Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/ieiXziTqqBxkIBtt2BipAdy5AYA.roa
File: ieiXziTqqBxkIBtt2BipAdy5AYA.roa (raw, json)
Hash identifier: QlWk4A9ovmvdncBDBpkzxfVP1NB/rWAPikg4tEy44HQ=
Subject key identifier: 89:E8:97:CE:24:EA:A8:1C:64:20:1B:6D:D8:18:A9:01:DC:B9:01:80
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 01856F1DBD040DF7121860ECA18EEAA24FA6
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/ieiXziTqqBxkIBtt2BipAdy5AYA.roa
Signing time: Sun 01 Jan 2023 20:54:57 +0000
ROA not before: Sun 01 Jan 2023 20:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49264
IP address blocks: 185.161.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:bd:04:0d:f7:12:18:60:ec:a1:8e:ea:a2:4f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Jan 1 20:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89e897ce24eaa81c64201b6dd818a901dcb90180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cc:84:76:55:53:66:f6:95:c0:12:ae:8c:52:
82:fe:46:58:f3:91:3d:0c:47:ce:e7:28:a3:2a:b9:
be:69:df:53:e7:ed:b5:cb:ce:34:d2:07:72:f3:aa:
28:19:9e:a4:96:98:4d:c7:5b:60:f4:b4:ac:01:fc:
f9:87:6c:84:31:eb:64:95:51:6d:a5:ee:4d:8e:d4:
6e:02:e0:63:aa:dc:16:00:ab:73:32:ef:2b:ea:fc:
fc:e5:98:2d:0e:70:5c:d5:47:9c:b3:aa:e8:6b:d7:
20:04:da:de:ae:cc:6d:5d:cb:50:c9:7f:f8:0c:5e:
a2:80:19:66:ba:14:79:46:e7:23:7c:2f:12:9e:b0:
09:c8:fe:8e:c4:96:33:58:ab:9b:58:e1:0a:0c:b5:
ce:08:4b:30:28:05:6c:ce:69:f6:59:55:87:65:75:
a1:7c:bd:fe:d9:37:0a:18:d0:59:67:8e:2e:04:ad:
88:70:6c:89:4a:76:6c:46:10:18:8d:df:2b:6d:81:
5c:ea:a8:e6:93:96:37:23:82:c7:98:5f:31:35:d5:
b1:12:c0:06:96:61:8b:3a:19:e7:d6:0d:ca:1b:99:
c0:26:3d:41:13:a4:4d:1e:dc:99:53:27:b0:e3:e1:
f8:af:78:88:ff:79:9b:80:74:fc:14:6d:36:d2:a6:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E8:97:CE:24:EA:A8:1C:64:20:1B:6D:D8:18:A9:01:DC:B9:01:80
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/ieiXziTqqBxkIBtt2BipAdy5AYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.160.0/24
Signature Algorithm: sha256WithRSAEncryption
89:da:b6:6c:a8:92:db:00:20:e2:15:4e:a6:8a:38:b2:27:7a:
09:91:df:5a:7c:cc:19:08:57:3e:e8:0f:9b:c0:34:ef:b8:86:
4d:8a:02:00:0b:65:8a:51:57:79:60:84:62:a1:9e:5d:17:8a:
73:5b:fe:83:41:7c:40:38:47:60:b7:52:e5:7a:59:35:a5:4a:
66:47:49:37:c0:a6:18:0f:89:8e:ae:b0:dd:5c:cf:28:3a:3a:
80:ef:e1:2b:43:f1:91:8a:9d:f8:f2:f5:e7:af:11:0a:a1:80:
4e:e8:65:35:de:b5:a9:7a:9d:f0:fa:c4:60:dd:47:02:da:a4:
76:05:cd:9c:3f:a9:20:1c:77:37:b5:9c:ca:42:a8:fb:57:42:
d3:f3:19:d5:a5:4f:d6:5b:63:69:17:c5:13:f3:ff:b6:37:0b:
27:28:b3:e7:39:14:1a:5d:13:5f:c3:94:b1:e0:ff:26:5f:89:
e5:f0:3c:bd:ea:db:d2:2f:c9:3c:8c:9f:19:df:20:51:f6:b0:
43:cd:3a:d6:ea:59:b9:7e:48:1c:9d:6c:1f:5b:f4:95:d2:b1:
c7:a2:6b:fa:8c:de:07:80:38:58:56:9b:74:9e:f7:26:f0:53:
d3:e7:52:fa:a3:8d:63:e4:32:a9:8a:e4:1f:b0:85:55:4e:79:
bc:b0:66:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:40 2024 by rpki-client on console-ams.rpki-client.org