Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/W6oh1KyVCmbJ-WykdNmFHRgqtu4.roa
File: W6oh1KyVCmbJ-WykdNmFHRgqtu4.roa (raw, json)
Hash identifier: AK//FnAXHS61hlI8BM+xCeuALRRROMemu4iFUFLGGs4=
Subject key identifier: 5B:AA:21:D4:AC:95:0A:66:C9:F9:6C:A4:74:D9:85:1D:18:2A:B6:EE
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01856CAEF7AB7BD6D1F95106F673F74DAC98
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/W6oh1KyVCmbJ-WykdNmFHRgqtu4.roa
Signing time: Sun 01 Jan 2023 09:34:44 +0000
ROA not before: Sun 01 Jan 2023 09:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28099
IP address blocks: 37.235.52.0/24 maxlen: 24
2a03:f80:56::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:f7:ab:7b:d6:d1:f9:51:06:f6:73:f7:4d:ac:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 09:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5baa21d4ac950a66c9f96ca474d9851d182ab6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:11:19:10:7c:96:f5:1a:0a:2a:ef:8a:22:
31:7b:4e:8b:72:59:23:5f:1c:7b:e5:46:72:d0:fa:
86:35:0b:82:de:6d:bb:be:be:b7:ff:e7:c6:db:e5:
05:9d:98:ee:ed:fb:81:de:94:78:ef:fb:27:2a:d4:
db:e3:cb:e1:10:0c:5c:09:f4:a4:cd:09:d0:e6:51:
22:32:fd:a9:8f:68:44:99:17:48:31:ca:e7:e4:83:
f3:10:06:5a:53:40:d4:82:89:06:a8:ba:1f:81:5b:
41:11:05:0c:c1:85:af:2e:2f:92:6c:0f:99:86:c3:
4c:47:32:2f:fd:7e:08:ea:03:8a:7d:2b:75:78:92:
30:7a:9a:61:b2:ac:3e:14:ff:ac:97:d5:48:bb:25:
34:dc:c5:10:8e:c1:46:14:46:89:a1:74:22:72:21:
2e:72:94:1c:6e:72:65:2b:e1:94:53:03:0a:57:69:
fa:cb:11:18:8d:58:ae:09:e1:ba:1d:66:52:8f:f2:
6e:88:84:33:5c:6d:1f:e7:22:28:a8:19:2e:41:41:
a8:57:2c:71:ea:46:1d:73:da:52:35:d4:95:2d:84:
f2:53:a7:3c:23:6c:ae:23:45:de:d5:33:40:7e:0e:
a8:02:35:dd:aa:72:ba:19:61:be:e4:3f:bd:4f:48:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AA:21:D4:AC:95:0A:66:C9:F9:6C:A4:74:D9:85:1D:18:2A:B6:EE
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/W6oh1KyVCmbJ-WykdNmFHRgqtu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.52.0/24
IPv6:
2a03:f80:56::/48
Signature Algorithm: sha256WithRSAEncryption
20:8a:bc:ae:db:bd:4b:e5:06:53:9e:73:93:16:f6:ea:18:10:
95:1a:67:c9:f7:57:82:4d:41:d4:f9:4d:53:53:9f:be:cc:4b:
2c:b3:15:98:0e:82:ea:4c:62:f9:70:05:f6:1d:d4:82:ea:64:
13:f8:18:4e:65:0d:09:92:14:7c:97:52:d9:d1:ec:cd:ec:06:
40:cb:cb:0b:b5:49:e2:7d:98:7b:48:d4:46:cf:57:dd:20:cd:
4b:35:34:cc:a2:e2:72:c7:4f:87:56:27:79:32:99:a5:13:87:
54:35:a4:94:c2:97:3a:0c:e3:c1:f3:60:dd:fc:1c:a5:a4:0e:
75:67:ef:ea:36:bc:b8:b9:64:96:e0:29:ea:4f:36:21:1a:fb:
9a:ed:11:6f:37:fb:09:5b:36:fc:25:16:56:42:1a:41:ad:05:
c1:4e:97:9f:4c:87:62:89:2f:63:a4:ba:d2:a9:3d:59:75:f2:
4a:0c:50:ce:5f:f1:61:47:31:30:55:1e:80:d3:a3:d6:25:04:
09:3a:01:27:11:91:10:df:ef:db:86:07:60:e5:a3:c0:c9:29:
6f:cf:42:0f:35:48:c9:72:8d:58:35:98:64:5a:5f:7f:4c:80:
ed:07:a8:57:ed:8d:65:ba:d8:d6:70:ab:3a:3b:5b:d1:06:86:
6a:07:fe:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:51 2024 by rpki-client on console-ams.rpki-client.org