Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/W9JBZDsfIX9SFTlItU6SMuZw-DM.roa
File: W9JBZDsfIX9SFTlItU6SMuZw-DM.roa (raw, json)
Hash identifier: 2y+TjZRi+wbWShEIUfZX/K94VUV3tr2Z1Kx/8/Y7oxg=
Subject key identifier: 5B:D2:41:64:3B:1F:21:7F:52:15:39:48:B5:4E:92:32:E6:70:F8:33
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 0185728C862316320E0E5092EB4B36513776
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/W9JBZDsfIX9SFTlItU6SMuZw-DM.roa
Signing time: Mon 02 Jan 2023 12:54:50 +0000
ROA not before: Mon 02 Jan 2023 12:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39892
IP address blocks: 185.79.196.0/23 maxlen: 23
185.79.196.0/24 maxlen: 24
185.79.197.0/24 maxlen: 24
185.79.198.0/24 maxlen: 24
185.79.198.0/23 maxlen: 23
185.79.199.0/24 maxlen: 24
2a05:7780:105::/48 maxlen: 48
2a05:7782::/32 maxlen: 32
2a05:7780::/32 maxlen: 32
2a05:7783::/32 maxlen: 32
2a05:7781::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:86:23:16:32:0e:0e:50:92:eb:4b:36:51:37:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: Jan 2 12:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bd241643b1f217f52153948b54e9232e670f833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:fc:07:20:c2:59:78:bb:13:c7:9c:a3:ea:
50:ef:4d:8a:6e:80:a7:60:07:ba:cf:ef:b8:41:e4:
5c:6f:d5:b9:aa:70:29:9c:1e:e3:27:cb:24:98:26:
bc:3d:ad:e9:07:0a:87:64:24:a2:67:96:2d:09:e1:
9b:3a:5b:14:17:50:fc:8a:9f:8d:b7:73:e1:2c:e6:
56:ea:99:8c:eb:8f:95:89:42:25:60:e1:cf:8c:4a:
0b:61:35:66:38:aa:4b:be:a7:8f:15:13:f3:f2:a2:
fd:ea:3c:04:cc:9a:69:e2:52:fe:81:89:35:cd:dd:
b9:89:11:f5:48:d7:3d:5f:f6:f8:b5:cb:c9:e1:e9:
f9:23:ed:59:c7:e2:93:df:f7:bd:59:92:12:50:5b:
dd:2c:9b:8f:0f:1f:23:15:ae:76:42:5a:07:ca:86:
5f:ef:ac:7f:cb:a2:05:a8:99:ab:59:64:e1:b9:73:
3e:bb:6f:e2:9a:82:72:66:53:f7:a9:0f:aa:3a:ba:
da:29:b3:75:d8:68:64:32:d6:1c:a3:2b:98:af:5c:
e9:fb:33:3b:a0:cd:c2:71:d3:a2:93:24:57:c6:04:
00:91:e6:ce:15:28:93:6d:ef:01:b1:a8:18:41:d2:
db:88:d1:c4:ad:17:97:71:14:23:75:99:77:1f:1c:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D2:41:64:3B:1F:21:7F:52:15:39:48:B5:4E:92:32:E6:70:F8:33
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/W9JBZDsfIX9SFTlItU6SMuZw-DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.196.0/22
IPv6:
2a05:7780::/30
Signature Algorithm: sha256WithRSAEncryption
47:88:d8:40:20:5e:d5:4d:2d:be:49:5d:08:11:c1:57:58:b8:
02:b7:5b:7b:17:c1:31:ee:6d:05:dd:2a:e3:3f:75:3a:d1:ad:
b3:13:82:dd:d8:78:48:67:66:a5:61:5b:e8:71:9c:a7:32:10:
7e:ab:5e:0a:7a:44:df:e5:73:60:03:01:2a:6f:87:e9:a2:31:
78:65:7c:86:d3:92:84:71:e1:6c:13:d8:43:0c:b6:e7:23:64:
19:3c:8f:bf:91:e9:73:3b:c5:b6:40:64:64:f7:c8:7c:59:2d:
fd:e7:c7:f5:c7:36:c0:09:81:35:a3:0a:68:34:66:df:fb:12:
85:fb:55:d9:11:6a:a3:b7:59:4b:ec:a0:23:e3:4c:29:8f:10:
11:36:65:74:ae:5c:2b:f5:d4:21:54:95:d5:b5:a3:18:b4:f6:
4c:4d:0a:12:75:e5:89:4e:fb:d2:35:26:a1:d7:dd:42:0c:a5:
08:ba:5d:59:ff:b6:89:00:5e:f0:2e:46:6e:70:13:4e:d5:a0:
ae:68:9c:54:14:bd:8f:2b:6d:d3:6e:7f:2d:56:4b:11:37:bd:
e5:f5:2c:e4:4e:60:b8:cf:b1:4f:9c:c8:d0:a0:7a:3f:9b:e2:
b2:d9:3a:52:0a:cd:f3:dc:73:4b:78:8e:fb:d2:52:b8:79:6c:
a2:70:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:48 2024 by rpki-client on console-ams.rpki-client.org