Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/aMkTRVQpXisFcHEvsQsSasf8jkM.roa
File: aMkTRVQpXisFcHEvsQsSasf8jkM.roa (raw, json)
Hash identifier: Y2J5LmWHruWy48yxYN6F/Qt/+PwMS34F//qJ1VgQbzI=
Subject key identifier: 68:C9:13:45:54:29:5E:2B:05:70:71:2F:B1:0B:12:6A:C7:FC:8E:43
Certificate issuer: /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial: 01857070578ED1A2525E48F387F906747847
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/aMkTRVQpXisFcHEvsQsSasf8jkM.roa
Signing time: Mon 02 Jan 2023 03:04:48 +0000
ROA not before: Mon 02 Jan 2023 03:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43012
IP address blocks: 160.20.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 30 Mar 2023 21:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:57:8e:d1:a2:52:5e:48:f3:87:f9:06:74:78:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Validity
Not Before: Jan 2 03:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68c9134554295e2b0570712fb10b126ac7fc8e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:98:db:2d:5a:bc:43:88:81:49:d8:9f:ce:
3c:7b:8b:cd:da:a7:ce:37:13:36:c4:36:26:f0:eb:
f5:2a:7b:85:2d:a5:ef:d6:69:6f:a7:87:c5:6d:7e:
92:d8:16:e2:78:eb:2d:1d:e0:35:65:67:f4:e0:5e:
78:fb:41:f0:1f:6e:ac:80:ab:5b:a7:ad:19:60:21:
11:f0:2e:a4:2b:02:5b:98:10:6e:a5:69:47:fe:e3:
e4:61:49:b3:c7:8b:db:0e:d7:e2:d2:30:c2:35:f3:
c5:63:63:00:41:ad:ff:34:ea:6c:4e:dc:ba:00:10:
b3:f7:5e:a1:8d:65:0e:28:18:db:9c:54:52:71:ed:
63:e0:ce:63:f2:26:67:85:3c:61:09:1a:3b:11:87:
7c:e6:6f:5d:9c:83:bb:b2:ce:ff:48:f2:80:8e:36:
11:d5:13:50:31:26:fe:63:4f:e5:10:ae:32:57:f5:
6f:fd:fa:82:a6:4a:54:6b:0a:a0:e2:c9:dc:eb:da:
5c:11:10:99:82:e3:3b:54:f3:21:2b:be:bb:e6:e0:
2f:73:cc:08:c2:d4:9c:ab:f1:6f:0b:12:f2:9e:59:
c8:32:52:42:c9:c2:24:69:62:43:5e:9a:72:0e:64:
5d:8c:1c:37:30:29:49:84:20:c8:cc:f1:d5:d4:39:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C9:13:45:54:29:5E:2B:05:70:71:2F:B1:0B:12:6A:C7:FC:8E:43
X509v3 Authority Key Identifier:
keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/aMkTRVQpXisFcHEvsQsSasf8jkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.96.0/22
Signature Algorithm: sha256WithRSAEncryption
61:8c:60:5b:c6:82:78:49:bc:77:62:d2:35:6b:14:4c:11:2b:
58:98:55:81:75:14:2f:be:f4:ff:26:27:86:96:9e:98:94:e8:
c6:a0:cc:0f:9e:e9:09:a9:e3:78:36:a6:5a:ca:25:80:38:a7:
d6:07:bb:14:74:e3:ba:c3:a1:44:e5:b2:3b:74:74:5f:db:7a:
c4:45:ea:b5:ed:6b:ae:91:52:44:42:d2:34:63:ca:8a:01:9f:
46:4f:b8:06:cb:68:fe:05:09:fc:66:1e:57:d7:2f:0c:0a:a6:
7f:c1:34:17:1d:53:6b:14:c3:b3:fb:e6:92:0d:13:f2:3b:f3:
8a:b3:a2:fa:2d:53:64:12:e7:c6:02:5d:1f:be:e0:9c:ec:6f:
fd:b6:fa:c9:0b:12:00:1a:1f:57:d8:9e:c9:02:6f:eb:59:dc:
ff:0a:44:ce:9e:b7:93:6c:90:54:f5:d9:a5:08:ea:e1:0c:dc:
1a:28:48:55:e9:e3:f6:d1:40:66:3b:60:e8:f0:d1:7b:81:4f:
3c:f6:4b:90:82:ea:f2:37:02:4a:96:ed:f1:ac:6e:e9:6e:22:
25:1c:63:62:d9:31:df:1c:12:be:16:dc:cc:9d:9e:a3:c2:11:
a3:2c:f5:4e:89:2a:b6:84:b3:cb:f8:62:84:ed:65:1f:ce:19:
45:39:cb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:37 2024 by rpki-client on console-ams.rpki-client.org