Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/wV3NoDjcSGFsWgVRiKl-3Di8cRE.roa
File: wV3NoDjcSGFsWgVRiKl-3Di8cRE.roa (raw, json)
Hash identifier: 8xGGdT1QNbOZP1n5lp4Dts0Kl0kd2msHmhOC1FL87iw=
Subject key identifier: C1:5D:CD:A0:38:DC:48:61:6C:5A:05:51:88:A9:7E:DC:38:BC:71:11
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 01856FF030A7E32B563A44F1175891B6EEF8
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/wV3NoDjcSGFsWgVRiKl-3Di8cRE.roa
Signing time: Mon 02 Jan 2023 00:44:50 +0000
ROA not before: Mon 02 Jan 2023 00:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43853
IP address blocks: 185.183.56.0/22 maxlen: 22
2a0b:680::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 04 Sep 2023 07:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:30:a7:e3:2b:56:3a:44:f1:17:58:91:b6:ee:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Jan 2 00:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c15dcda038dc48616c5a055188a97edc38bc7111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b0:49:06:c8:67:85:7d:1b:9f:8a:6c:8d:7a:
d7:65:d0:5d:a1:c6:09:d2:95:c1:de:ae:62:e2:fe:
78:bd:c6:be:d8:68:c2:76:87:6b:75:5b:1f:c6:c1:
f2:41:f0:8a:26:10:6d:f7:97:f0:b3:d5:ac:04:71:
84:8a:44:09:8a:26:29:67:27:56:bb:04:b5:cb:e7:
3d:85:df:1f:64:51:c0:40:89:d6:dc:45:a8:e8:15:
ea:ae:c4:2e:48:35:40:9e:e8:98:58:74:3b:9c:9d:
c7:3f:82:5c:e2:50:87:48:9c:7d:2b:35:69:b6:e4:
5f:4c:e9:01:45:fa:75:3b:2a:98:df:87:08:55:c0:
36:15:ca:ad:7d:d9:96:10:05:19:d3:2d:d9:ca:10:
9b:63:6b:04:2c:61:e5:7f:ae:ed:4b:11:53:3d:e7:
f3:64:2a:5f:4c:b2:7e:51:86:cc:6f:75:c4:fa:40:
e2:41:df:69:28:5c:58:c5:b9:63:6d:ab:d4:60:13:
45:ad:6e:32:46:ce:b6:17:a1:59:d8:cf:00:d5:8e:
52:0f:9d:87:2a:6e:b3:21:a6:8e:f0:f4:e4:5c:85:
b1:21:1b:62:17:fd:d8:a2:3a:b0:8b:2e:9d:0d:08:
77:e6:86:12:20:32:19:e9:0c:d9:f0:19:32:50:60:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5D:CD:A0:38:DC:48:61:6C:5A:05:51:88:A9:7E:DC:38:BC:71:11
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/wV3NoDjcSGFsWgVRiKl-3Di8cRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.56.0/22
IPv6:
2a0b:680::/29
Signature Algorithm: sha256WithRSAEncryption
00:65:d6:41:ee:e7:f4:92:df:81:d2:4d:55:de:14:5d:57:f8:
92:fe:cc:39:f9:29:96:aa:8e:36:94:e9:b1:e7:4e:21:83:ac:
78:10:77:8c:52:b8:88:21:58:2e:70:c3:c3:5c:9a:bb:7c:05:
30:45:be:55:d4:d7:b7:34:59:16:91:75:6c:e2:c7:b9:7b:94:
21:fb:c3:ab:6a:d1:c6:88:d7:ee:2d:e7:52:aa:ec:47:27:0a:
fb:a1:09:cc:56:67:ef:f7:2e:6b:f4:e2:b4:04:36:0e:d8:5d:
7f:ea:64:01:36:ca:4a:2b:4e:c7:23:e9:f1:bf:ca:1b:ad:a0:
a4:75:67:1b:2b:a2:e6:08:fd:60:19:80:33:46:89:96:10:ce:
50:4f:62:b4:09:1a:20:b1:08:e1:40:e9:bd:79:9e:71:31:83:
28:4c:6e:ba:ef:45:e4:3f:3a:43:78:e7:a9:ba:b6:28:db:18:
a9:17:a3:f3:17:3b:e6:5b:e4:8b:e9:5d:8d:23:89:ff:00:e6:
48:7e:1b:4e:ed:ac:3d:b1:9c:cf:b3:dd:66:e7:fa:02:34:44:
ac:90:f4:aa:b3:49:18:0d:52:9e:6e:e0:14:25:d7:87:55:d7:
02:55:96:bd:40:bd:84:ec:25:50:71:a6:7f:34:99:31:72:46:
dc:08:d3:db
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVv8DCn4ytWOkTxF1iRtu74MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2FiNzE4YjRhY2IzYTY3OWM1ZGI4ZmNlZTcyOTRlZDZi
ZTJiZDAwHhcNMjMwMTAyMDA0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTVkY2RhMDM4ZGM0ODYxNmM1YTA1NTE4OGE5N2VkYzM4YmM3MTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7BJBshnhX0bn4psjXrXZdBdocYJ
0pXB3q5i4v54vca+2GjCdodrdVsfxsHyQfCKJhBt95fws9WsBHGEikQJiiYpZydW
uwS1y+c9hd8fZFHAQInW3EWo6BXqrsQuSDVAnuiYWHQ7nJ3HP4Jc4lCHSJx9KzVp
tuRfTOkBRfp1OyqY34cIVcA2FcqtfdmWEAUZ0y3ZyhCbY2sELGHlf67tSxFTPefz
ZCpfTLJ+UYbMb3XE+kDiQd9pKFxYxbljbavUYBNFrW4yRs62F6FZ2M8A1Y5SD52H
Km6zIaaO8PTkXIWxIRtiF/3Yojqwiy6dDQh35oYSIDIZ6QzZ8BkyUGCW8wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMFdzaA43EhhbFoFUYipftw4vHERMB8GA1UdIwQY
MBaAFLV6txi0rLOmecXbj87nKU7WvivQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYt
YzcwMGVhMDNjMjI3LzEvd1YzTm9EamNTR0ZzV2dWUmlLbC0zRGk4Y1JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYtYzcwMGVhMDNjMjI3
LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubc4MA0E
AgACMAcDBQMqCwaAMA0GCSqGSIb3DQEBCwUAA4IBAQAAZdZB7uf0kt+B0k1V3hRd
V/iS/sw5+SmWqo42lOmx504hg6x4EHeMUriIIVgucMPDXJq7fAUwRb5V1Ne3NFkW
kXVs4se5e5Qh+8OratHGiNfuLedSquxHJwr7oQnMVmfv9y5r9OK0BDYO2F1/6mQB
NspKK07HI+nxv8obraCkdWcbK6LmCP1gGYAzRomWEM5QT2K0CRogsQjhQOm9eZ5x
MYMoTG6670XkPzpDeOepurYo2xipF6PzFzvmW+SL6V2NI4n/AOZIfhtO7aw9sZzP
s91m5/oCNESskPSqs0kYDVKebuAUJdeHVdcCVZa9QL2E7CVQcaZ/NJkxckbcCNPb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:38 2024 by rpki-client on console-ams.rpki-client.org