Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/dnieWAyTBlANzLLn2arLNNMUL28.roa
File: dnieWAyTBlANzLLn2arLNNMUL28.roa (raw, json)
Hash identifier: sw2AykTzIpvCVFPdsigEeqDmY2R2VKfj5lBpuaXHiKc=
Subject key identifier: 76:78:9E:58:0C:93:06:50:0D:CC:B2:E7:D9:AA:CB:34:D3:14:2F:6F
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01856CF85A371F973C67B8D5D0A1CB0029BD
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/dnieWAyTBlANzLLn2arLNNMUL28.roa
Signing time: Sun 01 Jan 2023 10:54:53 +0000
ROA not before: Sun 01 Jan 2023 10:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199048
IP address blocks: 94.72.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:5a:37:1f:97:3c:67:b8:d5:d0:a1:cb:00:29:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 10:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76789e580c9306500dccb2e7d9aacb34d3142f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:11:4f:6a:e3:39:21:2c:05:4c:99:52:74:
69:f9:f5:86:0c:74:91:09:93:a8:2e:4d:76:50:4e:
53:95:ec:7c:23:8a:31:47:bf:71:ae:19:ea:67:71:
35:df:62:b5:97:e1:34:6c:13:63:4e:3b:fa:e5:f2:
9d:8c:9c:b8:b7:e5:b0:19:10:f9:45:69:ef:45:8d:
b0:c1:90:15:93:8b:ad:e4:36:31:95:1d:57:cb:0e:
ea:98:35:46:54:c1:b5:36:1b:23:2e:ef:21:61:75:
0c:e8:ad:4c:4b:8a:06:63:89:12:12:8e:2c:10:72:
5e:80:76:2e:c8:4a:4a:17:08:5b:a5:21:fb:f4:f0:
4a:c5:5f:34:f7:d5:ec:a2:00:dd:72:21:f5:15:58:
da:eb:ae:b8:ab:82:69:ca:31:7b:8b:ee:49:bc:5d:
89:94:e5:da:da:a3:b6:d0:36:6b:a3:2a:57:d4:b0:
dc:98:c8:4c:cc:ee:bb:e4:d5:b8:bd:77:d2:5e:a0:
94:59:81:3d:d2:6a:da:b3:53:bb:ea:ea:1c:f7:1c:
3a:4d:33:d7:57:8d:cc:75:93:48:20:84:24:a3:4d:
94:7f:6b:ec:1c:83:c6:a8:4e:33:6e:44:7a:09:8c:
42:6b:44:d6:e9:60:ee:2c:00:14:76:7c:5a:f0:34:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:78:9E:58:0C:93:06:50:0D:CC:B2:E7:D9:AA:CB:34:D3:14:2F:6F
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/dnieWAyTBlANzLLn2arLNNMUL28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.146.0/23
Signature Algorithm: sha256WithRSAEncryption
51:bd:72:ce:b5:b4:dd:cb:5e:ce:b0:cd:d0:9e:ed:00:d2:0b:
01:48:53:24:0d:3d:7d:09:34:cf:76:59:be:b8:c2:f4:1d:3d:
9e:32:a5:77:76:b8:75:e7:b1:a8:52:ad:44:8a:40:f2:ec:00:
1e:89:73:26:68:c2:b3:f2:7f:32:5e:12:cc:0f:e8:c5:06:5d:
87:89:aa:5f:3f:b9:73:0d:62:f4:a9:cd:24:29:b7:6d:98:11:
eb:af:4e:b9:9a:a4:a5:d3:54:8d:34:7e:6c:cf:f5:ef:59:3b:
a8:a4:8e:3d:d0:c6:02:05:19:b3:02:1e:6b:e9:bd:20:1f:03:
54:94:ef:80:25:2b:65:19:b3:a2:07:39:4f:03:e4:4c:31:be:
e8:0e:2b:d1:17:bf:5e:f4:bd:40:51:50:79:8f:c8:35:be:19:
3e:51:b8:5f:be:9f:96:c7:e9:b8:ba:52:8d:6d:2c:05:5b:ba:
b0:5e:ec:4e:11:42:af:af:de:da:13:4b:ac:18:a3:84:86:33:
26:5d:74:25:5f:c6:c3:fa:2c:d2:4b:e3:22:5c:67:05:b3:0c:
10:91:01:76:34:b2:14:a2:b1:87:9a:65:85:f4:02:8a:0e:3b:
b6:47:7f:f4:a8:e3:ef:b3:e4:e3:8b:04:a2:12:bc:0a:0c:90:
26:00:3b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:12 2024 by rpki-client on console-ams.rpki-client.org