Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/qzXl0cqZzvIepXNHTP_NEI-ZTCc.roa
File: qzXl0cqZzvIepXNHTP_NEI-ZTCc.roa (raw, json)
Hash identifier: TplIWVzBUI1DVz1yBDhL4zXYlfH439kbfPhX9mPQ4eQ=
Subject key identifier: AB:35:E5:D1:CA:99:CE:F2:1E:A5:73:47:4C:FF:CD:10:8F:99:4C:27
Certificate issuer: /CN=65179265803b7804d0fccf5962a8b163743e0d1e
Certificate serial: 018AEF65C9DA9E5CC0D5168CA955B1BE8168
Authority key identifier: 65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/qzXl0cqZzvIepXNHTP_NEI-ZTCc.roa
Signing time: Mon 02 Oct 2023 07:58:59 +0000
ROA not before: Mon 02 Oct 2023 07:58:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 160.214.96.0/24 maxlen: 24
160.214.98.0/24 maxlen: 24
160.214.97.0/24 maxlen: 24
160.214.103.0/24 maxlen: 24
160.214.99.0/24 maxlen: 24
160.214.102.0/24 maxlen: 24
160.214.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 08:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:65:c9:da:9e:5c:c0:d5:16:8c:a9:55:b1:be:81:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65179265803b7804d0fccf5962a8b163743e0d1e
Validity
Not Before: Oct 2 07:58:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab35e5d1ca99cef21ea573474cffcd108f994c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:f5:3b:06:5c:10:93:da:2c:84:6c:82:dd:
3b:4d:d5:4d:df:d3:87:ef:22:e8:4f:4a:8f:4a:3a:
c5:9e:f2:cb:8a:c3:1b:71:db:93:1b:7f:dd:d0:f8:
00:2a:04:e4:bd:3b:15:de:de:1a:a9:14:3c:4a:58:
f2:0c:16:8d:d6:51:4d:4b:5c:49:45:c4:2f:0b:43:
91:20:7b:38:bd:ff:18:df:b4:32:52:49:a1:c7:f9:
d7:5f:89:2c:be:4a:36:7e:f2:21:66:4b:01:8c:e2:
15:1b:5a:9f:61:e3:91:57:96:c5:97:fd:d5:50:5d:
c1:06:de:a9:fb:62:15:dc:c7:52:41:34:3b:42:2b:
f0:c7:b6:2c:cf:3e:1b:45:15:5c:93:5f:a8:c8:a9:
37:a0:90:8c:99:27:04:5b:93:4e:15:50:aa:6f:12:
e0:82:5a:5b:75:34:ce:f1:a0:0a:64:98:b2:9b:3a:
74:77:f2:2b:f6:03:30:2e:81:95:65:49:65:14:a1:
f9:51:8b:4a:d6:84:f4:f0:89:4e:38:67:cb:fb:86:
7e:b1:64:41:0e:85:f0:4e:f0:16:f2:7a:56:af:0f:
7f:33:85:e5:e2:7f:b1:66:e7:72:07:20:d6:23:d8:
ab:20:ff:73:a7:f9:c9:b3:0b:b2:42:2b:29:2b:7b:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:35:E5:D1:CA:99:CE:F2:1E:A5:73:47:4C:FF:CD:10:8F:99:4C:27
X509v3 Authority Key Identifier:
keyid:65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/qzXl0cqZzvIepXNHTP_NEI-ZTCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.214.96.0/22
160.214.101.0-160.214.103.255
Signature Algorithm: sha256WithRSAEncryption
65:9c:8e:cb:6f:cd:ff:1c:70:d3:09:92:40:dd:3a:e2:62:75:
a3:bc:04:bf:15:26:6f:ee:8d:73:50:2a:45:cf:69:c6:9b:97:
7f:ae:5d:f6:ee:ca:90:7b:2e:18:da:3d:f8:3e:d3:ef:43:c3:
a9:2b:b3:7c:3d:5c:c6:cc:ce:5a:56:9f:52:b5:6b:b5:c6:f2:
0b:43:4c:04:7d:95:ad:13:8e:85:af:74:73:28:13:d1:96:fb:
9c:6e:5b:cb:1b:f7:dc:f8:9b:04:0d:39:52:04:e3:aa:87:15:
0f:45:e0:88:ab:2a:3c:5d:d2:f9:0a:6e:7e:e4:d6:1b:17:15:
86:f1:c1:5d:9a:b2:27:ef:f4:1c:e1:59:d5:27:46:3b:79:b7:
01:6d:db:89:a5:d0:98:48:3d:70:9a:a2:67:3c:b5:3f:77:23:
ad:11:62:84:4a:1f:01:75:6f:a8:03:81:04:a9:b4:e7:72:5d:
64:8a:15:14:b1:b3:38:04:9d:91:7e:0a:20:13:22:1a:3f:d9:
e3:5c:a8:c9:e9:60:b9:f8:0e:7e:0c:68:a1:82:d5:30:2d:71:
83:f3:e6:a6:dc:d2:a2:ef:06:11:bb:a6:6b:4b:c1:cc:32:07:
54:03:fe:ad:34:f2:0b:cb:ca:d8:5d:44:69:c7:f8:6e:f7:65:
d3:62:6d:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:11 2024 by rpki-client on console-fra.rpki-client.org