66:07:54:86:
f6:57:7f:8c:28:78:d1:db:c8:8e:28:8d:af:92:99:d5:72:48:
ec:23:f4:2c:ed:be:34:4a:cb:76:d2:43:86:17:59:a5:ae:15:
e6:91:82:f5:53:14:2c:a6:16:40:a5:91:b4:a7:77:4a:9f:05:
91:5e:98:8d:f0:5b:a3:51:61:27:7d:e3:37:53:e5:16:3d:c6:
32:78:f5:b0:70:90:1f:17:3f:38:e1:22:5c:ec:4c:56:00:48:
ac:01:1b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 10:04:21 2023 by rpki-client on console-ams.rpki-client.org