Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/q1jwo9aeYB9y7kyLzwXgIxrfkOM.roa
File: q1jwo9aeYB9y7kyLzwXgIxrfkOM.roa (raw, json)
Hash identifier: Ae4kDXEvPCN2XuK1vxVzU30AnIHFUQKxjLavnY2zUQs=
Subject key identifier: AB:58:F0:A3:D6:9E:60:1F:72:EE:4C:8B:CF:05:E0:23:1A:DF:90:E3
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01856CF8559C906EE356A8D8FBA8B29B09CD
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/q1jwo9aeYB9y7kyLzwXgIxrfkOM.roa
Signing time: Sun 01 Jan 2023 10:54:52 +0000
ROA not before: Sun 01 Jan 2023 10:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39135
IP address blocks: 94.72.156.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:55:9c:90:6e:e3:56:a8:d8:fb:a8:b2:9b:09:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 10:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab58f0a3d69e601f72ee4c8bcf05e0231adf90e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:56:79:72:54:18:f4:e7:67:de:94:1f:7a:
cf:48:0b:d4:e1:54:b5:f8:22:25:b7:2a:56:42:eb:
f2:6b:c7:ab:7d:44:2f:41:f0:d2:49:6f:f6:69:0e:
ba:98:39:12:e8:50:7e:b9:02:5c:d2:3b:ff:bd:58:
0e:27:95:37:30:b4:44:0e:84:3b:d4:ac:d3:36:27:
67:25:91:d7:ad:65:0d:1c:96:52:35:cc:22:51:bf:
17:cf:31:dc:53:9c:f3:8b:f9:b5:7a:a1:24:d8:7d:
96:3b:fd:b8:16:44:9e:48:53:b0:21:ae:4a:67:65:
80:ac:b8:74:75:88:51:d6:ff:ce:c6:8e:ec:b3:ad:
2d:c1:30:40:46:04:d4:a4:f7:ea:e9:3f:aa:c6:f3:
b3:66:a6:b6:db:9e:67:0b:8f:56:be:89:24:cd:a8:
3f:56:a1:a9:66:19:2f:c4:df:81:37:a5:16:27:21:
85:c5:77:aa:30:86:74:6a:96:26:45:49:7a:20:45:
2e:81:c4:c8:06:dd:3c:9c:7c:a7:df:cb:88:f3:63:
e2:2b:a0:05:02:9a:9a:a1:d6:85:42:e3:32:01:29:
f3:8a:aa:75:76:a9:07:fd:0e:e1:be:2f:db:fb:4d:
19:0e:d2:75:14:62:e9:9e:92:f5:5f:65:d6:13:83:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:58:F0:A3:D6:9E:60:1F:72:EE:4C:8B:CF:05:E0:23:1A:DF:90:E3
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/q1jwo9aeYB9y7kyLzwXgIxrfkOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.156.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:62:70:0f:cb:b7:ed:f1:09:b7:ef:79:48:03:73:ae:ce:01:
6e:29:73:8d:aa:46:ba:37:ee:c5:54:d6:0f:eb:63:a9:a6:2f:
24:00:be:78:b8:38:52:e8:1b:4e:d9:ce:19:16:49:e3:e0:66:
1f:14:64:cb:f3:78:8a:cf:c7:c7:61:24:36:9b:cc:f7:ce:e8:
18:79:5f:69:55:87:61:da:ff:67:27:d2:e3:c0:26:00:4f:6b:
cf:42:5e:ce:64:48:36:98:94:b3:d8:3d:62:d4:c8:b1:64:f4:
95:70:9d:12:7e:6e:0b:e6:ff:29:9b:bd:11:4c:46:80:93:d4:
85:46:10:b9:61:3f:04:97:86:4c:72:47:7d:78:a4:9b:6c:33:
df:df:03:12:d2:12:9d:fb:98:23:69:be:a3:cf:02:1a:04:29:
0c:40:61:dd:dc:ce:79:53:e8:b6:fb:13:54:cd:57:fa:41:87:
56:c1:49:a8:d3:c9:03:26:30:50:2c:18:a5:8b:02:f3:3b:2b:
a6:31:ec:e6:73:e8:38:70:c4:64:b7:02:33:7d:53:03:dc:e1:
c1:e5:17:63:84:3d:8b:8f:5f:c1:b9:2b:12:9c:60:58:80:1b:
b7:bd:4f:6f:2c:d7:42:5c:9f:ab:25:a0:ee:4b:57:52:c1:4e:
60:f3:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:15 2024 by rpki-client on console-fra.rpki-client.org