Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/h718IICZWWIGwnjODM5byGKfRXU.roa
File: h718IICZWWIGwnjODM5byGKfRXU.roa (raw, json)
Hash identifier: PulRS77mjlpEmi0pPPldXWthB2K55u/l21KkVEzkMCE=
Subject key identifier: 87:BD:7C:20:80:99:59:62:06:C2:78:CE:0C:CE:5B:C8:62:9F:45:75
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0185707084DF756CDF43782247B159F992E4
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/h718IICZWWIGwnjODM5byGKfRXU.roa
Signing time: Mon 02 Jan 2023 03:05:00 +0000
ROA not before: Mon 02 Jan 2023 03:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19197
IP address blocks: 57.72.96.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:84:df:75:6c:df:43:78:22:47:b1:59:f9:92:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 2 03:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87bd7c208099596206c278ce0cce5bc8629f4575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:bc:e2:a5:1d:46:03:18:d3:e7:58:9e:02:
c1:72:8b:7e:ea:1b:5e:9d:4d:b1:1a:e5:f8:da:f5:
ff:af:66:58:71:8a:fb:81:5f:aa:51:21:76:3c:44:
b9:9f:34:c7:df:23:97:56:a6:01:7c:d1:1e:64:b7:
5f:dc:9c:5a:54:ad:99:fa:db:fa:18:aa:1d:44:35:
81:ed:a9:cf:a1:7b:eb:84:34:03:6c:e5:d1:75:2b:
dc:d6:98:cd:5c:d8:40:b1:48:3a:c6:61:e8:a6:a6:
71:06:a2:fa:a3:b4:a6:af:79:28:20:00:54:19:1f:
45:1c:8a:6f:09:e2:06:28:67:f1:c5:80:60:19:0f:
6d:e2:50:ed:bb:fc:f8:a0:e9:5d:98:5c:13:75:87:
00:54:c6:01:28:6a:ba:d9:b6:68:0a:27:38:5c:8f:
f7:d3:12:b6:b1:df:66:16:27:14:f3:73:32:60:51:
07:83:2c:39:67:5c:e1:24:69:00:f7:1a:b2:45:f6:
86:11:32:d0:b2:ac:21:7d:e1:ba:56:f6:c4:bb:58:
9d:b1:fa:41:5f:52:7e:b7:ce:2c:24:ce:7a:30:94:
95:ea:55:1d:b8:0e:ff:8a:ee:71:71:ab:3e:fc:e5:
1e:d5:58:bb:cd:2c:ab:e3:3b:bf:4a:b3:17:e1:4e:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BD:7C:20:80:99:59:62:06:C2:78:CE:0C:CE:5B:C8:62:9F:45:75
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/h718IICZWWIGwnjODM5byGKfRXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.72.96.0/24
Signature Algorithm: sha256WithRSAEncryption
40:72:d7:e4:c4:76:79:93:08:9a:72:e6:5f:55:6f:bd:b7:1b:
17:23:58:77:67:8d:65:a9:67:30:8d:8d:b2:99:3e:2e:27:23:
07:d4:c2:0f:88:56:76:06:7c:25:3d:cf:db:d5:50:37:64:90:
47:4b:9e:63:16:e9:ce:79:b8:fe:d0:13:19:39:20:8a:6b:a1:
81:f1:d1:15:81:04:b1:21:2e:80:18:3d:5c:e4:d4:89:b5:34:
c7:c6:21:e6:7d:40:fd:73:10:b7:2a:09:a8:7c:94:5b:97:d7:
29:ad:8f:3e:6e:dc:b9:dc:35:a4:15:3f:69:55:5d:b1:5e:5e:
cf:37:94:48:be:ab:53:26:c8:23:da:d9:c1:ff:48:e5:75:34:
6c:d3:3f:63:20:d1:aa:f9:33:35:5b:3c:7a:3b:38:05:cf:1d:
44:51:86:4c:25:5d:2e:76:07:ee:41:da:86:ee:0e:78:f3:28:
8b:d0:2a:13:f2:90:b9:18:f3:63:bd:d5:72:b8:2b:18:6d:1f:
e2:c5:7d:84:b0:2f:5d:d3:be:02:9c:5c:c9:9e:b7:bd:b6:21:
df:0e:84:29:2d:fb:08:d3:59:1e:ae:e3:56:94:31:8e:c9:3a:
de:17:47:93:e7:e7:91:ac:43:9c:78:d6:ee:0b:7e:bb:30:c7:
1a:65:af:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:44 2024 by rpki-client on console-fra.rpki-client.org