Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/w5sxMLEB95aFdf6yt4kFpN7mqKk.roa
File: w5sxMLEB95aFdf6yt4kFpN7mqKk.roa (raw, json)
Hash identifier: uAYTey6xCvfcn/gMFJEjNnwr+utFmPWXW6K8OxEhQQM=
Subject key identifier: C3:9B:31:30:B1:01:F7:96:85:75:FE:B2:B7:89:05:A4:DE:E6:A8:A9
Certificate issuer: /CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Certificate serial: 01856BA57EC39407A47193F9F4CEC6ADA42B
Authority key identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/w5sxMLEB95aFdf6yt4kFpN7mqKk.roa
Signing time: Sun 01 Jan 2023 04:44:46 +0000
ROA not before: Sun 01 Jan 2023 04:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200652
IP address blocks: 185.100.60.0/22 maxlen: 22
2a06:1740::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:7e:c3:94:07:a4:71:93:f9:f4:ce:c6:ad:a4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Validity
Not Before: Jan 1 04:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c39b3130b101f7968575feb2b78905a4dee6a8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7b:67:c8:e9:3b:0b:dc:44:1a:7a:1e:da:97:
29:d2:48:85:42:58:49:ab:b8:9f:d6:f0:e4:91:57:
99:7c:0a:77:59:6d:f8:62:85:fc:cf:26:35:0c:d9:
9f:99:97:b4:2e:63:34:6b:43:43:3a:3e:f7:19:2b:
e6:24:ee:00:1c:5e:aa:b9:ad:ec:69:bb:ec:50:be:
65:55:07:e0:66:dc:84:b2:93:14:58:2f:88:ad:83:
3e:33:b3:6b:93:50:87:0b:2c:0d:d1:2f:f0:e0:91:
b9:ad:15:ab:bd:25:f7:5e:9f:46:18:23:6e:d8:fb:
47:66:8f:93:0d:db:76:69:f7:a1:77:2f:77:d0:03:
73:84:a2:de:9b:b8:d1:8f:bc:a8:a0:e9:a3:62:c7:
e8:d6:0b:04:47:e0:5f:0f:ee:78:70:af:45:94:09:
72:fd:04:2e:1a:6f:ed:39:8e:50:f7:6a:da:28:52:
d3:f2:d7:31:cd:92:0f:02:8f:ff:aa:b9:2c:37:d2:
6a:35:dd:6b:04:2d:27:4b:1d:64:16:aa:2e:c2:66:
89:99:c6:95:a8:76:42:3e:14:d0:77:b4:40:68:03:
91:85:07:7b:5e:8e:cf:9c:bb:e7:77:7d:38:c1:84:
e4:ea:95:da:22:ef:b0:61:9f:46:27:9c:d1:07:d7:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9B:31:30:B1:01:F7:96:85:75:FE:B2:B7:89:05:A4:DE:E6:A8:A9
X509v3 Authority Key Identifier:
keyid:9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/w5sxMLEB95aFdf6yt4kFpN7mqKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.60.0/22
IPv6:
2a06:1740::/29
Signature Algorithm: sha256WithRSAEncryption
41:75:e9:ff:ae:53:cb:b5:0e:9e:ab:6f:31:a0:40:37:2b:b3:
3c:ca:e0:35:3e:fd:30:25:2f:c3:73:0c:02:bc:e4:ec:9c:98:
6b:b3:c1:20:a3:b3:4b:04:1c:a2:dc:f2:9c:73:c5:cf:d4:48:
4b:2c:54:af:bb:f9:4f:3f:0b:5f:0c:dc:86:8a:86:36:f0:b2:
77:1e:d8:99:d6:85:df:43:be:14:d3:02:39:c4:da:60:c3:0b:
d5:ef:d9:fa:fe:99:ca:cc:b0:fe:60:2e:60:af:41:b5:53:e7:
70:86:3b:22:b7:39:d2:c9:24:9f:fd:89:74:99:99:96:5e:a5:
79:f2:79:2e:51:cc:7b:c0:87:85:f8:75:f5:c8:db:52:cf:60:
1f:92:5a:16:26:d2:1a:14:4c:64:69:54:9a:f9:19:af:a6:9f:
46:f6:44:e2:b4:d4:32:db:5e:19:ac:fd:b2:d1:d4:cc:3d:69:
f1:15:5e:4a:b8:ac:f5:04:7e:6f:41:9d:b7:d2:ad:2d:8d:1c:
8e:8d:3a:9c:0a:dc:28:b8:49:e4:3d:26:e8:5c:1c:9a:0c:6e:
8c:70:74:8b:c9:ed:50:d2:c5:05:1a:ac:44:db:40:6c:8c:39:
6c:5c:1a:a6:be:eb:60:93:53:5f:7f:d9:60:a8:9f:aa:90:66:
92:62:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:39 2024 by rpki-client on console-fra.rpki-client.org