Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/zHsoGyImce4-FwxW8E2P788-pPA.roa
File: zHsoGyImce4-FwxW8E2P788-pPA.roa (raw, json)
Hash identifier: XFTwMZ7bJEDbNXORwMl3Y+O+2KT4Wy1UcEMfwMQXHEk=
Subject key identifier: CC:7B:28:1B:22:26:71:EE:3E:17:0C:56:F0:4D:8F:EF:CF:3E:A4:F0
Certificate issuer: /CN=7e862a8ca5acbd6c5dfc24126c33aa0a94e0e1f2
Certificate serial: 0185730385E99BB17ED83A3C81D8EA892E69
Authority key identifier: 7E:86:2A:8C:A5:AC:BD:6C:5D:FC:24:12:6C:33:AA:0A:94:E0:E1:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/foYqjKWsvWxd_CQSbDOqCpTg4fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/zHsoGyImce4-FwxW8E2P788-pPA.roa
Signing time: Mon 02 Jan 2023 15:04:48 +0000
ROA not before: Mon 02 Jan 2023 15:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15474
IP address blocks: 160.210.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:85:e9:9b:b1:7e:d8:3a:3c:81:d8:ea:89:2e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e862a8ca5acbd6c5dfc24126c33aa0a94e0e1f2
Validity
Not Before: Jan 2 15:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc7b281b222671ee3e170c56f04d8fefcf3ea4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:9f:d2:42:fb:2d:3a:3e:31:30:fb:3b:53:
f1:f3:c6:41:14:1f:6a:22:bb:a8:f1:56:34:04:46:
d9:57:9a:2b:38:39:90:e9:2d:22:59:91:3b:73:d3:
ca:92:1e:90:b2:20:b4:6f:f6:de:0f:32:da:71:40:
5d:11:a5:20:34:9b:17:a1:68:26:1d:ba:e8:bd:dc:
56:75:9c:03:bd:e7:e7:bf:4f:9a:63:3f:06:51:fc:
b2:1a:41:7d:7d:b7:9e:56:ab:c2:30:30:e5:3c:8f:
66:41:c4:4a:df:e8:30:04:16:eb:ed:29:ac:55:e0:
26:91:8f:a8:27:6f:0b:1e:ec:bf:6a:7b:7b:00:57:
7e:6f:73:4b:35:0a:cc:cd:37:5b:91:de:2f:ca:eb:
48:4f:11:76:5d:ed:04:5b:14:d3:af:ce:ae:a5:02:
89:54:34:d8:f0:ad:4a:8b:10:12:21:fd:a7:bf:61:
13:54:dd:42:7c:1d:c6:d7:3f:f1:45:cd:4d:ad:ac:
67:69:8c:f2:43:70:c8:c0:a9:81:63:2f:bc:76:f2:
d8:ae:2b:25:df:08:c4:72:86:2c:90:49:86:5f:5c:
4e:18:ec:39:e6:26:b4:13:b5:b2:e3:66:11:d4:03:
e3:cd:38:61:96:4b:97:13:a9:21:af:b9:1e:8c:ed:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7B:28:1B:22:26:71:EE:3E:17:0C:56:F0:4D:8F:EF:CF:3E:A4:F0
X509v3 Authority Key Identifier:
keyid:7E:86:2A:8C:A5:AC:BD:6C:5D:FC:24:12:6C:33:AA:0A:94:E0:E1:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/foYqjKWsvWxd_CQSbDOqCpTg4fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/zHsoGyImce4-FwxW8E2P788-pPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:a3:97:36:e5:c1:3a:bd:fa:66:14:b7:0e:52:3a:32:b9:be:
bf:7f:1d:52:3c:d3:2f:65:d4:b4:46:84:c8:b7:09:1e:c1:e3:
64:6d:05:f9:24:65:1f:d6:6a:24:de:bc:4f:f5:42:b7:dc:7a:
a8:a2:17:dd:a9:74:03:02:46:5e:2c:65:b9:09:44:26:55:ca:
3a:b1:a5:6e:42:83:7b:e3:4b:ff:d6:ab:cf:57:da:ea:94:e5:
36:33:be:7d:a0:64:d9:f7:bf:fd:94:85:c3:aa:2e:64:5f:7a:
35:32:35:30:28:fd:e5:11:0b:2a:20:51:b7:b2:02:2a:b5:e5:
ef:00:60:c8:67:a1:10:cf:4f:c1:e9:87:14:8a:38:f8:d8:1a:
d4:ea:49:e6:75:95:52:f2:cc:86:c8:93:ae:5d:9b:bb:39:24:
1f:ea:ac:2e:eb:8a:1a:f6:d8:17:50:50:9e:ee:65:4d:73:2d:
a2:70:85:f9:87:9a:66:3e:a3:de:74:bf:79:49:7a:b8:2c:76:
e4:7a:ea:45:23:74:06:a5:91:1a:66:2a:b5:9d:a4:b4:6e:a5:
c6:2a:66:49:4b:35:57:45:d1:50:4b:b8:65:b2:73:ac:a9:df:
e5:fa:96:30:6e:10:b9:00:1a:22:ea:5c:00:53:3d:e9:2c:cb:
d1:13:29:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:38 2024 by rpki-client on console-fra.rpki-client.org