Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/dXOmBwFsA-z9QzQQ20etlf3XG3s.roa
File: dXOmBwFsA-z9QzQQ20etlf3XG3s.roa (raw, json)
Hash identifier: t/6C9DA3XUYVDzvNRAvFa0OhXLzFi9BwPF8TUNNajY4=
Subject key identifier: 75:73:A6:07:01:6C:03:EC:FD:43:34:10:DB:47:AD:95:FD:D7:1B:7B
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01856CF858C1F15B6D67C88D0FC42EC9E55E
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/dXOmBwFsA-z9QzQQ20etlf3XG3s.roa
Signing time: Sun 01 Jan 2023 10:54:53 +0000
ROA not before: Sun 01 Jan 2023 10:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59989
IP address blocks: 94.72.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:58:c1:f1:5b:6d:67:c8:8d:0f:c4:2e:c9:e5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 10:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7573a607016c03ecfd433410db47ad95fdd71b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:43:a3:21:3a:a3:8e:cf:de:7a:d0:28:b3:72:
fb:1a:06:ac:93:ad:3c:99:bd:65:85:25:5e:a7:9d:
85:1e:fa:05:97:b0:6f:07:8a:f9:ae:f9:9a:f6:e7:
7e:6d:4a:27:3a:17:47:f3:c6:92:7a:a7:6a:9a:f9:
59:bd:52:99:9e:56:59:d4:ff:83:47:36:33:6d:9f:
a8:18:78:16:cf:ed:7e:49:24:6c:49:60:e2:90:1b:
b6:b5:15:e4:74:98:68:d8:14:9d:91:52:d1:1c:44:
a7:89:95:84:1e:47:71:41:a7:70:49:fc:97:81:9e:
df:f0:c2:bb:4f:18:69:25:62:42:5e:07:a8:2f:75:
29:22:12:e9:6c:87:8f:4b:b6:50:6a:ac:16:aa:2c:
87:6f:57:f1:05:32:7e:7a:21:bd:48:eb:bf:ae:d4:
a5:2c:11:09:6a:0e:8a:1e:83:17:a3:47:f4:54:dd:
d2:8b:16:ad:8f:ff:5f:b5:67:57:a0:ee:84:7f:6f:
df:38:e5:61:b2:15:cf:25:27:7b:c8:01:c0:d6:77:
bc:12:a0:e9:2f:f6:b7:45:2e:13:79:48:c1:34:51:
1a:ac:c6:00:91:5e:b1:e7:c2:3b:78:02:57:95:a3:
96:96:52:ca:2a:15:19:cc:4b:dc:1f:ef:a7:ac:e4:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:73:A6:07:01:6C:03:EC:FD:43:34:10:DB:47:AD:95:FD:D7:1B:7B
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/dXOmBwFsA-z9QzQQ20etlf3XG3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.152.0/22
Signature Algorithm: sha256WithRSAEncryption
92:84:e6:f2:9a:56:63:af:cb:1c:8f:91:75:e8:88:e8:28:d6:
85:b6:d0:95:2f:35:c4:e6:e7:06:72:a9:ac:ed:8f:cc:ab:7e:
d2:07:81:28:85:3e:fb:12:4c:bf:a2:75:df:49:4f:f4:2f:d2:
12:76:0b:52:c3:96:2c:94:5b:a1:1c:ef:ac:56:4b:e1:5a:7b:
64:44:83:28:6b:da:6a:46:da:8a:e4:8b:68:7c:d8:d9:5e:00:
50:e2:93:6e:3c:c1:ba:c7:f5:e6:e6:d5:0d:84:8a:c9:e6:df:
5e:d1:11:91:42:12:fe:91:2d:e7:85:56:da:28:cb:03:4a:1f:
04:8f:09:b4:80:87:ff:92:48:e3:cd:3c:81:5a:c1:e5:70:73:
54:91:9a:93:d4:e0:b5:35:da:3f:c3:65:0e:99:3c:d8:91:3c:
1c:57:dc:c9:61:58:04:fd:47:54:ba:72:cb:63:7d:c8:24:89:
d5:73:36:c4:5e:ad:00:30:bd:02:15:b9:ac:37:0a:55:6a:82:
34:d9:c3:88:54:e3:32:c5:64:3f:f4:5a:9b:a3:2d:32:9e:10:
d3:10:7e:05:82:fb:ea:66:1e:6f:bf:b8:be:b5:58:a1:57:52:
10:38:e4:39:5a:2f:b3:85:fa:e9:05:27:4e:e3:75:ba:83:8a:
40:15:50:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:15 2024 by rpki-client on console-fra.rpki-client.org