Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/CUs4odjcp0FaR_tvMMIwgSHnPzM.roa
File: CUs4odjcp0FaR_tvMMIwgSHnPzM.roa (raw, json)
Hash identifier: RVvmcwJ0vvU9GUU3RkKUChL44/ZEsQIiOM5GBc4WMYI=
Subject key identifier: 09:4B:38:A1:D8:DC:A7:41:5A:47:FB:6F:30:C2:30:81:21:E7:3F:33
Certificate issuer: /CN=213f21d1551d2775e7b064382b8122ad4fc585f7
Certificate serial: 0185706718B3F7B648C3DE502F0EE69160F8
Authority key identifier: 21:3F:21:D1:55:1D:27:75:E7:B0:64:38:2B:81:22:AD:4F:C5:85:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/CUs4odjcp0FaR_tvMMIwgSHnPzM.roa
Signing time: Mon 02 Jan 2023 02:54:42 +0000
ROA not before: Mon 02 Jan 2023 02:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2065
IP address blocks: 162.38.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:18:b3:f7:b6:48:c3:de:50:2f:0e:e6:91:60:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213f21d1551d2775e7b064382b8122ad4fc585f7
Validity
Not Before: Jan 2 02:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=094b38a1d8dca7415a47fb6f30c2308121e73f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:51:74:50:27:54:40:18:32:d4:d3:2d:01:
34:b3:35:73:f6:55:cd:8e:0d:36:cc:e0:44:5c:46:
e1:d6:db:11:da:4a:c5:69:94:c4:f0:e7:84:b2:e2:
43:50:57:3f:71:89:98:65:8f:f7:92:1c:4f:68:ca:
77:07:72:92:83:87:5c:23:1b:dc:d6:c5:76:29:00:
dc:c6:a5:fa:06:63:ad:24:69:30:b2:a4:51:08:c0:
c6:92:b4:9a:4d:b4:72:69:89:a8:93:00:b3:a2:d4:
04:de:d7:88:05:43:e8:af:f1:b7:41:97:be:fe:7f:
12:9a:0c:03:64:e2:aa:87:e3:d6:1f:f7:de:a7:23:
a2:f0:4a:6b:3c:e2:1d:a1:49:de:5b:81:83:59:fb:
01:8b:02:54:c4:0d:61:3f:4a:e7:05:38:1a:6e:0c:
c8:37:3a:6c:77:7c:94:54:43:47:03:8c:9c:1a:d7:
3b:b9:20:c3:54:d8:31:59:8d:df:30:79:1a:21:6b:
4b:b4:a6:29:b8:d5:dc:a9:3d:f3:9b:bd:6b:c1:53:
5b:d0:b3:b5:ff:05:59:22:3f:ef:8d:ff:b1:da:29:
3d:61:94:af:8b:60:f6:ad:af:aa:03:15:36:71:bb:
3c:a6:b8:f4:c6:d7:5d:95:b4:85:9e:50:d9:0c:4e:
ad:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4B:38:A1:D8:DC:A7:41:5A:47:FB:6F:30:C2:30:81:21:E7:3F:33
X509v3 Authority Key Identifier:
keyid:21:3F:21:D1:55:1D:27:75:E7:B0:64:38:2B:81:22:AD:4F:C5:85:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/CUs4odjcp0FaR_tvMMIwgSHnPzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.38.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:5d:24:6b:2d:29:8d:46:f9:76:f8:84:2f:8c:a8:1e:0a:5b:
41:16:78:76:0e:96:73:49:4d:58:00:36:cd:49:7a:73:5b:27:
da:55:73:0f:8b:b0:4f:9c:e4:77:01:18:f1:d6:45:96:f4:14:
4a:3d:43:65:1b:8e:79:cc:a5:95:84:26:20:9d:67:c7:6b:d7:
97:8d:30:ed:84:66:31:ab:c2:58:6d:20:b9:29:71:e9:39:5a:
a7:a8:b4:1d:0d:07:19:5a:56:49:04:70:79:04:8f:ad:c2:78:
05:a0:db:a7:43:fb:a3:a6:25:94:4b:4c:b5:eb:f4:62:c7:1e:
d3:55:c2:53:af:c8:1e:1e:69:b2:50:6e:45:7b:0c:63:06:cd:
66:18:21:41:ad:0a:42:10:8f:bd:fb:8d:a2:3b:1a:60:6a:33:
f0:6a:14:63:e1:94:02:d1:13:15:a7:2d:fb:5d:0e:a7:6b:7a:
5a:3c:ed:e8:37:04:67:f3:d1:cd:74:44:2d:70:1b:b0:9d:29:
13:16:4b:6b:9f:c5:49:6b:93:57:ea:64:9a:de:ad:54:4c:a4:
bf:86:6b:be:dc:46:cf:9f:65:3b:cc:60:f7:76:78:16:7a:50:
b9:56:f9:9a:fd:f1:d9:6d:d3:98:cc:53:c7:e5:96:55:f0:c3:
3a:45:ae:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:51 2024 by rpki-client on console-ams.rpki-client.org