Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/o--X8U0j5ZpotLrvePMf-4WVWcw.roa
File: o--X8U0j5ZpotLrvePMf-4WVWcw.roa (raw, json)
Hash identifier: wn/zaBvs/bTRwklXM8PAMQgiwORcQrz4PCDT3iNyOG8=
Subject key identifier: A3:EF:97:F1:4D:23:E5:9A:68:B4:BA:EF:78:F3:1F:FB:85:95:59:CC
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 018570FBDA4BF5F880FCE64FDEB47E5D1EFF
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/o--X8U0j5ZpotLrvePMf-4WVWcw.roa
Signing time: Mon 02 Jan 2023 05:37:11 +0000
ROA not before: Mon 02 Jan 2023 05:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212978
IP address blocks: 185.50.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:da:4b:f5:f8:80:fc:e6:4f:de:b4:7e:5d:1e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Jan 2 05:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3ef97f14d23e59a68b4baef78f31ffb859559cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:61:8a:67:72:25:f1:60:1b:ea:0c:49:dd:
c1:bd:22:ba:fc:4a:42:63:c6:f6:be:ca:05:cf:15:
df:b7:93:fa:9c:42:6b:fc:52:4e:a9:45:ad:ba:1b:
33:4d:26:01:4c:72:fb:ac:53:94:09:be:f3:f6:69:
48:68:83:06:77:46:4b:ce:ee:31:fa:d9:24:1d:4f:
d0:81:f9:15:e9:a5:6a:ac:67:65:4c:fb:f4:e2:9c:
73:34:a4:6e:31:66:a1:0b:2a:27:7e:70:97:5b:c3:
52:12:44:fb:d0:dc:c5:d8:41:70:28:4f:35:8e:63:
4a:cb:b9:8b:64:82:d5:61:52:c9:d1:ac:4a:35:22:
55:fa:27:07:72:63:ab:44:2d:92:c0:0b:22:e1:d2:
70:fa:df:30:80:05:62:d3:f0:fa:a0:ca:af:cd:a4:
e1:b4:27:7c:31:66:8c:d7:7c:eb:ba:c6:ad:ab:7e:
24:f3:b6:b2:57:96:22:6f:a7:95:46:94:e6:37:af:
66:16:e7:e3:c1:69:57:f0:6b:3f:39:ea:27:a4:e0:
d4:cd:8b:a4:99:dc:a0:25:15:1c:34:88:4b:43:81:
16:10:a1:44:d4:5d:66:12:c5:78:de:42:64:be:7d:
58:79:34:da:f7:49:0d:d6:df:8d:bf:0e:54:d4:3e:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EF:97:F1:4D:23:E5:9A:68:B4:BA:EF:78:F3:1F:FB:85:95:59:CC
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/o--X8U0j5ZpotLrvePMf-4WVWcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.36.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ae:6d:f9:5d:b0:71:21:7e:b1:c7:7e:6b:ae:5a:3f:26:69:
1a:d4:91:16:3d:21:8d:ba:74:92:db:4f:73:52:4d:56:40:df:
5d:ea:3f:20:30:2d:2e:65:00:36:10:58:a1:e1:ee:ea:c1:84:
40:8c:99:89:a5:7d:a7:1b:21:43:c5:2b:74:d5:c6:e0:f9:58:
20:27:a9:2a:a2:cd:39:c9:2a:2b:b7:99:20:88:78:9c:d7:27:
6b:1f:ef:6f:e6:84:8f:32:19:0b:77:20:57:91:00:1c:7d:d3:
c7:76:4e:e8:ad:70:e5:b3:d3:9a:a7:e8:9d:c4:f6:46:74:9b:
81:d7:48:f0:56:70:74:9c:e8:1a:7d:c8:24:d2:93:e4:bd:af:
cc:55:d5:c3:cd:2c:67:7c:47:36:dd:74:79:fc:3b:c3:d0:63:
37:b4:8e:d8:5c:b2:7b:b7:a0:3c:4c:98:14:9f:20:b8:23:e7:
f8:13:d0:06:6d:e1:b1:ff:be:4e:e9:47:d7:d4:7c:20:c3:94:
aa:55:74:52:64:71:28:3d:a7:4f:0a:69:e2:ec:d6:5c:c1:6d:
5a:a5:5d:1d:f6:ba:f7:59:56:d8:d4:7a:c1:05:ce:ea:6e:f6:
2c:fb:5f:01:e3:bc:33:b9:16:2b:31:26:94:70:05:18:6b:6f:
c9:1f:df:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:24 2024 by rpki-client on console-ams.rpki-client.org