Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/rGjf8mcBFRL8KOgY4nBfjh7T6aM.roa
File: rGjf8mcBFRL8KOgY4nBfjh7T6aM.roa (raw, json)
Hash identifier: mZocYZJVNburEC5l5+CwkHhCDld+KY0isFFRir7gLIQ=
Subject key identifier: AC:68:DF:F2:67:01:15:12:FC:28:E8:18:E2:70:5F:8E:1E:D3:E9:A3
Certificate issuer: /CN=65179265803b7804d0fccf5962a8b163743e0d1e
Certificate serial: 018D21723F0F1854799BF9DDA299DAE16F9C
Authority key identifier: 65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/rGjf8mcBFRL8KOgY4nBfjh7T6aM.roa
Signing time: Fri 19 Jan 2024 11:19:11 +0000
ROA not before: Fri 19 Jan 2024 11:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 160.214.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:21:72:3f:0f:18:54:79:9b:f9:dd:a2:99:da:e1:6f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65179265803b7804d0fccf5962a8b163743e0d1e
Validity
Not Before: Jan 19 11:19:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac68dff267011512fc28e818e2705f8e1ed3e9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:13:67:aa:d6:85:ce:7e:90:2f:73:69:ed:
90:95:3a:e8:9e:a4:54:46:a4:c9:fe:04:87:ca:b8:
f0:6c:26:ce:b8:60:7a:d7:4c:8d:15:fd:e6:8b:ed:
fd:5f:be:36:73:05:5d:ce:4b:92:ec:ba:c6:13:23:
7e:9b:43:7d:1e:c7:49:30:83:84:15:7e:c5:07:f8:
57:9b:20:70:3b:cd:b6:4b:9c:fb:06:ec:80:b3:43:
2a:33:5d:5d:dd:bd:7c:c4:54:1d:27:d4:8b:31:16:
ec:aa:3a:3c:a7:ab:f4:f4:e6:ad:fb:cb:e8:93:39:
93:a0:d1:d0:b0:29:2c:c4:ea:9a:ef:7c:a3:a1:c7:
ee:e2:3f:56:76:7f:5a:3e:1d:fb:10:41:30:0f:fb:
ab:18:0a:c7:9a:16:5a:66:81:e6:56:42:93:ae:b1:
fe:da:19:2c:a4:a4:3a:e3:8e:3f:fd:3c:ea:0a:a5:
b6:83:7b:49:7a:43:1f:13:c0:7b:dc:14:42:50:f8:
14:5b:7b:41:ea:70:03:e8:ee:3a:92:de:4e:3f:cc:
4a:b6:8a:ff:17:0e:ef:e4:e2:7e:2e:6b:80:42:fe:
05:02:d8:63:5c:fa:7f:55:33:a7:c1:e1:3c:ee:5c:
fc:e0:5d:04:bf:ed:1c:a6:88:da:6d:49:64:26:ab:
d8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:68:DF:F2:67:01:15:12:FC:28:E8:18:E2:70:5F:8E:1E:D3:E9:A3
X509v3 Authority Key Identifier:
keyid:65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/rGjf8mcBFRL8KOgY4nBfjh7T6aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.214.108.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:9d:c3:ae:a7:cb:d6:42:3f:d2:7e:68:22:26:64:26:cb:04:
42:b3:4d:0b:13:67:4d:86:e8:7f:7a:ce:28:4b:95:7c:dc:79:
6e:cb:e1:1d:0e:17:a2:ac:15:34:38:8d:51:3f:20:40:9e:7f:
0e:d2:e4:d3:19:fe:9b:02:0b:5e:07:3a:ce:3f:08:51:4f:7c:
a1:24:2e:df:3f:ed:f3:36:c6:9e:8c:e7:84:0c:df:3b:c8:24:
f9:61:73:d0:72:d5:13:1f:d0:bf:28:8e:8b:9a:d2:11:29:ed:
99:b9:91:a7:dc:f6:26:b6:01:24:6c:98:5e:93:b8:36:f7:02:
00:48:94:b7:6d:e0:6b:2b:b4:a6:f8:d9:79:2b:40:fa:72:6e:
b4:83:e1:e9:c1:c7:4a:2a:e6:0a:ed:65:cb:fe:e9:90:ef:c5:
10:8f:2b:6c:33:61:35:87:2c:99:97:40:9a:c6:ad:62:7a:d0:
89:60:91:8e:a3:b2:9e:55:b7:63:47:fc:cc:5f:d4:18:f5:6a:
12:ed:9d:5a:9e:16:09:17:40:3b:c5:a8:3e:77:02:0c:81:b1:
12:7c:db:51:1a:d0:22:c6:fb:68:59:46:a8:f0:dc:4d:83:0c:
34:78:bf:36:12:94:bc:a5:b5:b1:e9:c0:b2:c4:0a:0d:b6:98:
fa:a6:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 12:22:09 2024 by rpki-client on console-fra.rpki-client.org