Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Vp-Y4Fc3mIKHw0OMTfhh63NdCD8.roa
File: Vp-Y4Fc3mIKHw0OMTfhh63NdCD8.roa (raw, json)
Hash identifier: w5aZFaTuUDAiWQEdGZb6KdJVFZlFlEhrVH4o92WHaCA=
Subject key identifier: 56:9F:98:E0:57:37:98:82:87:C3:43:8C:4D:F8:61:EB:73:5D:08:3F
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018EFC38DCE0D509E0A0A52A3A944039B6D2
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Vp-Y4Fc3mIKHw0OMTfhh63NdCD8.roa
Signing time: Sat 20 Apr 2024 15:56:08 +0000
ROA not before: Sat 20 Apr 2024 15:56:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 185.143.72.0/24 maxlen: 24
185.143.73.0/24 maxlen: 24
212.80.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jul 2024 12:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fc:38:dc:e0:d5:09:e0:a0:a5:2a:3a:94:40:39:b6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 20 15:56:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=569f98e05737988287c3438c4df861eb735d083f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:23:a2:e6:44:b7:6d:d4:1a:06:4b:df:4d:be:
80:07:46:d4:95:c8:a3:bc:d9:84:6d:02:17:bf:31:
cb:a3:3d:cf:e7:8f:13:28:bb:1a:e6:3c:28:ab:df:
7f:76:69:03:99:e8:cf:51:eb:5b:8d:0d:a6:e8:7f:
5b:a7:00:35:35:e0:cb:c6:9f:65:54:73:8f:34:73:
37:ec:2c:d8:d6:e9:85:d4:30:b7:15:7a:c6:c5:1e:
6e:5e:53:29:47:81:67:77:0c:4a:82:8b:85:93:80:
c0:21:e6:d1:ea:92:34:a7:2d:2c:4e:9a:fa:ea:be:
e2:63:ea:50:ea:79:df:9f:c5:4a:17:c4:c4:c8:f3:
93:60:27:b8:98:a1:bc:44:b1:38:aa:e6:29:d6:42:
3b:aa:3e:77:db:89:fe:c0:7d:5a:61:81:5e:8a:05:
f5:66:49:3e:32:70:5a:22:38:19:70:44:d3:fb:5f:
a5:40:74:a3:c9:44:64:14:b6:04:5c:99:d4:63:c7:
1e:06:09:02:15:d0:ad:9c:c0:2b:8b:d2:07:6d:1b:
ec:e5:44:8d:d6:2a:6b:cb:b8:ba:cb:03:4c:97:94:
90:d7:a8:39:94:10:cb:c0:bc:9b:8f:84:d7:4b:94:
e4:07:bb:ae:ae:ab:81:17:ba:41:30:51:4a:6a:51:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9F:98:E0:57:37:98:82:87:C3:43:8C:4D:F8:61:EB:73:5D:08:3F
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Vp-Y4Fc3mIKHw0OMTfhh63NdCD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.72.0/23
212.80.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:87:6e:0e:27:fa:5c:54:1a:bb:20:83:41:53:d7:0e:57:ed:
88:1b:b1:7c:26:19:bb:fd:88:05:5b:1b:3c:26:ef:be:e5:10:
cf:8e:33:47:47:ee:dc:62:39:94:8c:f0:fe:51:5d:5e:75:ef:
2b:1a:b1:ce:2f:0b:57:7a:01:99:fa:f0:46:5d:ad:36:e0:da:
9d:63:5e:c2:8c:68:9a:36:11:8a:ec:92:2a:e3:df:ac:f4:e8:
2e:9a:2c:f7:6a:0a:8b:78:56:4c:b4:e6:db:b8:a0:6a:ea:82:
2a:e2:d1:34:8c:c6:27:a1:98:cf:92:d1:8c:9d:c2:bf:ba:48:
94:d2:f4:6c:c7:59:de:05:0b:ca:c6:7a:34:2d:94:4a:f7:1c:
4c:bd:df:d1:90:13:b6:0f:07:69:1e:39:12:d2:a1:78:9c:65:
f8:6f:81:05:e7:37:71:97:3e:b8:d6:bd:f4:a1:7d:e6:14:0e:
fa:f9:12:d2:50:44:82:4d:a5:08:96:79:f5:d0:69:58:aa:2c:
e5:be:ca:09:7e:c7:eb:6e:13:68:95:01:56:19:e8:f9:bc:81:
c3:36:ef:74:2f:f7:ee:88:d2:7f:2f:49:f4:33:6e:1c:91:73:
e4:2c:04:21:48:c2:c5:3e:3d:c7:94:d9:55:c4:dd:2c:92:71:
dc:40:8c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 15:10:51 2024 by rpki-client on console-ams.rpki-client.org