Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/xs6OdZ9OhB5GSze45VQlXBqwia8.roa
File: xs6OdZ9OhB5GSze45VQlXBqwia8.roa (raw, json)
Hash identifier: Lbc0z44iBCJRdkAW+U6Anl33hArGOIzuPLfsLjPMaYY=
Subject key identifier: C6:CE:8E:75:9F:4E:84:1E:46:4B:37:B8:E5:54:25:5C:1A:B0:89:AF
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DB294555FC5BB56423FAA688F2813E599
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/xs6OdZ9OhB5GSze45VQlXBqwia8.roa
Signing time: Fri 16 Feb 2024 15:41:22 +0000
ROA not before: Fri 16 Feb 2024 15:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 185.143.73.0/24 maxlen: 24
212.16.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 08:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:94:55:5f:c5:bb:56:42:3f:aa:68:8f:28:13:e5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 16 15:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6ce8e759f4e841e464b37b8e554255c1ab089af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:10:a6:2f:cc:21:51:16:52:34:fa:d2:e3:
f9:20:8b:a3:60:75:a9:fd:3b:e8:d8:af:f4:df:ba:
be:c8:23:31:b5:42:46:a6:1e:e6:70:e8:8a:a1:44:
1c:52:3a:49:7f:f7:f1:be:bc:46:bd:03:53:c7:34:
6c:67:f9:23:3c:69:88:1c:ee:d4:96:c2:42:a8:9e:
ea:da:f0:d5:c7:6e:cd:d7:fb:fc:96:17:92:3b:3a:
3e:be:dd:c0:14:c8:50:44:aa:28:55:48:44:41:4f:
22:db:4a:84:48:ef:f2:30:e2:03:ec:2c:c8:32:06:
a0:50:eb:9d:3e:c2:65:df:34:da:7e:3e:14:f7:32:
d4:ba:1f:a0:80:16:d5:03:5f:3a:4a:27:99:96:ec:
07:c0:46:53:55:45:6a:6a:50:56:a9:c5:16:98:87:
81:12:3a:16:e6:54:39:f6:70:64:8a:40:23:70:ff:
95:28:bb:4d:ef:5e:86:d8:25:6e:4b:36:9a:fc:40:
96:f1:1c:03:ec:b0:f5:7a:ac:cb:4e:cb:23:3d:2e:
dc:19:b1:d4:53:54:79:df:da:fe:ea:83:67:2e:a9:
76:86:0f:5d:10:3c:1d:df:1d:58:28:e8:51:72:43:
a1:eb:af:57:7f:11:f8:20:8a:24:c9:f8:ff:09:a6:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CE:8E:75:9F:4E:84:1E:46:4B:37:B8:E5:54:25:5C:1A:B0:89:AF
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/xs6OdZ9OhB5GSze45VQlXBqwia8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.73.0/24
212.16.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e5:8f:ae:08:72:c2:03:d0:81:a6:e8:4f:57:ee:b9:2b:7a:
bf:b6:a5:89:b4:89:6c:c3:69:45:b9:29:ab:c4:b5:9b:8d:74:
81:4d:d8:35:6f:a0:6f:7f:e8:23:99:97:26:02:2f:af:4f:d7:
06:33:22:36:73:26:a8:36:b5:00:44:bb:d2:31:12:dd:a7:75:
86:d9:91:d5:70:6d:77:e7:f6:e2:f4:73:85:29:67:2f:f4:2b:
98:52:f2:00:bb:9a:4f:d8:8c:07:71:ff:59:57:61:d0:b2:ad:
01:b7:e9:ec:1a:44:6e:a9:a0:ab:f3:44:a1:a9:aa:fd:4f:3f:
a2:d2:eb:90:f3:db:98:49:30:25:9d:cc:46:63:82:2a:6f:f2:
45:37:6c:e4:70:7e:7d:99:b1:02:83:61:a1:a8:49:8b:43:52:
e5:29:25:e0:69:10:c5:7d:85:cb:3b:68:3c:52:18:c5:28:c2:
99:15:e6:f1:f4:d1:20:8f:55:b1:79:2e:0c:06:e9:01:ef:57:
69:5f:98:4b:a8:97:47:43:58:dc:65:c7:90:01:16:93:5e:cb:
ae:a3:96:fc:e0:f0:2e:e8:8e:b0:11:1c:83:53:72:9f:74:ee:
85:37:72:58:87:79:6d:a7:15:85:1b:14:97:0e:2a:33:be:0c:
d4:1b:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org