Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/80hifPo2wGBiAd8jWd5YtC-GXwk.roa
File: 80hifPo2wGBiAd8jWd5YtC-GXwk.roa (raw, json)
Hash identifier: b+20hLDLXLxXZdgnSlVZTgdsIveF9T/gtwY8y1uKcVU=
Subject key identifier: F3:48:62:7C:FA:36:C0:60:62:01:DF:23:59:DE:58:B4:2F:86:5F:09
Certificate issuer: /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial: 018570796650DBE69B9EDF530510D8BAB6FA
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/80hifPo2wGBiAd8jWd5YtC-GXwk.roa
Signing time: Mon 02 Jan 2023 03:14:42 +0000
ROA not before: Mon 02 Jan 2023 03:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202551
IP address blocks: 185.160.208.0/22 maxlen: 22
2a07:c000::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 03 Feb 2023 12:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:66:50:db:e6:9b:9e:df:53:05:10:d8:ba:b6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Validity
Not Before: Jan 2 03:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f348627cfa36c0606201df2359de58b42f865f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:8e:43:7d:7f:ea:c7:59:85:cd:4b:60:6c:
1b:81:21:b2:fd:1e:e9:cc:b9:bf:a4:b4:9e:2f:01:
b3:60:51:de:f8:c7:57:dd:a7:11:c5:77:c0:09:04:
d2:73:b4:39:46:88:fd:c3:56:1a:51:c8:ec:b0:71:
fe:5e:bc:85:7a:0a:a8:f8:7e:da:eb:1a:d5:82:66:
85:09:66:4a:b5:2a:16:f2:f5:31:e6:e8:6d:99:80:
5b:71:39:ca:ec:3c:b3:fe:74:2b:c2:9b:fe:4e:01:
7a:84:c0:69:99:d4:ce:49:3f:da:e8:c0:ab:82:c0:
0a:ba:c6:99:47:90:d8:5a:4b:12:32:05:7e:79:03:
ab:10:d2:c1:ca:37:4e:01:6b:70:f8:6e:08:18:93:
77:5c:a0:d3:77:0d:94:31:7d:77:c1:04:b3:37:dc:
85:64:11:f3:36:26:d8:d7:45:eb:2c:63:12:05:19:
b0:e4:49:b7:e3:f8:89:ad:a0:14:61:9a:49:71:80:
f4:e6:0c:d0:03:c9:f3:f9:6d:0e:f1:80:24:96:18:
18:ea:74:ab:c3:ae:9e:25:e5:67:c6:e4:41:c9:da:
b9:ab:dc:f7:c5:8b:9f:97:0a:29:8b:f9:55:8b:25:
0f:19:f9:2d:ac:1c:19:78:d6:72:a6:cb:a7:0f:89:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:48:62:7C:FA:36:C0:60:62:01:DF:23:59:DE:58:B4:2F:86:5F:09
X509v3 Authority Key Identifier:
keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/80hifPo2wGBiAd8jWd5YtC-GXwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.208.0/22
IPv6:
2a07:c000::/29
Signature Algorithm: sha256WithRSAEncryption
17:f2:6c:3d:33:6d:6c:cf:67:ce:e3:8f:b4:15:13:53:82:0a:
ac:f4:c6:6d:44:64:e6:11:16:7c:3a:c3:b1:e1:97:2f:52:ab:
6c:7c:f4:e8:fc:e3:14:1f:5e:c2:76:c2:06:d2:90:ca:4b:cf:
cd:5c:f0:bb:5d:9e:96:2b:d9:1a:ee:97:04:ed:86:d9:a6:47:
9c:c4:1e:84:42:40:ae:08:21:a8:e2:b1:b1:09:62:dc:6d:84:
67:ec:49:5d:d0:e3:b2:65:e4:49:c2:74:eb:1d:b9:11:c3:d1:
4a:7e:52:54:e5:bb:70:e6:78:60:35:9e:bf:98:78:9d:a6:bc:
71:2a:4a:df:ed:d8:05:a4:81:e6:97:a4:3e:c2:a5:a6:1f:4c:
98:0d:81:40:f4:69:47:ee:fb:83:f3:b1:c3:b5:4d:78:b3:4f:
57:24:d6:d7:38:ce:b7:6d:9e:17:7a:23:4c:fc:30:93:c1:1d:
5e:56:c3:36:8a:b0:42:89:86:de:26:45:9f:4f:06:57:b3:2f:
79:30:f0:11:34:a7:d8:57:e8:18:6c:24:fa:56:d8:dd:c1:74:
81:7f:0b:21:3e:00:58:79:fd:93:72:95:91:f8:ea:32:5c:8c:
87:d4:23:93:55:73:1b:88:0d:4a:a6:16:14:77:e9:75:1c:07:
5c:56:59:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:24 2024 by rpki-client on console-ams.rpki-client.org