Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/p542I8EktuE3ocN3yXvKNq-VJHg.roa
File: p542I8EktuE3ocN3yXvKNq-VJHg.roa (raw, json)
Hash identifier: BOg1XLpTLh4KOXWfJ3CTFwo3gOTz+7Zojyd9JA2jHws=
Subject key identifier: A7:9E:36:23:C1:24:B6:E1:37:A1:C3:77:C9:7B:CA:36:AF:95:24:78
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 018D1DBDC303E4FAEF8630BDAB48EF961E9D
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/p542I8EktuE3ocN3yXvKNq-VJHg.roa
Signing time: Thu 18 Jan 2024 18:03:11 +0000
ROA not before: Thu 18 Jan 2024 18:03:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62273
IP address blocks: 147.161.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 18:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1d:bd:c3:03:e4:fa:ef:86:30:bd:ab:48:ef:96:1e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 18 18:03:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a79e3623c124b6e137a1c377c97bca36af952478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5d:df:99:e0:da:b7:69:13:f2:00:bf:57:20:
78:33:fd:54:74:9c:d0:aa:de:74:c3:69:c2:34:52:
9e:34:b6:bb:5e:e4:8a:c2:1e:84:ed:80:e5:9e:89:
49:44:1a:44:a0:11:1f:7b:5e:60:27:bd:57:38:65:
8d:81:71:a4:f0:03:06:e1:00:c6:d2:ee:4b:d0:d8:
72:e8:14:a6:01:12:f0:33:ae:d1:79:99:ea:bd:1b:
21:97:13:2b:fe:55:14:32:48:1e:c7:f2:72:1e:78:
9c:3b:4d:28:cd:a8:14:ca:f4:40:a3:43:a2:24:5a:
f3:e1:0c:95:0e:6b:c4:0a:0e:84:fd:0a:bb:4f:d5:
30:87:e9:6c:68:2d:9e:1a:6d:40:54:2b:64:2c:e9:
a9:5a:11:d3:05:b8:d8:e3:28:8c:9e:4e:e8:99:d0:
78:d8:2d:87:eb:02:87:26:82:29:02:8b:0c:d4:4c:
f0:be:af:de:34:5b:85:51:d9:30:e2:f9:2b:9d:0a:
59:de:b9:47:11:3f:14:d0:e2:3b:10:3c:eb:e0:57:
51:0a:16:a8:5b:4b:b3:60:f9:f1:e5:02:8b:d6:2b:
d4:5f:8d:ac:26:bb:44:ce:8e:04:2c:0f:11:31:52:
18:1b:0a:ae:aa:fc:fc:3d:5e:e4:4a:52:0b:f8:be:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9E:36:23:C1:24:B6:E1:37:A1:C3:77:C9:7B:CA:36:AF:95:24:78
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/p542I8EktuE3ocN3yXvKNq-VJHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
Signature Algorithm: sha256WithRSAEncryption
61:61:75:06:94:33:67:50:0e:58:27:ed:1f:d1:ce:b0:cb:cc:
0d:c0:25:c1:5e:09:c6:3b:92:e7:42:98:e2:fc:92:bd:72:85:
b7:bc:7d:d1:34:35:99:40:7f:0e:92:24:8e:65:56:6d:9e:db:
85:08:a8:c9:91:92:b2:44:b4:cd:e0:d0:f7:97:67:c1:5c:79:
a9:36:f6:3c:db:96:72:4c:25:99:e6:f7:ad:63:a2:e1:11:2b:
83:8d:66:b1:0b:9b:b3:c0:71:28:5c:0e:b1:5e:6f:1b:3e:80:
bc:fb:69:9d:70:f7:59:24:f7:82:a8:a9:20:68:46:13:1e:71:
fe:df:84:a5:8f:07:16:4e:fc:ac:34:3c:62:26:d8:07:6c:54:
bf:61:aa:3a:af:69:22:02:32:91:80:c3:6d:ba:30:c4:4b:3b:
16:f3:6a:a7:f2:f4:70:b0:eb:6b:e9:ce:fd:07:cd:28:aa:77:
fd:18:09:d3:ba:cc:91:95:fa:e4:7a:3a:ca:75:1c:34:11:cc:
1b:91:b4:7d:34:12:0f:1f:73:c4:6b:25:39:e5:91:7c:6c:be:
f9:bc:b7:f2:a9:3e:d7:ec:27:14:52:cd:63:e7:04:7c:d0:af:
16:b7:6a:cb:0b:90:c4:b7:9b:7c:d6:88:69:6e:b5:fc:1a:f4:
3b:c2:72:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:14 2024 by rpki-client on console-ams.rpki-client.org