Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/6aQ7D22ggIahoGeIU9G8c8H-EwM.roa
File: 6aQ7D22ggIahoGeIU9G8c8H-EwM.roa (raw, json)
Hash identifier: 952rEL3jKxhMoArZxxmmaNDoQwzAEQICQf0ZBTR7brY=
Subject key identifier: E9:A4:3B:0F:6D:A0:80:86:A1:A0:67:88:53:D1:BC:73:C1:FE:13:03
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01856F0B7109FF74E81B111FC7EB3DDC1ACB
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/6aQ7D22ggIahoGeIU9G8c8H-EwM.roa
Signing time: Sun 01 Jan 2023 20:34:58 +0000
ROA not before: Sun 01 Jan 2023 20:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54548
IP address blocks: 157.97.104.0/24 maxlen: 24
157.97.105.0/24 maxlen: 24
217.160.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jul 2023 12:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:71:09:ff:74:e8:1b:11:1f:c7:eb:3d:dc:1a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Jan 1 20:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9a43b0f6da08086a1a0678853d1bc73c1fe1303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:c3:39:b4:98:8e:1c:8e:66:6f:9c:4b:32:
92:6b:85:b4:d5:a7:25:45:95:89:9f:26:96:5d:50:
1f:d1:18:80:6d:de:48:e3:30:67:fc:52:48:d4:15:
46:a7:48:43:96:45:0f:88:2a:74:17:17:9b:03:81:
22:64:a8:a2:bf:a6:3d:7b:39:f7:d7:6c:4c:5b:e6:
95:d0:46:49:82:04:a9:74:1f:38:56:d5:84:9e:c3:
99:f7:81:06:05:0b:e8:84:59:5c:fc:bc:e5:8a:1d:
5d:98:b3:d0:46:73:37:99:e4:55:f7:67:03:98:3d:
22:ab:be:87:86:8b:c7:0a:2d:a3:84:03:f8:49:0b:
4d:2f:a5:28:2d:41:1b:01:8e:af:19:2a:00:38:c2:
79:af:3c:94:8a:cc:52:bb:70:0e:e5:94:7d:30:af:
6f:a2:10:aa:69:17:fa:d2:21:24:55:c0:6b:00:b7:
8f:24:6a:c1:a6:f6:c2:94:73:80:24:d6:f0:a8:3a:
a7:f4:e2:75:15:76:b0:a2:79:4b:05:05:6c:78:1b:
82:63:2d:ce:1a:79:a9:a6:06:2f:2e:41:0a:e9:96:
aa:94:4c:96:a4:8a:cf:43:d6:fe:6a:81:43:dc:41:
99:05:fc:b3:c7:c8:7c:a0:62:a5:71:40:44:e8:d6:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A4:3B:0F:6D:A0:80:86:A1:A0:67:88:53:D1:BC:73:C1:FE:13:03
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/6aQ7D22ggIahoGeIU9G8c8H-EwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.104.0/23
217.160.150.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:d0:65:65:2d:2c:b6:7c:73:e3:5c:98:39:bd:3a:30:d4:99:
41:1c:65:34:d5:ad:b4:fd:f8:21:80:40:90:52:f2:22:8f:5d:
b1:37:7a:6b:06:86:fc:4b:dd:58:2f:e3:16:20:7c:a3:44:f2:
2d:c8:3a:51:53:a6:c8:cc:14:77:bf:9d:c9:d7:69:20:8a:25:
91:90:3a:ef:80:84:f3:19:cc:e3:0d:50:89:cc:a7:e5:f2:ef:
fb:4b:bc:1d:e8:ab:f4:4d:18:95:52:23:57:f9:93:7e:29:10:
62:3e:f4:78:85:8f:c9:3e:dd:cc:24:6c:8f:12:2c:77:46:51:
b2:65:7e:c0:6e:06:32:95:08:12:74:69:26:ba:b3:11:6e:f8:
fe:97:f1:ad:3e:9e:79:51:31:d5:c5:66:bb:5f:08:0d:39:f1:
3c:56:4e:20:43:af:bc:89:57:2f:b6:50:a5:fb:f7:f0:06:27:
2b:11:c8:36:35:21:32:47:7c:0d:f1:bb:8b:5b:37:69:14:2f:
c2:14:9f:64:cd:0f:53:0d:db:3e:59:a7:d0:19:6f:c9:11:4b:
40:18:c1:97:6e:30:57:db:16:a0:67:ed:8d:51:e8:69:6e:2a:
39:54:7a:1e:3b:79:ac:9e:92:a5:be:f4:b6:29:98:a8:92:6b:
44:a7:c6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:21 2024 by rpki-client on console-fra.rpki-client.org