Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/AWU5W0tYTkYjpl3WB9Qgg8VcONg.roa
File: AWU5W0tYTkYjpl3WB9Qgg8VcONg.roa (raw, json)
Hash identifier: N9shfEY8iWY+eJQb1jv0/E4VcdNEavtosvhnl/AfeiY=
Subject key identifier: 01:65:39:5B:4B:58:4E:46:23:A6:5D:D6:07:D4:20:83:C5:5C:38:D8
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01856CC17610007649A258D476A77721EDA7
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/AWU5W0tYTkYjpl3WB9Qgg8VcONg.roa
Signing time: Sun 01 Jan 2023 09:54:55 +0000
ROA not before: Sun 01 Jan 2023 09:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 194.35.38.0/23 maxlen: 23
93.191.173.0/24 maxlen: 24
2a02:2370:fe::/47 maxlen: 48
2a0b:35c0::/29 maxlen: 31
Validation: Failed, certificate revoked on Thu 27 Apr 2023 09:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:76:10:00:76:49:a2:58:d4:76:a7:77:21:ed:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 09:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0165395b4b584e4623a65dd607d42083c55c38d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:20:c5:9d:d7:b1:1e:fd:27:8d:0b:3f:7b:75:
df:16:64:ad:fc:2a:51:13:f4:a1:09:f2:0e:a0:c2:
2d:16:5c:ca:e9:9c:80:1c:3d:1c:e2:be:61:a7:24:
a4:12:28:de:f1:c1:d5:27:59:ab:13:71:8a:13:dc:
b4:3a:6f:48:d7:58:be:60:98:f0:28:b2:e8:a8:03:
6e:f0:71:4e:fc:96:29:3f:fd:4b:7f:42:6c:0e:ad:
ea:cf:d5:27:aa:f8:04:bd:11:31:ee:bf:6f:9b:cf:
66:26:f8:fb:13:0a:4d:b7:16:8b:48:d9:ce:dc:31:
0d:0a:d1:40:f9:d6:ad:e8:5f:03:21:33:b3:26:cb:
92:e3:b1:88:63:39:d6:0f:64:d0:b5:f5:db:5a:d1:
d2:72:e1:bb:05:5e:52:f2:3d:9d:9b:0d:e7:c9:71:
5d:65:49:54:b1:ca:9f:4b:5e:ac:0f:77:27:bc:5f:
fd:8d:7d:bd:f0:08:79:ea:2b:4c:08:f4:c0:b4:e4:
42:71:e5:75:96:6d:09:35:7a:0f:ef:4b:ee:4b:0e:
e8:f5:4d:f5:dc:24:06:c0:22:7e:99:b8:d2:f3:d8:
a3:b8:82:79:ef:b1:8d:24:0d:4c:8a:b9:53:d5:c9:
6a:ed:79:35:a4:0d:29:12:28:25:6f:80:2e:68:b5:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:65:39:5B:4B:58:4E:46:23:A6:5D:D6:07:D4:20:83:C5:5C:38:D8
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/AWU5W0tYTkYjpl3WB9Qgg8VcONg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.173.0/24
194.35.38.0/23
IPv6:
2a02:2370:fe::/47
2a0b:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
2f:9e:0a:c9:2c:29:3f:a9:80:10:c2:6d:2a:a6:32:dd:72:cf:
9d:0d:4c:4a:5e:cc:9b:78:ff:07:94:bc:9d:ea:23:51:ad:41:
f0:9b:be:96:ba:27:81:29:f8:67:e3:ab:be:78:0a:29:7f:f2:
64:1c:f8:38:ce:0f:34:76:18:7b:bc:02:1d:9d:b0:9d:52:c1:
f8:da:c5:44:2f:e9:e3:0b:0a:78:26:12:53:1f:b8:5f:36:ad:
6f:67:29:b9:56:61:2d:73:b2:78:74:b2:c3:6e:20:1f:1a:76:
07:67:0c:c2:f8:e0:4a:47:55:7c:ca:35:38:3c:47:75:ea:a1:
f5:3d:ff:41:a6:b8:9f:1b:0d:c9:b9:75:6a:65:69:fd:c5:4e:
83:17:66:c2:da:8e:10:3a:4c:0a:43:cb:5e:9f:51:32:a0:ef:
61:83:f5:7a:e9:2b:bf:f9:7f:82:b4:85:10:af:07:79:5e:e1:
fd:c3:88:ae:a0:3f:9b:b3:21:eb:e9:a9:51:e7:69:51:ce:e4:
11:de:5a:47:ba:9e:00:72:d0:80:5a:a1:48:ff:1d:a0:f2:8e:
ef:99:e5:04:af:ed:69:ae:4b:bf:07:4d:cf:b0:87:1a:4b:80:
81:4e:7f:82:90:5e:dd:3e:b8:4c:84:55:b2:9a:a4:81:98:94:
6a:9e:63:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:12 2024 by rpki-client on console-ams.rpki-client.org