Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/2Gqd3F7A1Zix40nIngxaTzgaBuw.roa
File: 2Gqd3F7A1Zix40nIngxaTzgaBuw.roa (raw, json)
Hash identifier: zaxWrSwxNKi9ZFv05SAtJrdMTWT8VfQsrPBuuUzGAJ0=
Subject key identifier: D8:6A:9D:DC:5E:C0:D5:98:B1:E3:49:C8:9E:0C:5A:4F:38:1A:06:EC
Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial: 0185720C3C8D31FB5902943EA40D12710805
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/2Gqd3F7A1Zix40nIngxaTzgaBuw.roa
Signing time: Mon 02 Jan 2023 10:34:42 +0000
ROA not before: Mon 02 Jan 2023 10:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25091
IP address blocks: 160.53.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:3c:8d:31:fb:59:02:94:3e:a4:0d:12:71:08:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Validity
Not Before: Jan 2 10:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d86a9ddc5ec0d598b1e349c89e0c5a4f381a06ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ca:f8:f3:18:ad:f4:6b:70:bc:ae:28:a7:0e:
86:57:3e:8f:67:44:7c:8d:f7:a7:7e:44:86:b1:73:
79:fa:16:c3:de:81:72:80:21:74:46:8e:5d:e5:0f:
a2:29:48:12:0d:0c:cc:bc:24:da:e7:0b:5a:b9:fc:
51:f4:af:f5:c1:e8:82:b8:a5:61:73:7c:5a:43:ea:
22:6c:21:17:8f:6b:de:63:fc:a1:84:7f:21:d7:a6:
8f:70:47:0d:6b:29:52:aa:0f:a2:eb:41:af:50:e6:
a6:18:87:75:ed:af:ae:5f:e9:0d:ac:95:d5:8a:c6:
63:1a:fe:65:d9:26:65:f9:d8:b6:d9:5a:95:5d:7f:
1a:8a:74:05:da:5f:bc:db:03:ca:44:78:9b:8f:62:
22:d1:bf:a9:4e:e5:43:90:bd:1a:2a:df:46:0d:32:
31:e2:ee:29:76:12:75:19:aa:68:ee:1d:da:c4:89:
b7:72:b8:90:5b:74:82:a5:b7:11:44:40:a0:28:61:
b5:24:87:dc:29:8d:a5:56:e5:90:27:67:6a:7a:fd:
50:8f:8a:fc:26:7a:92:87:e3:6c:0c:68:96:20:c3:
5f:09:d1:f2:89:ea:90:90:07:7f:fb:37:f5:16:5c:
3e:50:8a:d8:91:b0:84:76:b7:d0:4e:82:31:9c:f1:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6A:9D:DC:5E:C0:D5:98:B1:E3:49:C8:9E:0C:5A:4F:38:1A:06:EC
X509v3 Authority Key Identifier:
keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/2Gqd3F7A1Zix40nIngxaTzgaBuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.53.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ce:13:dc:ff:61:b2:e8:9c:7b:95:57:5c:c0:c5:b3:37:2f:
0a:b5:9c:be:b3:5d:66:df:b1:06:12:29:d2:6c:db:f9:12:0f:
c4:4f:aa:6d:a9:a1:4d:df:31:58:60:35:ca:07:c8:38:e5:b6:
d9:5f:c7:72:4c:38:8d:ad:53:f7:95:45:79:d2:17:08:8e:5e:
bd:4a:d0:33:98:b2:e9:ea:2f:0c:f8:3d:3f:ad:f4:9a:95:6d:
db:fc:30:6e:ca:4d:13:e5:4f:06:81:fa:24:a4:05:6e:8b:c4:
5f:8d:8d:2c:ad:39:fa:33:3f:de:6b:a5:35:09:97:eb:27:28:
9a:72:b7:24:e5:20:3e:d3:e9:19:17:8c:96:e7:6f:e9:6e:88:
1d:be:84:5d:30:34:18:fd:f6:93:97:9d:a9:8a:c6:d9:88:81:
a2:7e:d9:64:ef:09:9c:a5:8b:da:c8:52:b4:d2:13:cc:7f:82:
66:71:bc:99:47:95:af:4a:15:2f:92:fe:1f:f1:98:27:0b:3d:
a6:2a:32:a3:f4:bc:b0:60:a1:0c:4f:3c:54:55:9e:88:24:61:
1a:88:a5:5f:78:71:c9:7b:12:58:38:34:6f:6e:71:7d:55:41:
83:c7:5e:15:43:3d:85:fe:3a:15:f7:f1:69:c0:c0:b3:df:f5:
a4:2d:1c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:03:08 2024 by rpki-client on console-ams.rpki-client.org