Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/sDDWEywURlVexjZLlTECVtVcYQQ.roa
File: sDDWEywURlVexjZLlTECVtVcYQQ.roa (raw, json)
Hash identifier: 4GgyeFpeabJtCt9WvL643gS5WGRo5ed4/xgbS0JErow=
Subject key identifier: B0:30:D6:13:2C:14:46:55:5E:C6:36:4B:95:31:02:56:D5:5C:61:04
Certificate issuer: /CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca
Certificate serial: 01856B6EAD94BE2431D2BEC480D7F6CDBFDA
Authority key identifier: 9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/sDDWEywURlVexjZLlTECVtVcYQQ.roa
Signing time: Sun 01 Jan 2023 03:44:53 +0000
ROA not before: Sun 01 Jan 2023 03:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205908
IP address blocks: 23.252.72.0/24 maxlen: 24
167.160.18.0/24 maxlen: 24
2a10:4cc0::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 21 Aug 2023 08:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:ad:94:be:24:31:d2:be:c4:80:d7:f6:cd:bf:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca
Validity
Not Before: Jan 1 03:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b030d6132c1446555ec6364b95310256d55c6104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e8:a4:16:5e:d9:3f:35:37:c9:4d:b6:fc:dc:
34:e0:d0:8b:5e:73:ce:9c:54:ae:42:b4:29:ed:c2:
f2:38:50:cc:cf:68:92:30:ab:a3:1b:94:63:5a:0c:
d1:a5:48:30:86:e8:12:48:09:5b:00:92:30:97:e8:
d8:a7:d2:27:b9:45:78:14:82:01:1e:2b:24:d7:e7:
98:9e:4d:1b:af:ba:12:99:b2:56:ff:86:a4:44:4f:
b6:ff:71:f7:3d:1e:49:ab:60:25:1c:a0:7e:fd:4b:
66:51:c1:2e:05:c9:9b:2f:54:e2:33:98:4e:d7:bd:
bb:96:4a:22:c0:a4:26:02:12:0c:4a:80:ea:89:9d:
70:1e:d5:0f:32:a4:c0:d2:63:f5:b9:2f:69:7f:61:
d0:26:f0:c6:89:69:be:ae:e5:6d:de:60:f6:b4:23:
1a:f6:c5:3e:e9:54:d7:61:3c:ad:1a:1e:9f:fb:6c:
12:3f:5f:3a:e4:03:bf:a5:11:36:cb:e7:18:f9:61:
ec:c7:14:47:a7:dc:f0:cb:87:ca:b8:34:19:c0:27:
ff:ac:80:d4:09:ee:e3:d3:01:59:f3:e4:13:59:0e:
b0:8b:4a:5f:57:2e:b5:ce:af:d0:93:8c:e0:64:1f:
6f:70:e3:cf:79:66:99:b6:84:67:90:cb:17:35:62:
fd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:30:D6:13:2C:14:46:55:5E:C6:36:4B:95:31:02:56:D5:5C:61:04
X509v3 Authority Key Identifier:
keyid:9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/sDDWEywURlVexjZLlTECVtVcYQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.252.72.0/24
167.160.18.0/24
IPv6:
2a10:4cc0::/40
Signature Algorithm: sha256WithRSAEncryption
6d:7e:d5:d8:c4:10:8c:b9:a0:8a:6c:99:fa:ec:96:bd:91:49:
42:86:5a:ea:a2:6b:04:24:26:9b:a3:f8:4b:16:70:d4:18:f6:
72:5d:a6:5a:05:42:4a:4a:2e:96:c0:29:e2:c2:b4:ae:24:a8:
0f:a2:38:5e:28:69:27:1e:7d:67:be:ab:cd:32:6b:65:f6:53:
b9:d5:3a:83:bd:1f:1d:dc:9d:c7:27:be:8e:a7:17:ab:fe:fd:
54:92:91:26:3d:87:e4:59:72:27:e6:01:5e:f9:23:75:b6:0f:
c9:af:fc:65:30:b2:34:a9:f0:d2:c7:c8:0b:9c:ff:48:62:9f:
f2:d6:0b:d4:d2:ac:87:c5:82:de:52:7d:8f:19:ae:3c:76:bb:
48:d0:b7:fb:cf:29:4c:02:60:5b:de:14:82:39:51:6d:00:67:
30:80:ec:47:d5:6d:c3:dc:07:5e:1c:71:12:4e:0b:f3:80:fc:
89:c9:2e:20:bd:8a:a3:8b:0a:f4:65:ce:b2:54:ad:86:1c:ee:
01:29:b3:c1:85:18:8c:1b:de:0e:d1:1b:f3:fd:ee:b1:f5:d5:
0b:8c:eb:9f:e3:d8:6f:f4:8b:5b:01:cd:9c:bc:f5:4a:13:e8:
d3:ef:d7:06:1d:ce:44:66:29:91:ce:cc:97:36:31:66:09:8b:
62:9f:07:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:56 2024 by rpki-client on console-fra.rpki-client.org