Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/cpg9WzckNOxVde2ObQP9e9YAOXo.roa
File: cpg9WzckNOxVde2ObQP9e9YAOXo.roa (raw, json)
Hash identifier: AChiZ7fopJrgb79qJ2Xg46QSoWoVg6wqOoT47V0P2Gg=
Subject key identifier: 72:98:3D:5B:37:24:34:EC:55:75:ED:8E:6D:03:FD:7B:D6:00:39:7A
Certificate issuer: /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial: 018572033BA7CBA65DEE6231AD6B40A47BD3
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/cpg9WzckNOxVde2ObQP9e9YAOXo.roa
Signing time: Mon 02 Jan 2023 10:24:52 +0000
ROA not before: Mon 02 Jan 2023 10:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59770
IP address blocks: 185.53.72.0/22 maxlen: 22
2a04:cc40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:3b:a7:cb:a6:5d:ee:62:31:ad:6b:40:a4:7b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
Validity
Not Before: Jan 2 10:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72983d5b372434ec5575ed8e6d03fd7bd600397a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:94:c6:fe:90:45:73:ca:d9:32:eb:57:ab:
02:3c:76:c8:14:f3:04:bd:f0:9e:17:3f:20:d7:75:
16:38:88:ac:aa:4d:81:86:a1:48:8c:d9:33:d8:c7:
f0:70:d5:7b:e4:1e:3e:e4:19:80:82:02:ea:af:6d:
1e:8b:3c:8b:33:d2:13:86:34:58:c2:ae:1e:e4:d9:
58:e0:5c:3c:bf:d9:2e:f5:cf:d1:35:56:68:9f:38:
3f:36:ff:f1:65:ff:b1:59:27:09:0d:44:3d:3f:52:
3f:ed:d0:0f:55:9c:62:93:fa:3b:3e:a1:03:2a:06:
8e:0f:44:51:17:f1:ca:41:7d:da:de:55:a4:fe:81:
ff:0a:37:19:02:8d:08:55:bd:b6:41:b6:89:7e:8f:
74:12:35:45:a5:0b:cf:fe:bc:7d:4a:24:a5:0b:a5:
ec:66:8b:a9:21:09:a8:b9:dd:f8:8d:ce:11:af:a4:
67:14:f4:53:c3:13:86:63:0c:57:23:e9:3a:8b:6e:
ea:21:be:86:39:23:0d:5f:12:4e:ba:97:7a:0b:48:
11:c4:0e:f3:e0:68:96:b1:60:32:c5:3d:f2:09:f2:
45:b3:be:79:f6:4b:cd:c4:7b:a9:eb:4b:0e:87:5d:
2e:53:55:94:ed:54:c5:4c:24:53:97:87:d0:2c:0d:
e0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:98:3D:5B:37:24:34:EC:55:75:ED:8E:6D:03:FD:7B:D6:00:39:7A
X509v3 Authority Key Identifier:
keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/cpg9WzckNOxVde2ObQP9e9YAOXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.72.0/22
IPv6:
2a04:cc40::/29
Signature Algorithm: sha256WithRSAEncryption
12:b5:d7:a8:82:5b:b8:c0:fe:66:25:8a:ad:1a:34:a1:5b:f5:
ed:5d:0e:c6:e1:ac:ec:5b:07:6b:82:8e:28:f6:08:f2:d3:3a:
91:a0:85:49:8f:22:60:ca:09:a7:ba:fa:12:89:69:f9:db:e6:
3c:f9:ea:65:16:f1:52:30:e4:d2:0a:e1:c4:47:b5:98:4c:7d:
ff:69:73:f2:b9:2d:92:65:4f:e6:e7:bb:bc:ea:62:2d:65:d0:
57:1f:75:ce:b3:90:f4:a4:bd:f1:ba:ec:9d:e2:9f:d0:38:8e:
5e:dd:be:d5:20:97:2f:43:d2:2d:42:7f:a7:e0:3a:5c:53:02:
bf:85:fd:a9:29:cc:3d:21:e3:07:e7:fe:09:2b:ef:9f:9b:78:
4b:ae:6d:7a:d3:bf:97:e4:17:76:f8:21:24:55:33:81:66:50:
ac:2d:2b:b3:c9:d3:0f:dc:60:53:3b:9c:95:e9:17:55:7f:89:
6d:57:f3:5f:93:61:8b:05:35:85:f5:3b:3e:02:7e:9f:21:35:
bc:eb:0c:4c:72:55:4b:0b:88:c8:4f:36:59:9a:a5:a9:f9:13:
73:7e:22:28:3a:0e:3e:e7:3b:de:83:cf:48:ef:b2:24:fb:66:
75:e3:1e:5f:67:22:3c:c9:1e:9d:e4:94:42:5e:fb:6a:c7:1e:
cc:2b:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:25 2024 by rpki-client on console-fra.rpki-client.org