Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qoCSLxb1rZSyEvui9UoZhjhV9Ms.roa
File: qoCSLxb1rZSyEvui9UoZhjhV9Ms.roa (raw, json)
Hash identifier: +tEGeXix6uhRkSqjy5yRpZSPx3k84d+0m9EFnOsCLsc=
Subject key identifier: AA:80:92:2F:16:F5:AD:94:B2:12:FB:A2:F5:4A:19:86:38:55:F4:CB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01882482E27B70F893A0332AA54CD05AD359
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qoCSLxb1rZSyEvui9UoZhjhV9Ms.roa
Signing time: Tue 16 May 2023 12:22:17 +0000
ROA not before: Tue 16 May 2023 12:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211557
IP address blocks: 185.72.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:82:e2:7b:70:f8:93:a0:33:2a:a5:4c:d0:5a:d3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 16 12:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa80922f16f5ad94b212fba2f54a19863855f4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:9f:54:af:da:9d:c9:a7:a4:fc:cb:b1:d6:
5b:13:00:7f:70:af:0f:0a:ed:d9:a2:29:d0:5c:4c:
91:c3:99:b1:70:01:d6:b4:dd:19:0f:ba:b5:9c:53:
95:62:fd:36:bb:72:6d:35:24:e6:cb:73:b6:18:6f:
2e:2e:4e:df:62:19:14:00:ae:fe:55:28:d3:c3:ee:
72:54:93:22:a4:1d:d5:b2:23:90:97:92:64:f4:fe:
bd:c1:38:0f:1e:f1:36:45:ec:1c:46:b2:04:1d:72:
72:d6:80:1d:ee:99:7a:53:6e:5a:6e:cd:d6:83:70:
91:7d:d9:b2:54:3c:82:6b:ed:9e:0f:da:8d:ce:e8:
4a:56:46:2a:35:5f:c2:7d:07:c4:1d:5e:d3:4f:08:
11:22:5c:23:ca:e0:f7:59:3d:39:71:d6:a3:22:0b:
93:95:77:5c:15:29:04:49:7a:a7:36:75:6a:ed:ba:
12:4f:2f:74:1c:b8:ad:01:38:3f:99:47:91:48:a5:
52:84:1f:1e:94:f5:60:74:ba:0e:7d:b9:65:01:b1:
82:89:a0:2c:24:38:8a:7b:b3:cd:dc:de:4a:ac:99:
a8:a4:23:4c:2f:f1:91:19:33:cf:af:46:66:92:39:
4c:d7:fd:41:9c:e6:a2:63:03:35:d9:24:b3:d9:4a:
c2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:80:92:2F:16:F5:AD:94:B2:12:FB:A2:F5:4A:19:86:38:55:F4:CB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qoCSLxb1rZSyEvui9UoZhjhV9Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.9.0/24
Signature Algorithm: sha256WithRSAEncryption
14:84:7d:d8:8c:ac:e0:1d:24:ce:27:ba:d5:12:2d:62:d7:62:
01:3e:1c:75:f8:13:c1:08:18:d8:2c:64:26:a6:b8:ff:e8:33:
1a:4f:74:36:35:10:1d:bb:32:c2:02:38:cb:71:0e:78:f5:49:
cb:66:5d:34:ae:a9:d0:ad:ab:4e:5e:92:29:3a:e4:79:ea:d2:
e7:06:66:69:49:96:6f:72:72:0b:46:f1:9a:fe:78:a5:e1:05:
9e:de:f3:a8:99:df:1e:43:86:94:2e:40:ec:b1:45:08:21:96:
7b:c8:3d:52:fa:90:fa:cb:a1:16:bf:44:8d:b1:dd:d5:18:bd:
a6:2e:7e:00:77:7a:c3:3d:50:35:28:e9:5e:3b:84:f4:fa:ec:
50:5d:ef:f6:4f:87:96:9c:91:54:28:4b:33:27:ed:f6:9f:fe:
d3:91:36:92:cd:c7:9d:24:0d:bf:c3:f7:37:f4:63:06:aa:57:
96:4a:a8:cb:61:c0:c6:f3:b8:c1:fe:8b:0b:18:af:0e:5f:f4:
ee:56:42:1d:b1:40:dd:26:fd:3b:86:3e:43:b0:2e:fe:4a:b4:
d1:88:f3:d6:10:8d:ca:14:68:df:05:c3:68:1e:aa:91:f4:33:
07:0a:38:97:c9:c9:6c:38:ed:0e:1e:d7:09:8e:e9:44:dd:5d:
f0:05:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:19 2024 by rpki-client on console-ams.rpki-client.org