Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wnNp23x7v8mSR2hRwLSNt-t6sdA.roa
File: wnNp23x7v8mSR2hRwLSNt-t6sdA.roa (raw, json)
Hash identifier: c56quHMqTAtaJPtAbTiNpxvnOEFchFePV+5eFwmsuZE=
Subject key identifier: C2:73:69:DB:7C:7B:BF:C9:92:47:68:51:C0:B4:8D:B7:EB:7A:B1:D0
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 018C0344109C8E2D38141CAA623E8D29A156
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wnNp23x7v8mSR2hRwLSNt-t6sdA.roa
Signing time: Fri 24 Nov 2023 21:37:21 +0000
ROA not before: Fri 24 Nov 2023 21:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.79.74.0/24 maxlen: 24
185.79.75.0/24 maxlen: 24
185.79.72.0/24 maxlen: 24
185.79.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:03:44:10:9c:8e:2d:38:14:1c:aa:62:3e:8d:29:a1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: Nov 24 21:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c27369db7c7bbfc992476851c0b48db7eb7ab1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:81:10:94:13:9e:ea:3e:ac:f6:c0:b1:a5:
f1:52:45:9c:a3:36:69:71:5c:be:07:1d:ee:c8:f4:
94:45:a0:18:f6:4a:71:e5:c4:be:56:3c:6d:5a:13:
ac:69:72:bf:b8:15:3f:0f:f7:3b:ef:82:bd:7f:65:
8a:ba:10:73:fb:7a:80:e2:23:73:08:54:99:3b:02:
e8:b0:81:a0:e4:a3:f9:03:e9:d5:38:b1:af:5e:b6:
97:58:37:ef:85:7c:21:5e:87:b2:36:98:89:e1:2e:
90:9d:40:af:47:85:81:f9:67:02:bd:b5:2f:2d:29:
f6:52:71:50:14:f2:a7:90:3a:4f:ba:ad:27:09:d6:
c4:05:8d:a2:70:ba:c1:a1:d5:1c:3b:15:d3:b4:8f:
64:67:1f:b2:19:b7:7f:2f:55:da:84:36:71:a8:34:
35:4c:ab:9f:1b:71:dc:c2:4e:aa:72:eb:a0:ca:c4:
d9:36:d1:fd:37:f1:40:6a:c0:02:94:d1:48:ee:36:
c4:28:d1:ae:04:7b:03:7a:6b:d5:2b:1c:71:a3:d8:
0e:e4:b5:6b:ce:0c:dd:e8:24:2e:fe:62:df:29:39:
0a:bf:31:2a:88:81:33:d9:ce:74:d4:29:1d:3f:4d:
17:3e:7f:7b:4b:89:fa:46:bf:58:55:66:e0:ca:cc:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:73:69:DB:7C:7B:BF:C9:92:47:68:51:C0:B4:8D:B7:EB:7A:B1:D0
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wnNp23x7v8mSR2hRwLSNt-t6sdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.72.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:27:1b:98:8c:5b:da:82:f6:a1:1b:3c:6b:e7:70:59:04:6a:
1b:9c:ed:6b:1d:c9:9c:14:c3:9f:68:a5:33:54:fb:f6:7b:4f:
fa:ea:1c:e1:49:28:17:4e:42:4c:00:6b:81:74:9d:1d:8c:56:
10:41:ff:23:7a:30:d8:55:86:42:d8:14:08:b5:d3:23:41:73:
4d:ae:ee:72:fb:f4:1b:16:ba:fa:58:de:24:10:23:ff:8a:ee:
90:80:7f:7a:7b:bd:4a:a4:74:2f:18:b3:39:2a:a5:d2:d1:8c:
86:9d:46:87:55:bc:fb:1d:4a:c5:54:82:52:a1:a7:74:a0:b0:
0e:cd:a2:5a:eb:f9:2e:c6:83:ea:82:33:71:ca:75:06:91:60:
eb:a7:85:9a:fc:60:cd:57:a0:bb:61:a7:4a:60:58:4e:19:a8:
f6:88:60:97:37:e7:7c:f7:b3:fa:0f:d1:4d:1c:df:7d:60:e9:
34:69:29:65:5c:ff:98:b5:2c:2c:35:7d:2e:fc:b2:b1:06:21:
fc:c0:9d:54:14:ca:4a:eb:83:20:52:5b:21:a5:5b:07:6c:48:
0a:23:be:56:35:3d:45:b6:81:0d:d6:13:9f:39:a8:45:13:ad:
12:4e:ea:b3:0d:77:1f:e6:5c:8e:69:55:c7:b2:20:e2:12:b1:
da:ca:39:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:01 2024 by rpki-client on console-fra.rpki-client.org