Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/vwtDJiatr-ugPE-9NSxIBWWOWWg.roa
File: vwtDJiatr-ugPE-9NSxIBWWOWWg.roa (raw, json)
Hash identifier: sNbCEohgK4lABEDYrZ70mxbNw2h6ke5Jr//noLDoKd0=
Subject key identifier: BF:0B:43:26:26:AD:AF:EB:A0:3C:4F:BD:35:2C:48:05:65:8E:59:68
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 01856D5D0DA6DE226038ABC1FCB6E079D76E
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/vwtDJiatr-ugPE-9NSxIBWWOWWg.roa
Signing time: Sun 01 Jan 2023 12:44:52 +0000
ROA not before: Sun 01 Jan 2023 12:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51984
IP address blocks: 185.182.152.0/24 maxlen: 24
185.182.155.0/24 maxlen: 24
185.182.154.0/24 maxlen: 24
185.182.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 13:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:0d:a6:de:22:60:38:ab:c1:fc:b6:e0:79:d7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Jan 1 12:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf0b432626adafeba03c4fbd352c4805658e5968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:13:e1:89:69:d8:1a:50:ae:63:2d:1f:b9:
f5:cc:8d:79:05:4a:29:e0:1a:ab:62:32:2d:2b:2c:
6e:87:dd:a2:10:cd:d4:8f:d1:ce:77:e4:fd:22:4d:
9b:35:48:ef:43:be:41:7b:80:cf:d4:c4:07:29:b9:
a4:98:1a:6f:f8:3d:0a:38:d3:7b:c6:fa:10:95:a7:
a3:28:63:7b:b7:b5:7c:20:ec:17:86:c2:7e:0a:d3:
0f:0b:73:28:57:72:d0:96:6d:9e:55:05:21:95:6e:
60:d5:a0:c5:35:a0:41:5e:28:26:a8:9f:ce:f2:a9:
b5:14:a6:4e:22:48:ca:7e:54:f0:d7:58:b4:82:07:
00:40:4d:eb:8e:28:d2:d1:b3:ad:7c:da:65:66:ab:
a1:e0:e2:0b:67:90:5e:49:67:62:6a:02:f9:bd:f5:
36:6b:50:e5:10:55:2a:48:81:51:cd:bc:c4:52:3e:
03:6f:5c:7e:c8:74:dd:ae:0a:f1:91:52:ef:dc:c4:
91:68:ff:cb:d7:06:b5:42:10:cb:61:10:f8:e5:00:
6c:c4:3d:1b:5e:bc:1d:ed:2f:0b:5c:d0:09:97:46:
87:3f:3c:f5:c5:07:88:65:80:24:1a:3d:d0:e4:0b:
17:27:66:22:31:7b:90:14:44:a9:78:7e:c9:a1:e5:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0B:43:26:26:AD:AF:EB:A0:3C:4F:BD:35:2C:48:05:65:8E:59:68
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/vwtDJiatr-ugPE-9NSxIBWWOWWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.152.0/22
Signature Algorithm: sha256WithRSAEncryption
43:96:16:55:27:cb:47:9d:93:05:92:55:b0:36:1f:21:ab:03:
8e:5b:60:d1:b2:60:c9:bf:81:78:21:46:ba:05:0a:fc:7c:c1:
57:21:85:ba:1a:7a:02:57:79:a5:13:c1:6c:e7:c2:85:b7:62:
ad:02:70:25:aa:0c:96:b0:a2:4a:74:3e:93:eb:3f:a5:2a:85:
60:88:01:20:36:55:87:ab:6c:c1:2e:86:b6:c2:61:17:8d:cf:
ec:ac:06:47:eb:9e:d6:86:12:29:d7:0b:21:b8:b4:64:76:2e:
9c:3a:b9:7b:39:53:66:a9:e1:f6:10:d5:91:89:99:7a:34:5b:
2f:af:46:6b:4b:67:21:3a:e0:89:d9:3a:37:76:02:8f:bc:37:
f5:91:6a:cd:74:df:c5:f1:18:13:c1:80:b4:16:c3:78:6f:00:
84:9c:c2:15:56:cb:58:99:31:7d:0f:29:83:a1:a9:d1:41:0b:
aa:29:ec:d6:95:82:0f:27:68:a0:2b:52:4f:38:82:bd:8a:0c:
8c:8d:5a:a2:82:61:57:dd:9e:05:b3:fb:ee:b2:2b:e4:8b:d1:
a1:2b:05:2c:df:3b:f6:5a:79:3c:60:86:12:e9:df:a9:fa:85:
0b:61:fd:8c:a0:91:87:68:80:e4:20:18:c8:b7:c4:82:a1:da:
d6:c9:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:22 2024 by rpki-client on console-fra.rpki-client.org