Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/1v-U0KcCI0BxXoLwv3xP4jZNUwA.roa
File: 1v-U0KcCI0BxXoLwv3xP4jZNUwA.roa (raw, json)
Hash identifier: opUIu7gpal/P0nnhaoVWaP8c7T+nS0WCxdDeC3bsq7Q=
Subject key identifier: D6:FF:94:D0:A7:02:23:40:71:5E:82:F0:BF:7C:4F:E2:36:4D:53:00
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018964D55FFCBE5C386F62252EEED0C9B957
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/1v-U0KcCI0BxXoLwv3xP4jZNUwA.roa
Signing time: Mon 17 Jul 2023 17:10:52 +0000
ROA not before: Mon 17 Jul 2023 17:10:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41272
IP address blocks: 46.165.64.0/18 maxlen: 18
188.7.0.0/16 maxlen: 16
80.185.0.0/16 maxlen: 16
2a00:8380::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:d5:5f:fc:be:5c:38:6f:62:25:2e:ee:d0:c9:b9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 17 17:10:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6ff94d0a7022340715e82f0bf7c4fe2364d5300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6e:b0:06:98:4e:fc:09:1c:3e:05:8b:25:a0:
24:5e:98:c5:23:b5:92:35:b7:86:05:b9:01:1e:09:
d9:a8:92:78:05:0c:15:82:35:f8:f1:ff:88:a6:c1:
bc:3b:ee:b6:a1:20:07:de:da:a1:8b:b6:47:8f:32:
b2:5f:5b:5e:06:22:99:9b:0d:83:72:10:7a:d1:3a:
64:98:dc:54:ae:15:27:fe:d8:63:b5:b0:ef:c0:3b:
08:56:c5:17:0f:a2:3e:5b:ac:62:41:bf:f4:12:9f:
2b:11:41:bb:ef:96:58:96:38:21:6c:73:63:66:84:
63:d9:63:21:75:c5:aa:fb:da:32:4b:3b:c0:5e:16:
38:93:f1:10:54:7d:21:3d:d3:18:75:4f:d0:e4:5e:
89:d7:e5:a2:e0:7e:12:50:dc:0b:24:8a:0f:33:b2:
e7:37:be:72:88:61:c5:59:22:78:cc:95:70:bf:73:
6e:23:d8:ec:c0:43:00:2d:1b:2b:62:0a:f8:a2:c5:
89:c7:d0:e2:e5:83:94:f5:99:8c:f5:89:5a:ca:19:
88:ff:67:d1:6f:93:ca:a5:46:73:d2:b7:5b:72:df:
11:1c:f6:e1:4a:a6:02:b2:82:67:fa:41:2d:ce:2c:
a1:d1:be:73:0f:3c:a7:90:25:ea:d3:9d:7f:b9:57:
4e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FF:94:D0:A7:02:23:40:71:5E:82:F0:BF:7C:4F:E2:36:4D:53:00
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/1v-U0KcCI0BxXoLwv3xP4jZNUwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.165.64.0/18
80.185.0.0/16
188.7.0.0/16
IPv6:
2a00:8380::/32
Signature Algorithm: sha256WithRSAEncryption
63:9a:6d:0c:93:9b:c0:18:1f:37:d6:64:6a:8e:71:c5:76:8d:
44:83:92:25:d5:75:c3:ab:6a:83:4f:59:b0:0d:67:72:f7:52:
bd:7a:f3:4b:3b:1e:09:cb:bb:28:53:32:7b:b1:99:f4:67:0b:
ac:f6:74:db:24:d5:51:62:1e:b4:bd:bd:31:3c:ea:1f:f6:02:
95:57:4e:00:aa:35:b3:af:b1:ef:b2:75:08:e4:83:d0:eb:88:
8b:42:47:49:16:66:4c:65:8f:27:11:5e:58:63:32:89:32:83:
fb:10:54:07:31:fd:37:84:07:01:13:4a:cc:66:6b:df:39:f4:
fd:be:59:cf:0d:e6:6f:8f:61:0f:c3:0a:e6:0e:a0:d6:3e:71:
94:e6:f1:91:81:42:5b:7e:ff:af:aa:1b:3c:ff:3d:9f:6e:7a:
db:82:28:1a:44:35:b7:e9:11:5b:9a:d1:95:54:d0:a2:68:4f:
f0:3e:5c:85:6c:20:90:37:f7:7a:21:b0:fb:55:47:fc:59:c6:
a2:95:71:df:f8:23:86:b4:71:ee:fd:80:0f:98:04:af:07:92:
74:4b:70:f6:08:30:39:11:04:c4:f9:f9:dc:29:fa:9c:a9:43:
f5:d7:c0:51:78:88:39:6d:da:3c:c9:f2:b1:f7:da:04:c9:bd:
c3:e8:f7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org