Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/W6foJsnC473hfwrjv_tdObmCoUk.roa
File: W6foJsnC473hfwrjv_tdObmCoUk.roa (raw, json)
Hash identifier: Z05qrnVQurmoutVUnPFTS3RN/R/55ASrPPNjucQb+Gg=
Subject key identifier: 5B:A7:E8:26:C9:C2:E3:BD:E1:7F:0A:E3:BF:FB:5D:39:B9:82:A1:49
Certificate issuer: /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial: 018CF2A52E497CA7727B4556E2759BA374F6
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/W6foJsnC473hfwrjv_tdObmCoUk.roa
Signing time: Wed 10 Jan 2024 09:12:40 +0000
ROA not before: Wed 10 Jan 2024 09:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25222
IP address blocks: 185.151.232.0/23 maxlen: 23
109.232.12.0/23 maxlen: 23
2a03:1c80::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 30 May 2024 10:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:a5:2e:49:7c:a7:72:7b:45:56:e2:75:9b:a3:74:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Validity
Not Before: Jan 10 09:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ba7e826c9c2e3bde17f0ae3bffb5d39b982a149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:71:6a:93:cb:b2:36:bd:a4:6a:01:7c:67:
8b:f1:e8:94:6b:4d:8b:c9:3d:23:bb:19:3a:ba:24:
19:1e:bc:e1:41:c5:4d:e6:23:94:33:72:36:3d:1a:
86:c3:3f:e0:44:f8:09:6b:1c:f7:0b:20:e7:79:5d:
0e:b9:d2:86:27:1d:6c:18:80:eb:70:e1:d3:00:1e:
4a:2a:d6:c1:90:1e:f5:93:72:3e:6c:b8:13:8f:7b:
d3:cb:95:85:21:ef:67:1d:91:c0:19:81:b2:8e:fd:
34:03:1a:3c:7c:45:98:44:c0:9a:e6:aa:5b:60:a5:
bd:f1:35:18:2d:6b:01:5b:49:94:61:3a:1f:b5:4c:
32:15:a1:47:85:0c:35:9e:11:26:94:97:11:33:27:
53:31:db:ce:41:ef:47:ac:80:fd:c1:04:ec:27:45:
53:c5:8d:df:6c:66:d6:c1:38:7f:79:03:93:44:5e:
f1:d4:bd:db:03:6e:be:8f:30:00:4b:b8:86:15:25:
1d:76:1d:08:f0:1e:a7:dd:35:43:32:ea:5f:71:3c:
c8:18:6b:8a:b8:9d:07:68:6f:b6:7f:12:a9:da:88:
76:ed:41:dd:4f:b5:86:e0:d0:b1:05:bc:1f:4f:e3:
46:1a:26:c6:8e:23:1b:cf:6b:0b:8a:92:12:50:b5:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A7:E8:26:C9:C2:E3:BD:E1:7F:0A:E3:BF:FB:5D:39:B9:82:A1:49
X509v3 Authority Key Identifier:
keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/W6foJsnC473hfwrjv_tdObmCoUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.12.0/23
185.151.232.0/23
IPv6:
2a03:1c80::/32
Signature Algorithm: sha256WithRSAEncryption
05:8c:d8:08:38:db:66:8c:58:8c:da:69:6e:35:48:ef:dd:be:
02:88:96:14:00:f7:9a:a7:9a:06:c3:a6:86:e7:01:7e:49:0d:
8e:aa:22:fd:5e:6f:0c:42:07:70:7f:9d:6a:25:ba:52:bb:88:
74:46:3b:0b:fe:b3:f1:b6:3a:8a:b4:a9:0d:66:44:20:66:df:
e3:6e:44:22:0e:25:30:31:9c:0f:99:85:b6:85:c7:c1:5a:d8:
05:31:9e:31:fc:fe:78:96:1b:aa:f9:a8:df:72:8c:6a:a7:c8:
4f:f0:e4:0b:ab:27:9c:83:1f:f0:74:ca:44:be:57:c7:ce:a6:
54:66:5a:6f:4a:d7:31:28:72:2a:1e:8b:e5:cc:6e:9b:4f:a0:
27:db:00:e8:e5:d9:24:4f:a5:7f:da:4b:9c:a4:80:56:66:86:
3c:09:2b:3f:e0:61:3f:19:7f:b3:84:31:3f:79:9c:c2:00:d9:
24:b4:72:59:0d:9d:6e:66:cb:78:38:ad:94:f9:69:79:4f:3a:
ab:9a:5e:2c:f6:a8:b0:3d:42:27:2f:46:e0:1b:13:84:13:24:
5b:ae:da:51:ee:d1:f8:d7:8a:b8:7b:95:e4:8c:f4:6e:3a:79:
ce:b2:be:8a:5f:5f:c1:a3:0e:9f:40:79:cb:01:94:8e:a9:ab:
09:34:d4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:23 2024 by rpki-client on console-fra.rpki-client.org