Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/dF72_gAfN2XW1NWC78HPfjYaEGs.roa
File: dF72_gAfN2XW1NWC78HPfjYaEGs.roa (raw, json)
Hash identifier: LQvay9bs4fwS0D9NMi9tnrXGoFmLm4L9MbrbIHnvhs4=
Subject key identifier: 74:5E:F6:FE:00:1F:37:65:D6:D4:D5:82:EF:C1:CF:7E:36:1A:10:6B
Certificate issuer: /CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Certificate serial: 018597DECC5C8B34F116CD3D13B982D5C0DA
Authority key identifier: 6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/dF72_gAfN2XW1NWC78HPfjYaEGs.roa
Signing time: Mon 09 Jan 2023 18:50:39 +0000
ROA not before: Mon 09 Jan 2023 18:50:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44387
IP address blocks: 185.28.236.0/22 maxlen: 22
178.16.80.0/20 maxlen: 20
178.16.80.0/21 maxlen: 21
178.16.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:de:cc:5c:8b:34:f1:16:cd:3d:13:b9:82:d5:c0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Validity
Not Before: Jan 9 18:50:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=745ef6fe001f3765d6d4d582efc1cf7e361a106b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f3:40:9d:62:08:e1:32:82:4a:3d:6c:74:42:
50:c2:c4:29:7e:82:33:53:27:03:fa:9f:99:d4:54:
e8:94:72:10:4b:6f:cb:21:dd:f6:ac:9c:cd:f8:4e:
ac:43:1f:76:65:d5:16:f2:a6:af:14:64:ca:7f:63:
80:20:cb:8c:b2:f0:11:a0:8b:2e:26:0a:e1:91:4a:
a2:22:c7:e2:79:cf:e4:77:1d:38:e5:c8:9e:c4:03:
c4:5b:f2:06:1e:3d:c1:59:4a:20:7f:93:ed:4e:8b:
73:5b:d1:28:d7:20:2f:01:79:d8:5a:bc:56:fb:30:
9a:c4:0e:e6:c6:01:28:e7:c4:51:24:bb:ef:a1:c6:
7a:16:c6:50:29:4b:5e:97:98:3f:95:57:cc:48:7a:
b3:c7:2f:1a:3c:71:4c:16:f2:1a:55:8e:67:6b:16:
0b:c8:28:d2:59:56:3f:ce:d2:60:f6:d6:a2:cd:ae:
11:22:86:bf:2a:b2:fd:5d:b1:eb:f5:a4:92:0f:0e:
6c:3d:ab:c2:3d:63:e6:9e:8c:15:09:ca:d7:8c:49:
55:28:cb:db:de:c2:aa:ff:cc:01:05:7f:6f:ad:43:
63:59:9b:ee:a4:77:cf:96:75:b5:c7:89:f3:f6:09:
b6:9f:ce:4d:09:1b:86:7d:d9:e3:61:d7:af:8e:ac:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:F6:FE:00:1F:37:65:D6:D4:D5:82:EF:C1:CF:7E:36:1A:10:6B
X509v3 Authority Key Identifier:
keyid:6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/dF72_gAfN2XW1NWC78HPfjYaEGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.80.0/20
185.28.236.0/22
Signature Algorithm: sha256WithRSAEncryption
64:b4:8e:22:a4:e7:37:5b:75:36:3e:8a:f8:89:f0:65:b2:b7:
5e:29:79:91:45:19:33:02:a8:31:f1:71:78:8c:31:50:2e:33:
78:22:b6:3f:ec:23:f8:fc:e3:a3:14:99:ed:13:13:c0:03:bf:
dd:6d:bd:0c:1e:7a:76:b9:a6:f3:27:82:fc:f8:3c:40:25:df:
b1:88:1a:1d:df:9c:1a:c0:ef:a0:b7:b3:c0:72:5e:85:d0:17:
24:64:6d:14:c7:c9:42:74:48:a0:ee:3f:7a:77:42:b1:fb:54:
0a:a2:ba:8e:d6:b6:39:6d:b5:4b:a1:44:6c:57:a1:bb:25:8b:
63:5b:b8:89:90:9e:97:ec:3f:7c:53:73:12:d4:ae:c9:e5:bf:
0b:48:b5:5e:8a:ef:ab:93:63:4f:23:e4:7b:a1:f7:7f:26:3d:
19:81:26:45:57:98:9f:96:c6:c0:c4:1b:b7:69:0d:d8:fa:da:
5e:34:05:44:9e:bb:24:f5:4e:28:4f:95:af:f2:99:84:8c:45:
f1:06:d0:52:35:ad:24:1f:4b:31:ed:1a:e1:79:eb:18:c8:b2:
c8:c5:b3:0b:c4:1b:e7:db:a8:68:46:8e:d0:9a:4e:55:05:95:
02:e3:22:d5:b6:77:82:ca:c0:47:c0:66:37:4b:cd:59:d3:c6:
34:6d:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:37 2024 by rpki-client on console-ams.rpki-client.org