Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/0Dy7TdHTg747iCV3WzWUkjTpPdE.roa
File: 0Dy7TdHTg747iCV3WzWUkjTpPdE.roa (raw, json)
Hash identifier: LKPccobLXQT5W6Af+iLkKPYdxKrKH7Mw493V4PhPJQs=
Subject key identifier: D0:3C:BB:4D:D1:D3:83:BE:3B:88:25:77:5B:35:94:92:34:E9:3D:D1
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01856CF853B26D4F39A348BD5284BA8E2841
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/0Dy7TdHTg747iCV3WzWUkjTpPdE.roa
Signing time: Sun 01 Jan 2023 10:54:51 +0000
ROA not before: Sun 01 Jan 2023 10:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24940
IP address blocks: 94.72.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:53:b2:6d:4f:39:a3:48:bd:52:84:ba:8e:28:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 10:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d03cbb4dd1d383be3b8825775b35949234e93dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:fd:a9:1d:91:5c:d5:6a:dd:63:27:c1:a1:
4b:8a:46:06:81:13:89:37:59:54:8d:64:38:88:3d:
86:28:91:b0:07:97:c1:28:e3:53:9a:63:d5:d8:f1:
05:7f:41:3f:84:27:db:bc:0c:a2:61:c4:79:24:30:
33:71:f7:d7:1a:96:76:f9:df:25:5c:ca:42:21:ef:
8a:05:d1:f1:8a:af:df:97:57:73:d9:0d:30:64:98:
f4:f8:e8:15:81:86:32:70:a5:04:65:9c:fd:52:a4:
4d:59:84:8b:2d:c4:e1:13:d8:26:97:bc:9d:45:4d:
b9:c1:56:7c:7e:a5:26:90:f5:2b:88:14:dc:cf:e3:
c7:ed:d2:29:65:f2:44:46:11:83:f5:7b:4e:a8:55:
1d:30:e8:b8:1f:58:d0:5f:f6:02:b6:2b:af:3a:ea:
2a:35:19:8b:f3:25:67:a8:e3:13:e3:71:91:56:9f:
c7:f0:40:78:6b:13:4e:0d:21:39:ec:b6:fa:ff:08:
88:04:f9:40:d8:8b:ab:4c:97:3e:4f:65:44:85:fe:
0a:79:c5:94:37:2a:f8:8a:13:3f:6f:0a:eb:bc:be:
dc:8b:15:35:e4:91:31:eb:ec:c3:c5:d5:83:0a:32:
c0:27:2d:51:98:86:fc:08:25:50:5f:0f:6d:0d:3c:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3C:BB:4D:D1:D3:83:BE:3B:88:25:77:5B:35:94:92:34:E9:3D:D1
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/0Dy7TdHTg747iCV3WzWUkjTpPdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.141.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ac:5a:af:3a:ec:97:c3:5b:cf:95:bd:f9:a4:3c:c5:0e:d0:
03:a5:c8:b2:d8:37:db:1c:82:b9:5d:c2:a2:2c:fe:ab:f5:61:
f8:24:08:b3:27:e4:7d:f6:93:dd:eb:79:45:79:99:99:01:b4:
21:0d:80:36:7e:59:b8:9e:a6:80:7f:1b:5b:fe:ab:56:31:ae:
f1:c7:91:eb:ba:af:bb:4e:b6:2d:53:e6:77:a3:69:e5:3b:c5:
57:be:8d:96:b0:26:9d:55:3f:fd:24:d6:96:a9:51:5f:ea:cc:
dd:da:39:47:16:8d:82:88:2e:d6:14:66:71:e4:01:2b:6d:26:
3a:c7:56:01:74:f9:5e:a1:df:40:7f:70:21:18:0d:80:62:0c:
08:74:6f:75:07:28:23:d3:52:16:d3:6c:c3:00:00:5e:f2:3a:
41:30:aa:f3:0e:7e:fd:9d:08:ed:b4:0f:c2:ca:31:83:1e:73:
60:7a:bc:06:df:e2:f7:6a:bd:89:bf:14:41:a5:5f:f8:29:85:
8d:67:55:80:b7:83:bf:4e:fa:a5:55:0b:be:98:2a:c9:8a:85:
59:3a:dd:12:ab:d2:d9:61:ac:6a:5c:85:5a:d7:6e:e7:45:a9:
0a:90:ea:5d:47:89:e2:dd:05:9e:67:86:86:17:68:6b:0b:bd:
e4:67:ae:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org