Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/iePcTJDLgQX1qk6ioRJHkyaDK-U.roa
File: iePcTJDLgQX1qk6ioRJHkyaDK-U.roa (raw, json)
Hash identifier: Dj39yFJ46QUg6fe8kRK7DfycnJDDH/q8/KZc0hlPPwA=
Subject key identifier: 89:E3:DC:4C:90:CB:81:05:F5:AA:4E:A2:A1:12:47:93:26:83:2B:E5
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 018CC8DF2879175DFD894EEA0FE5F9634378
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/iePcTJDLgQX1qk6ioRJHkyaDK-U.roa
Signing time: Tue 02 Jan 2024 06:31:57 +0000
ROA not before: Tue 02 Jan 2024 06:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20647
IP address blocks: 2.57.160.0/22 maxlen: 22
2a09:ce40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:28:79:17:5d:fd:89:4e:ea:0f:e5:f9:63:43:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Jan 2 06:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89e3dc4c90cb8105f5aa4ea2a112479326832be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:1e:bc:5b:12:b5:22:e3:70:47:41:5e:d8:
99:38:ab:a2:44:48:a7:2b:86:ed:52:54:7b:99:95:
b7:f1:f0:23:4c:a6:e9:d4:fc:54:47:19:da:85:e1:
32:bb:b0:69:fd:08:78:2e:e1:39:dc:73:7c:0a:2d:
75:f4:19:4b:76:a6:36:c6:b8:0f:11:9f:e4:b6:d7:
de:2e:46:a1:60:13:55:e0:c1:22:e2:e4:43:10:51:
37:2c:b9:11:93:91:03:91:18:b5:d9:a6:91:91:4f:
8b:f5:7f:5a:52:52:5b:32:62:01:98:6f:08:c8:e2:
7d:b0:bf:3f:64:95:c4:b4:3c:bf:30:0f:b4:d2:5d:
cd:72:dd:ef:27:c5:ee:aa:fa:a6:ed:58:32:f4:c9:
76:e2:24:9e:d1:36:6e:93:c9:25:7a:8c:f4:35:ae:
51:20:e2:e8:12:fb:33:f2:f3:e8:7c:01:1d:19:fb:
59:98:d7:39:16:0a:cc:dc:f7:2f:71:a4:8c:43:11:
cc:cb:b3:42:cc:77:93:fb:80:d7:4a:26:b3:d6:ee:
91:fe:b8:2c:72:21:9d:df:52:a4:a5:79:ff:c1:3e:
ff:50:c7:48:a4:a2:67:23:3e:b1:b1:4b:89:b9:c5:
c5:c8:2a:1d:70:0c:07:50:9c:47:17:88:a0:00:04:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E3:DC:4C:90:CB:81:05:F5:AA:4E:A2:A1:12:47:93:26:83:2B:E5
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/iePcTJDLgQX1qk6ioRJHkyaDK-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.160.0/22
IPv6:
2a09:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
8e:6e:1d:0a:85:5f:0c:09:c4:34:eb:76:c7:cf:1a:87:dc:94:
fc:58:7b:83:33:df:1a:74:0f:f0:ad:23:7b:08:15:1d:a5:ae:
80:6d:70:44:51:12:4e:f0:1f:3a:0a:68:65:51:c8:cd:17:d7:
73:fc:57:7e:0f:e5:90:a7:20:4e:94:ce:29:33:01:3c:2a:7e:
0d:91:76:f5:92:72:b1:bd:39:0f:69:60:d4:8d:ab:09:f2:74:
8d:eb:e7:39:d0:97:58:a8:c9:72:c6:ed:0c:c2:e8:66:03:0f:
e0:d8:02:1a:74:a6:87:c3:54:90:90:06:7d:d5:7d:fd:6f:6f:
79:f9:18:10:75:c0:a6:47:33:60:fb:9c:8d:69:96:da:f6:a1:
0e:a5:e0:f8:5d:96:d4:81:84:60:e3:b1:e3:76:7c:65:f4:cf:
c3:28:2b:e8:53:90:de:03:3e:72:ec:52:39:28:c7:4d:b6:f8:
f9:b3:f3:b9:7b:43:e0:3b:73:40:d4:8a:c9:e3:2f:1f:ea:00:
f9:e7:af:ca:26:a6:20:bb:21:14:be:d4:72:be:08:5c:8a:78:
c3:8e:a1:27:3c:3f:5f:62:bd:0c:f7:fa:49:2e:c1:da:02:d6:
8b:a4:dc:ba:f8:0f:76:01:17:13:28:2e:34:e1:81:97:15:a3:
1b:bc:f7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:25 2025 by rpki-client