Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/sSDYwh9rJTQ4HR2VDWmcIuXNBD0.roa
File: sSDYwh9rJTQ4HR2VDWmcIuXNBD0.roa (raw, json)
Hash identifier: 9+1FQESlH9T57RHo6mHyxt4CWU9y6cVoMbFkN49Nu0A=
Subject key identifier: B1:20:D8:C2:1F:6B:25:34:38:1D:1D:95:0D:69:9C:22:E5:CD:04:3D
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A35632FAA448BBD93FB12A2C24468
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/sSDYwh9rJTQ4HR2VDWmcIuXNBD0.roa
Signing time: Sun 01 Jan 2023 03:05:03 +0000
ROA not before: Sun 01 Jan 2023 03:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61272
IP address blocks: 188.72.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Jan 2023 15:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:35:63:2f:aa:44:8b:bd:93:fb:12:a2:c2:44:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b120d8c21f6b2534381d1d950d699c22e5cd043d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5e:b7:38:32:01:ce:14:0c:4a:f8:38:a4:b1:
52:19:5e:f3:62:71:aa:48:68:f9:8f:8b:94:95:31:
9e:6d:b2:f0:93:cf:a9:1a:b2:21:c7:c2:af:f7:52:
29:06:df:73:31:67:cd:3d:50:01:d6:91:20:ab:95:
fb:6d:bd:3a:59:f0:db:db:27:ef:57:fd:46:ad:d1:
e1:16:d0:71:fb:f1:76:a2:98:79:ee:95:5f:42:aa:
62:90:10:09:2b:99:74:c1:48:d2:44:a2:fd:ff:13:
36:af:84:0b:de:0d:45:8b:77:c8:8c:2a:f1:a8:1a:
55:06:7d:2d:f5:52:94:f0:3a:1f:a0:ec:61:8a:a0:
0f:58:21:a1:2f:85:61:3c:98:35:69:78:75:8c:4d:
94:54:89:2c:25:80:b3:09:3e:33:3b:84:52:a1:73:
4d:eb:5e:d3:9f:df:3f:94:02:4c:fd:10:ea:7f:ab:
4a:72:02:fb:a3:db:ac:19:a2:5e:7b:7d:fd:9a:8c:
9a:16:90:cd:aa:78:a5:7b:5f:2e:3e:98:9b:af:22:
90:21:d7:f2:73:90:0b:4f:11:12:bb:9e:8d:5a:a3:
a9:33:c1:3d:f8:0a:b6:cd:f7:89:38:fa:9c:63:30:
fd:51:1c:c3:6f:ef:c8:d9:35:41:0f:81:39:d0:9b:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:20:D8:C2:1F:6B:25:34:38:1D:1D:95:0D:69:9C:22:E5:CD:04:3D
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/sSDYwh9rJTQ4HR2VDWmcIuXNBD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.116.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:cb:06:26:84:d2:92:8d:1e:f6:db:b1:4e:e5:21:68:c4:67:
0a:9c:bb:74:1c:2f:4d:24:a2:6a:ac:25:57:50:15:8b:47:9c:
06:ff:f5:c0:c6:54:3a:a0:25:6a:54:cd:8a:3c:f0:be:0a:5c:
4c:ee:90:32:bb:78:29:a8:7c:1d:28:58:4f:da:57:a8:12:f2:
da:8c:95:85:63:df:a9:64:78:07:11:6e:98:5f:7e:18:9c:98:
59:c4:76:47:38:78:a1:2d:d2:d8:bd:d3:40:19:f7:54:31:4e:
4d:81:ed:be:d0:83:11:0e:54:39:f1:e1:af:16:18:3b:dc:eb:
40:ae:36:74:d5:c8:d4:e5:aa:87:20:24:c3:3d:ec:be:f2:8f:
1d:19:ce:9a:0e:c7:0c:e5:26:f1:ec:cb:45:b9:49:32:96:de:
06:c3:2b:53:00:70:e5:53:39:49:87:7d:34:06:79:7f:3c:6e:
5b:d6:6a:72:e5:86:31:0a:8a:28:4a:c7:11:f3:f5:52:59:04:
24:75:88:49:09:a4:3e:98:be:81:3f:07:25:b5:7e:13:05:e8:
08:98:45:8d:4a:da:8f:ad:82:24:a6:0e:1e:b7:39:7b:a3:54:
26:63:d3:37:b0:fa:33:ac:df:f1:52:8a:11:0a:c8:fa:8e:20:
77:9d:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org