Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/0_v9sN5f4rk8IGYRjygNKozGaUo.roa
File: 0_v9sN5f4rk8IGYRjygNKozGaUo.roa (raw, json)
Hash identifier: FMLqkl2p3MNHcT2mVBtls2T0D0m7oHEgJL4NrKUKb0E=
Subject key identifier: D3:FB:FD:B0:DE:5F:E2:B9:3C:20:66:11:8F:28:0D:2A:8C:C6:69:4A
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 018B054E0FB2D62D3FE741BA2878F8F8641E
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/0_v9sN5f4rk8IGYRjygNKozGaUo.roa
Signing time: Fri 06 Oct 2023 14:04:43 +0000
ROA not before: Fri 06 Oct 2023 14:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 147.161.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Oct 2023 16:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:4e:0f:b2:d6:2d:3f:e7:41:ba:28:78:f8:f8:64:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Oct 6 14:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3fbfdb0de5fe2b93c2066118f280d2a8cc6694a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:33:8c:53:c0:91:41:cc:2f:9a:f9:d2:ce:
6c:91:da:d2:85:a1:2d:fc:45:59:9d:54:43:36:97:
c2:8b:e5:ec:66:0d:f4:73:fe:30:58:8b:59:80:39:
dd:eb:ab:81:4a:b3:f5:45:26:16:3d:ce:9b:8d:e1:
da:eb:11:8d:98:8f:6e:50:a0:8f:81:01:ac:38:8a:
76:49:fd:28:7b:d2:11:0a:c5:7e:dc:67:c2:dc:15:
ff:b2:9a:e1:3d:f9:f8:9b:aa:dd:27:c0:b2:85:01:
67:f4:18:ce:fd:e6:01:01:ff:89:eb:fd:09:75:1a:
e5:f6:f8:ee:2c:e5:ff:b5:04:01:ea:68:ca:f3:70:
0b:23:bb:7f:4f:c7:2d:08:1a:f7:77:7e:51:8e:db:
33:dc:5b:27:90:e6:b2:f1:11:b1:d3:8f:cb:25:fa:
cb:42:67:1b:30:03:69:ab:2f:b9:b3:00:b5:ba:0d:
55:b6:11:e1:78:78:8d:22:87:8f:0e:11:77:01:af:
43:1b:e4:d4:c6:fe:dc:2e:68:c5:67:c4:a5:35:bb:
5c:24:79:e7:e6:ed:34:83:6e:22:01:09:bf:f9:59:
4d:e2:05:69:af:b2:34:1f:07:5b:f7:c3:e6:bd:90:
87:a8:4f:0e:e2:ee:c3:d8:e8:2a:89:36:c4:37:5e:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FB:FD:B0:DE:5F:E2:B9:3C:20:66:11:8F:28:0D:2A:8C:C6:69:4A
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/0_v9sN5f4rk8IGYRjygNKozGaUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d4:6b:ad:63:81:71:b8:7d:46:25:84:85:65:ca:28:7d:35:
43:44:68:50:8b:25:52:3a:0d:40:fc:9f:23:08:22:36:73:1a:
bf:10:90:81:f3:9f:a4:fe:fe:e4:46:08:43:9c:1f:07:21:d0:
43:a8:1a:b2:d7:bf:08:5f:ff:50:3f:a1:7c:93:3c:19:b2:99:
12:5b:cb:a5:a8:76:ce:cb:53:6f:da:19:9c:b4:ac:6f:0b:75:
f0:e4:6d:3c:46:ff:fc:f5:25:43:d9:62:49:9e:c2:9e:b4:7d:
34:56:18:83:77:7b:66:6b:07:64:be:7d:c1:ca:6f:69:b8:a5:
6e:45:b7:21:76:72:3f:96:45:5c:7a:3a:ee:fb:60:61:d0:1b:
66:45:fc:0f:91:1c:58:2e:ae:0b:04:33:2d:f5:c2:10:e4:65:
e6:d0:f7:4f:de:37:dc:50:3a:be:9b:57:80:78:5f:54:fb:7c:
0d:3c:d0:a7:03:63:ef:1c:5c:f5:84:3e:fe:8d:fb:9a:3f:f0:
bc:ae:0a:aa:ea:f4:06:e3:55:a3:65:8d:7b:80:d6:dc:08:12:
cb:df:f4:52:23:b4:25:8b:a9:b2:7a:2a:96:88:25:55:ff:bb:
5a:dd:f7:bc:21:93:a3:a0:26:6d:06:8b:48:de:63:ea:cf:ee:
f0:35:5a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:14 2024 by rpki-client on console-ams.rpki-client.org