Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/mWQBQivpobfYSuu9NCmsR491BDU.roa
File: mWQBQivpobfYSuu9NCmsR491BDU.roa (raw, json)
Hash identifier: vW3Z60i0aA2yuoM9iYewu8IhFKKxxeXKUdvB7SO8DaQ=
Subject key identifier: 99:64:01:42:2B:E9:A1:B7:D8:4A:EB:BD:34:29:AC:47:8F:75:04:35
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DAD63E655264657263A9B10F208FC1285
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/mWQBQivpobfYSuu9NCmsR491BDU.roa
Signing time: Thu 15 Feb 2024 15:30:21 +0000
ROA not before: Thu 15 Feb 2024 15:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 185.143.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 18:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:63:e6:55:26:46:57:26:3a:9b:10:f2:08:fc:12:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 15 15:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=996401422be9a1b7d84aebbd3429ac478f750435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5e:4b:b0:50:cc:d9:5e:66:7e:6e:07:86:2b:
be:bd:93:11:3c:42:fc:4b:fc:da:63:e6:79:4b:64:
b1:0e:e9:6e:0e:d3:a0:a2:db:36:00:50:e7:b0:ca:
44:39:42:7b:bc:f1:93:56:16:32:5d:06:f1:c0:ef:
3c:72:c4:17:87:e9:38:ad:d7:9b:3d:8a:c7:29:d5:
0c:7e:8f:2c:eb:bc:4b:a2:bb:45:e8:4d:8f:a4:11:
af:d8:8e:28:42:4f:a4:1d:60:77:51:9b:a8:09:0d:
50:f2:3f:7f:d4:a0:0f:dd:8c:8f:ab:16:a8:83:54:
16:9b:0b:0b:54:43:e5:7b:c6:30:af:8f:a1:70:46:
1c:a0:3e:ea:74:d7:4d:9e:53:b9:41:61:01:55:6f:
10:8b:b4:29:be:6f:6e:e4:ab:61:be:03:ae:92:de:
f6:75:b3:49:aa:f1:e0:c0:34:74:2d:40:0c:19:3f:
83:a9:74:d7:09:8f:ed:25:61:38:6f:b8:8a:90:38:
76:ea:88:07:39:03:d1:9c:ce:38:33:a9:a9:c5:6b:
86:c4:8a:9a:86:03:64:89:f2:75:92:25:7f:0b:9b:
67:06:4d:17:e6:22:50:2e:20:dc:ca:eb:c1:43:c2:
ea:de:b2:8b:b6:f3:25:0f:36:05:1c:9a:8a:04:3a:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:64:01:42:2B:E9:A1:B7:D8:4A:EB:BD:34:29:AC:47:8F:75:04:35
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/mWQBQivpobfYSuu9NCmsR491BDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.72.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2e:56:36:1e:49:14:b6:d5:9c:d2:19:1a:48:82:47:04:b2:
9b:23:58:12:15:79:1f:c0:ff:94:f1:7c:00:cd:fe:c2:80:6e:
aa:1f:71:bf:42:d8:9f:bc:e5:0d:bb:06:2b:b1:47:9d:b0:6e:
63:97:5d:14:3e:76:17:df:52:59:7b:9c:b5:24:c4:1e:d5:a7:
d5:68:0a:78:cc:58:ed:cf:e0:24:4e:1e:14:69:cf:67:78:8a:
57:ba:65:fe:5d:6c:f0:49:e5:f1:eb:98:14:50:fd:11:33:41:
b9:1d:35:bf:dd:d5:22:c4:24:10:6e:89:dd:1a:3e:31:6c:0d:
11:e2:53:3a:be:48:14:32:b6:68:5c:da:29:e7:96:f5:f5:86:
da:55:55:01:5d:a4:de:ea:30:c6:56:9b:f3:88:ff:39:ef:e4:
f4:04:e5:21:58:17:1c:c1:c6:27:6f:ba:17:4e:a3:c8:f4:f3:
67:c4:37:6e:56:8e:34:ea:40:e3:51:41:97:79:94:d2:62:7e:
02:16:23:07:f7:fe:eb:bc:c4:7f:7c:86:b2:2f:c3:cb:f1:05:
17:52:d0:26:f1:13:ee:b1:16:e7:b1:98:0a:fe:1b:76:4b:bb:
12:11:4f:1b:df:51:f4:e6:8b:f7:4d:54:c5:9b:d7:2e:e0:ce:
ba:21:f5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 22:23:10 2024 by rpki-client on console-fra.rpki-client.org