Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/60vZFy96-c4f8dh2SM8qaYpz2Aw.roa
File: 60vZFy96-c4f8dh2SM8qaYpz2Aw.roa (raw, json)
Hash identifier: 8Wi0HrboC+nVSlPvDZW8BVX3RG9vIvwmtM0C9h42T2o=
Subject key identifier: EB:4B:D9:17:2F:7A:F9:CE:1F:F1:D8:76:48:CF:2A:69:8A:73:D8:0C
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018E2DFF8990A4E9181347618061B9A4637F
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/60vZFy96-c4f8dh2SM8qaYpz2Aw.roa
Signing time: Mon 11 Mar 2024 14:51:45 +0000
ROA not before: Mon 11 Mar 2024 14:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 270353
IP address blocks: 94.241.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 18:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:ff:89:90:a4:e9:18:13:47:61:80:61:b9:a4:63:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Mar 11 14:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb4bd9172f7af9ce1ff1d87648cf2a698a73d80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:69:f2:e5:8a:6a:7e:6a:b8:fa:4d:64:39:
e4:66:cb:92:90:a9:9e:15:e7:8a:78:46:07:a3:24:
21:72:eb:57:bc:51:74:a2:46:81:93:3b:ab:2d:36:
33:c6:c8:fc:0d:aa:49:ac:7b:ae:97:bb:d3:6c:b7:
f4:5a:b3:2c:f4:27:fb:ea:3b:68:04:02:de:bf:23:
25:19:54:6b:03:42:80:54:7b:0d:d3:95:5c:9b:b4:
86:e2:5d:e7:00:9e:6e:44:a1:66:7a:4f:41:0b:de:
7d:bc:d8:ab:da:8e:27:a2:67:2c:2a:11:e9:90:50:
75:51:04:02:c1:7d:2a:d1:84:22:dd:f5:0f:2c:cc:
3a:f0:f2:e1:8c:77:fb:97:f7:5d:19:5b:49:b0:79:
d8:b6:12:db:9e:f7:8f:fd:43:bc:2a:5a:8d:42:ea:
7d:e4:89:67:2d:50:e6:31:fd:0f:8e:63:92:19:b1:
fc:fb:40:d4:d9:5a:d7:b6:2e:85:cd:8d:6f:63:c1:
bc:bf:19:82:9d:9a:8c:98:b4:c3:e3:53:7a:95:8a:
ed:0c:e5:ba:45:a4:6e:8f:d6:0f:50:8e:db:12:e6:
fe:d1:ef:6d:33:b2:4c:09:35:2b:42:e2:de:de:a8:
aa:22:18:63:68:b2:68:1d:18:0c:4e:3c:59:03:39:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4B:D9:17:2F:7A:F9:CE:1F:F1:D8:76:48:CF:2A:69:8A:73:D8:0C
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/60vZFy96-c4f8dh2SM8qaYpz2Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.160.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:a3:37:26:fb:fe:d2:b4:8c:5a:79:dc:ab:81:9c:aa:e5:54:
41:d6:0b:71:f3:31:1b:59:d6:93:e5:d8:82:eb:9a:6d:57:10:
fd:16:33:39:b6:23:70:36:19:51:71:c1:51:c2:ad:35:f4:0f:
ee:ff:a0:05:6a:27:15:13:94:f4:04:9b:be:7d:b1:9a:ea:01:
94:40:47:f7:dd:5c:62:94:b5:a8:0d:d8:ea:96:4f:d2:90:46:
7c:7f:0d:a2:f1:12:8d:e9:4c:54:7c:f9:5a:0f:62:a0:bd:16:
64:90:dd:08:f2:41:02:28:8b:79:cf:3b:0f:8d:53:5c:ab:e6:
b3:9b:b3:33:73:a6:7f:73:84:41:53:d1:b8:9a:15:bf:af:f9:
c2:8a:4f:14:24:34:11:3f:7a:e9:b8:fc:97:63:37:6d:10:c0:
20:e1:4c:d2:13:9c:c5:4c:ec:ab:c0:bd:c0:30:95:6c:74:a5:
87:4b:c6:81:e4:e1:1d:ae:55:19:b7:56:35:38:d4:f1:df:7f:
e9:87:a3:52:f2:e3:03:71:82:e9:34:47:6e:c1:9d:36:db:fd:
76:91:28:3f:1c:26:97:10:ed:91:0d:a1:4b:3d:f8:e0:36:c4:
7b:aa:2b:fb:54:c8:64:9d:58:a9:32:8b:23:fe:20:02:a9:10:
e7:09:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 21:38:24 2024 by rpki-client on console-ams.rpki-client.org