Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/W_kk9sC9idIgzF24swKW-Z8Sxqo.roa
File: W_kk9sC9idIgzF24swKW-Z8Sxqo.roa (raw, json)
Hash identifier: 5XlfEsGVvoxqOca+TFZqpzYAO43+hjGk+o5e65yrvSA=
Subject key identifier: 5B:F9:24:F6:C0:BD:89:D2:20:CC:5D:B8:B3:02:96:F9:9F:12:C6:AA
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C16A4B885EDF0A76F4ADA49D85BBD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/W_kk9sC9idIgzF24swKW-Z8Sxqo.roa
Signing time: Mon 02 Jan 2023 05:54:55 +0000
ROA not before: Mon 02 Jan 2023 05:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 193.109.85.0/24 maxlen: 24
84.252.72.0/24 maxlen: 24
2a0f:7b81::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Feb 2023 11:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:16:a4:b8:85:ed:f0:a7:6f:4a:da:49:d8:5b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bf924f6c0bd89d220cc5db8b30296f99f12c6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:13:86:db:01:4d:73:59:16:44:fd:3c:50:a4:
4e:7d:8c:14:97:37:7b:ad:d5:ce:53:22:f1:55:35:
6a:34:5a:f9:d3:b8:67:0f:13:4b:f4:81:be:4b:7c:
47:e9:81:98:c7:36:27:20:ab:0c:30:8f:7a:b8:1d:
5e:d0:a3:fb:03:93:17:00:ae:59:f7:82:11:c2:e7:
6d:1a:21:b2:03:a1:10:91:d7:79:fd:25:59:02:00:
5d:c0:f5:24:31:37:91:c7:87:ab:05:1f:d5:4d:f4:
85:b1:24:84:ac:b5:f0:09:66:ee:55:ef:6b:92:15:
f3:f2:69:b4:a4:66:f6:c6:72:e1:d4:89:4e:01:5d:
2a:63:76:4c:eb:4a:26:d3:0b:12:b9:d3:46:bb:26:
97:95:57:78:96:ef:19:7d:b8:42:89:ed:64:ee:2a:
35:c4:8f:01:eb:82:66:91:57:1b:89:f4:50:b0:8e:
b8:c6:88:df:85:15:29:c6:ea:b2:0d:1d:14:76:66:
84:09:06:aa:dd:c0:77:83:32:ef:ca:f1:ba:d7:3f:
3c:21:b0:de:42:bc:4b:a6:11:92:b1:c6:25:a1:3d:
ba:d6:3f:62:01:63:39:79:21:a6:cc:37:f5:9b:3f:
03:53:35:d4:c4:30:68:66:4f:42:25:d8:95:cc:9e:
7e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:24:F6:C0:BD:89:D2:20:CC:5D:B8:B3:02:96:F9:9F:12:C6:AA
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/W_kk9sC9idIgzF24swKW-Z8Sxqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.72.0/24
193.109.85.0/24
IPv6:
2a0f:7b81::/48
Signature Algorithm: sha256WithRSAEncryption
10:22:38:08:00:ab:f1:75:a3:f3:15:df:78:77:5d:66:2b:3a:
34:f7:df:de:b3:07:a7:7b:72:ed:a7:27:1b:0e:04:89:3c:de:
04:15:5b:6d:12:19:92:93:ec:ee:2c:6e:8c:32:08:0d:8d:8c:
b5:b0:99:f5:a2:bf:2a:eb:35:2c:0b:e7:c8:35:00:d4:43:e5:
0e:8e:28:51:0d:18:be:55:23:71:1e:aa:ea:31:f3:ab:db:94:
24:96:8b:1b:e1:cd:97:3b:4f:ce:6d:1b:a3:eb:da:52:ff:0c:
a1:6f:c0:c6:8f:08:8c:07:45:33:97:6d:2d:5f:67:65:d7:be:
eb:f1:32:53:67:32:e6:55:21:d8:93:4a:d5:f7:6c:27:8b:98:
8b:ab:ed:72:e2:04:41:31:93:2f:00:8e:a4:f1:1b:ce:54:78:
ee:87:66:09:33:63:11:c8:ab:7e:38:65:0a:4e:d4:36:d9:33:
d2:02:0f:94:2d:ae:d3:15:35:d3:3d:71:3e:47:b7:e1:a2:a8:
ba:7c:3c:d8:4d:dd:6e:b7:78:77:77:88:4e:73:29:6c:2e:31:
da:9e:f2:62:3e:05:d1:88:07:f2:84:3c:50:02:6f:bd:94:5f:
ef:bd:1d:97:28:f1:e1:37:52:da:11:db:e4:6e:25:c5:63:53:
27:ab:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org