Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/wwQbTKoMW1mqouG58gXkqeWDQos.roa
File: wwQbTKoMW1mqouG58gXkqeWDQos.roa (raw, json)
Hash identifier: RpCEct4LFX/X2fMzdcWipx8gWawsmVF+zDjNkaGkv3E=
Subject key identifier: C3:04:1B:4C:AA:0C:5B:59:AA:A2:E1:B9:F2:05:E4:A9:E5:83:42:8B
Certificate issuer: /CN=65179265803b7804d0fccf5962a8b163743e0d1e
Certificate serial: 018C913A9C502EA41441C646C6F463FBD23E
Authority key identifier: 65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/wwQbTKoMW1mqouG58gXkqeWDQos.roa
Signing time: Fri 22 Dec 2023 11:13:06 +0000
ROA not before: Fri 22 Dec 2023 11:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 160.214.96.0/24 maxlen: 24
160.214.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:3a:9c:50:2e:a4:14:41:c6:46:c6:f4:63:fb:d2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65179265803b7804d0fccf5962a8b163743e0d1e
Validity
Not Before: Dec 22 11:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3041b4caa0c5b59aaa2e1b9f205e4a9e583428b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:2b:eb:87:e8:1b:87:72:60:26:13:c2:db:
39:80:dd:d7:02:fe:4f:f6:54:f7:b1:46:0f:fa:d9:
d1:18:4d:bb:97:23:1a:67:02:d6:08:16:c6:1e:9e:
03:0c:ee:dd:b9:23:1f:39:45:15:a7:2f:09:a9:a9:
c2:bf:07:e4:7c:c6:91:40:80:d9:a6:49:e5:d1:ef:
2d:2d:1d:8b:e1:8c:42:c6:b9:bd:b6:b1:60:e7:fa:
e4:ac:99:47:5f:63:68:72:88:81:59:06:3b:e8:e1:
a3:df:38:5e:2e:1d:a5:12:a2:43:b5:e3:de:25:c0:
02:24:89:ef:a6:0d:25:fc:ab:88:e8:ac:55:7f:cb:
91:4e:a0:76:47:60:a4:02:cd:85:b6:4b:80:33:f0:
b9:d0:26:f2:8e:76:16:ae:bc:19:3b:9c:1a:dd:f7:
17:9f:6b:b6:10:fb:c8:ae:40:ca:49:5c:2d:88:8f:
07:46:66:09:12:b0:64:3b:92:a6:4d:52:33:ab:d5:
e6:06:06:dd:25:09:e9:0c:b4:24:5d:98:47:32:7a:
6e:a3:79:8a:f4:54:14:91:c2:d0:7b:90:f5:40:eb:
bf:e2:17:a5:17:5d:64:59:ba:90:64:d3:df:cc:06:
ed:a0:32:fe:45:7a:1e:81:91:48:cb:aa:d2:a0:f9:
79:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:04:1B:4C:AA:0C:5B:59:AA:A2:E1:B9:F2:05:E4:A9:E5:83:42:8B
X509v3 Authority Key Identifier:
keyid:65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/wwQbTKoMW1mqouG58gXkqeWDQos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.214.96.0/24
160.214.108.0/24
Signature Algorithm: sha256WithRSAEncryption
34:41:70:00:e6:de:fc:2b:9b:80:d0:f4:79:d7:fe:0b:a6:62:
98:21:ff:a2:2d:37:3f:36:b3:e5:74:e1:04:12:3d:ee:48:3b:
32:3c:3e:55:17:4a:df:04:2a:65:1f:5b:ee:15:86:a7:23:7d:
f8:c2:2c:9a:27:d5:a2:55:66:ad:7f:fc:f7:a1:21:9e:61:75:
af:9d:eb:73:12:de:2f:f1:c8:25:cc:6d:6e:a0:1b:ea:2e:34:
b0:bb:6c:1e:f0:55:c3:67:51:fd:b0:de:65:18:ac:b8:13:b1:
ed:5c:f9:e9:98:8f:c3:2a:2b:be:a6:fd:7a:8f:9b:cb:8b:9e:
0f:c5:ea:42:40:88:c6:d4:b4:b1:5d:56:3d:fa:fa:d5:0d:81:
4b:23:db:35:0a:17:28:64:de:cf:3a:00:6a:41:20:66:df:10:
c3:37:ae:95:33:41:13:36:89:fd:94:1e:84:fb:57:99:76:9c:
1d:73:c6:cf:50:46:73:0a:07:b4:90:41:05:73:92:7a:ea:b0:
8f:de:de:f7:d0:8f:cc:e3:a2:77:94:72:3b:2f:08:52:e5:27:
01:4a:47:6c:80:44:35:70:2b:f3:f8:0f:0e:63:a4:02:3d:12:
02:88:15:e2:5a:22:49:34:04:be:e5:72:84:a4:a3:66:ac:66:
76:b3:6c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:11 2024 by rpki-client on console-fra.rpki-client.org