Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/w06q_uj566Ohs10kVSNwU52P6ds.roa
File: w06q_uj566Ohs10kVSNwU52P6ds.roa (raw, json)
Hash identifier: X8Mpph+0dnpY1tthV9hRhhVlV6qkxKjsLLk0ZR5+DCk=
Subject key identifier: C3:4E:AA:FE:E8:F9:EB:A3:A1:B3:5D:24:55:23:70:53:9D:8F:E9:DB
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 01877A82BE6A6FA574CDDFE2FBD9F2F22D7E
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/w06q_uj566Ohs10kVSNwU52P6ds.roa
Signing time: Thu 13 Apr 2023 12:06:41 +0000
ROA not before: Thu 13 Apr 2023 12:06:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201587
IP address blocks: 185.72.116.0/22 maxlen: 22
2a04:5980::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:82:be:6a:6f:a5:74:cd:df:e2:fb:d9:f2:f2:2d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Apr 13 12:06:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c34eaafee8f9eba3a1b35d24552370539d8fe9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:a8:fa:8e:96:71:9c:2e:c5:04:3c:85:c1:
7c:7d:0d:83:7d:e9:a9:d9:37:01:68:64:c9:7a:c9:
60:b5:e5:1e:41:a5:c0:26:8e:bd:21:e7:69:91:49:
52:1d:83:2e:88:bc:fc:1b:4c:f9:3f:8a:91:aa:72:
30:0f:03:bc:35:63:65:28:ca:d0:6a:65:a3:f9:dc:
e1:06:95:db:07:67:4b:91:95:1b:e6:95:e6:49:c6:
47:7f:3b:9d:62:49:41:d6:36:72:f6:b8:29:cb:4a:
e8:e0:41:67:a3:c2:eb:89:a6:97:78:05:4d:f3:6d:
f3:b3:ae:70:75:d8:61:1c:2f:9d:8f:8e:8f:1b:93:
7a:09:2c:80:bb:7d:de:e2:e4:f5:27:ef:e9:fa:69:
db:f7:da:e1:92:19:3b:35:77:95:16:f3:ab:34:57:
0f:4a:b2:19:28:ec:1c:e4:40:0a:49:41:46:cf:e0:
86:d9:b2:01:78:b6:a1:18:a8:01:79:f3:9d:69:4d:
12:28:cc:fe:83:fa:96:52:94:4b:c3:38:fe:94:f1:
cd:46:53:fb:81:ba:49:98:ca:9d:13:62:81:8a:2a:
16:c5:7e:47:5a:13:a4:e0:7f:be:d9:01:cd:76:31:
10:23:7b:29:be:8b:22:24:b6:bb:b5:28:68:e5:d2:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4E:AA:FE:E8:F9:EB:A3:A1:B3:5D:24:55:23:70:53:9D:8F:E9:DB
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/w06q_uj566Ohs10kVSNwU52P6ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.116.0/22
IPv6:
2a04:5980::/29
Signature Algorithm: sha256WithRSAEncryption
92:55:94:a9:65:ec:c5:ab:67:59:48:14:50:6c:5f:54:1e:cc:
95:14:ac:b3:9e:73:77:94:b4:47:f2:fa:ff:89:dd:87:63:ce:
b8:61:8f:d5:a8:a9:ec:47:74:6d:8c:b5:7e:d6:a6:15:2a:45:
55:b3:67:ae:27:9c:6f:79:20:1f:58:bb:d2:f4:78:7d:aa:e6:
5b:49:7f:ff:2d:f0:e3:e9:af:a8:5a:35:41:48:18:e8:a7:ed:
e3:09:86:e1:61:38:43:be:b4:df:f5:55:3d:60:04:89:87:f5:
fe:17:bd:1c:fc:5d:65:a9:72:c1:09:3c:65:59:21:70:d7:b9:
bc:22:fa:01:a4:1f:80:94:ec:88:fb:fc:35:30:37:be:7f:60:
78:ad:0d:31:c5:ad:5b:b7:05:19:30:5f:c5:b8:2e:59:14:82:
ef:5b:a8:94:43:41:c1:2b:f9:36:c0:76:5d:0c:2a:6a:3b:f0:
04:78:15:6e:91:01:a6:60:70:68:d2:67:4b:1a:76:bb:04:e4:
c7:ba:47:7a:a1:4e:87:b4:6a:e6:37:4a:6d:5f:5e:7c:fe:2c:
f1:89:fc:10:8d:49:62:e5:d3:e4:6f:35:2c:c2:c4:68:ee:f6:
97:05:2b:97:e4:60:5e:e5:7a:ee:17:99:78:c7:67:a6:de:37:
e5:1d:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:19 2024 by rpki-client on console-fra.rpki-client.org