Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/wY28xphIQu-uL7Pr4pZgBiD-tmw.roa
File: wY28xphIQu-uL7Pr4pZgBiD-tmw.roa (raw, json)
Hash identifier: Hq3M8Tx41zCRbRgSHSjquNGcGvMnDy4Anb2Jw3gIIv4=
Subject key identifier: C1:8D:BC:C6:98:48:42:EF:AE:2F:B3:EB:E2:96:60:06:20:FE:B6:6C
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A301B0667456512254B646EDD536C
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/wY28xphIQu-uL7Pr4pZgBiD-tmw.roa
Signing time: Sun 01 Jan 2023 03:05:01 +0000
ROA not before: Sun 01 Jan 2023 03:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57652
IP address blocks: 188.72.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:30:1b:06:67:45:65:12:25:4b:64:6e:dd:53:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c18dbcc6984842efae2fb3ebe296600620feb66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b3:31:fd:af:72:cd:4f:ae:93:93:db:04:dc:
6e:9c:62:dc:21:cb:d9:b5:38:28:1b:6c:11:a1:d0:
53:d9:a9:66:41:04:d8:4e:14:02:a7:22:2a:1f:e4:
01:f8:47:ce:51:e0:4d:37:ef:f6:5d:22:f5:27:e4:
34:19:18:c0:77:85:6d:8c:4c:6f:71:08:61:17:29:
b3:58:4e:b5:7a:d4:f2:f6:5f:15:f4:95:f4:c7:cd:
33:ad:cb:02:93:49:be:20:2a:be:6f:68:a1:9c:97:
c8:ac:1c:be:60:98:69:e1:61:ef:fa:72:49:14:78:
cb:88:10:4f:de:cc:ae:19:8e:b4:d1:06:cd:0c:9d:
d4:53:5a:dc:a2:cb:d2:fe:fb:b2:26:43:db:57:6f:
ea:34:78:6b:74:68:86:47:09:66:33:05:6f:1e:2b:
03:87:df:23:1b:14:54:e0:43:07:88:bf:44:23:46:
5a:9b:f3:f6:4d:ff:81:65:ec:f5:9b:3e:14:1b:3b:
c5:a8:63:55:92:63:c3:d1:59:9c:ac:5c:f7:88:e1:
2e:93:b8:f1:91:b9:d9:3d:b1:d0:e6:d6:cf:9d:4e:
63:ee:ba:71:29:94:81:67:e6:bc:02:c4:b2:7c:a7:
3f:b9:cb:83:12:a0:90:7d:f4:dd:1a:fa:25:98:a5:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8D:BC:C6:98:48:42:EF:AE:2F:B3:EB:E2:96:60:06:20:FE:B6:6C
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/wY28xphIQu-uL7Pr4pZgBiD-tmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.73.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:28:1c:c4:40:fb:b9:7c:f4:60:70:63:36:df:ae:0c:11:31:
b2:76:c3:d8:26:7b:66:80:8f:75:4e:c5:7e:d3:34:0e:10:9d:
70:a8:b5:af:b4:20:a3:9a:b1:3d:a0:d0:5f:da:70:67:84:72:
b4:95:dd:3c:b5:e4:92:f4:51:a2:4b:b8:83:79:37:28:72:b8:
2d:de:7b:2a:aa:42:ec:77:2b:a1:dc:ac:c3:e7:2a:8b:f1:94:
47:01:38:b8:c0:48:ba:e0:ca:41:e3:c1:46:6c:52:2f:3a:42:
b0:9f:b8:66:e2:78:95:f1:fc:6b:e9:0e:3d:f2:7f:9c:06:3a:
2d:2e:04:6b:5f:f9:9b:50:f9:86:53:c9:2c:c2:45:65:57:c9:
71:a6:62:e9:1b:1d:03:b6:10:84:00:f1:ff:14:8e:90:0f:18:
2b:ab:5c:ff:83:34:ab:cc:b7:0d:99:7e:ca:92:cd:b4:3f:a6:
a2:4c:b7:33:74:7f:02:4d:64:7f:25:d4:81:03:9f:05:c9:0d:
0a:91:54:9e:24:3a:48:aa:6c:f3:0b:d6:85:52:c0:b8:2b:d0:
08:24:1f:91:82:0e:d6:1e:a0:ac:79:07:14:b5:b8:04:76:a2:
e0:03:e9:38:6d:a7:a4:7e:e9:5d:ab:a6:1e:e5:05:58:53:c5:
13:2e:be:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:50 2024 by rpki-client on console-fra.rpki-client.org