Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/IXk99SvUnFcIAGfU9ZaB3o92Pv8.roa
File: IXk99SvUnFcIAGfU9ZaB3o92Pv8.roa (raw, json)
Hash identifier: 0Gyempv9LKdPxYn5LERSs9j4iOLb3+390uVUBZIn1iI=
Subject key identifier: 21:79:3D:F5:2B:D4:9C:57:08:00:67:D4:F5:96:81:DE:8F:76:3E:FF
Certificate issuer: /CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Certificate serial: 018570DE748A009AAFE1351CE992C0B882D9
Authority key identifier: 11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/IXk99SvUnFcIAGfU9ZaB3o92Pv8.roa
Signing time: Mon 02 Jan 2023 05:05:05 +0000
ROA not before: Mon 02 Jan 2023 05:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2200
IP address blocks: 161.3.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:74:8a:00:9a:af:e1:35:1c:e9:92:c0:b8:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Validity
Not Before: Jan 2 05:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21793df52bd49c57080067d4f59681de8f763eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:85:6c:97:a1:00:2a:b5:e4:44:77:34:21:
57:73:98:b9:ab:96:f5:8f:e4:ea:d5:3b:cb:f2:39:
b9:0b:40:80:a8:b3:cc:52:4b:9e:90:b9:66:fb:97:
58:3d:1e:d5:4a:9d:87:3a:17:ae:6f:de:10:36:af:
c3:1f:c7:2c:79:5c:d1:ae:f8:f3:1a:8f:46:0f:05:
d8:43:ac:6b:ab:c6:08:d7:83:29:72:22:3d:42:33:
49:86:1b:fc:e2:15:4b:c2:84:98:61:3d:ff:da:e4:
87:33:cb:ee:aa:60:f9:b0:0a:d6:cb:5c:ab:0c:d4:
cc:44:59:12:88:8e:28:af:43:e3:d5:a4:c1:72:d7:
2c:bd:ce:af:65:14:ba:7b:52:85:68:47:76:16:8f:
b4:10:0f:be:e0:6f:b2:98:4b:cb:8b:6a:fc:12:40:
22:10:24:79:1d:21:4d:f8:e6:de:54:b4:21:28:e6:
6a:af:c3:b8:f9:3a:c2:ab:92:af:9c:ed:3d:17:36:
6a:5f:65:c8:ed:5a:81:a9:7a:1e:0f:9d:2d:93:b9:
2a:25:c7:cb:f7:73:79:b2:b6:98:8f:9c:94:12:b1:
60:ef:36:a4:5a:a1:74:b1:f0:90:dd:6e:d0:39:36:
ef:1d:2d:9d:85:b8:e0:f7:2f:91:3d:31:23:6a:75:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:79:3D:F5:2B:D4:9C:57:08:00:67:D4:F5:96:81:DE:8F:76:3E:FF
X509v3 Authority Key Identifier:
keyid:11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/IXk99SvUnFcIAGfU9ZaB3o92Pv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:e5:08:3a:ff:5b:f7:33:ac:06:34:f8:16:aa:e3:c4:59:8e:
e2:f2:56:02:a4:5a:54:9d:f6:8e:d9:45:88:1a:42:12:ae:3d:
a9:91:a1:53:89:5e:9c:28:ae:2f:da:89:35:2d:e5:6a:a5:d1:
49:86:ad:3d:27:8d:35:24:1c:a5:df:7e:2b:29:01:07:c7:29:
34:65:1f:76:fc:53:bb:3a:8d:6b:9d:71:f6:ef:d9:09:3f:52:
08:e7:b7:0a:1d:3a:23:06:d4:ab:79:4c:81:e9:21:aa:29:bf:
1d:70:82:30:07:84:f7:ad:7f:81:26:f1:8e:fd:01:8f:21:6c:
c2:16:d5:37:9a:a6:c2:ff:82:7d:21:23:c4:c4:7b:e2:21:86:
a0:8b:23:a1:bf:4f:b4:3b:79:87:c7:35:8d:ad:0e:f2:93:61:
d4:ba:a6:d9:07:63:0e:6a:20:45:85:3e:24:ad:0e:02:f0:bc:
a5:28:37:33:af:34:35:6b:24:80:de:78:31:fa:ae:85:1d:61:
47:4e:cb:8b:67:17:e0:8a:ff:e3:23:c4:90:eb:3d:7f:b3:81:
4d:a9:cc:16:d0:58:81:f2:f4:3d:5f:1c:2d:fe:08:b2:d3:ea:
fa:0a:78:fb:b9:a1:13:2b:92:35:bc:67:bd:65:a4:05:7d:fc:
65:ef:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:42 2024 by rpki-client on console-fra.rpki-client.org