Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/wQpDHsOW1dFI8JCRFRCEdW9cdSk.roa
File: wQpDHsOW1dFI8JCRFRCEdW9cdSk.roa (raw, json)
Hash identifier: NMS2hIuMVl5nnCTy0jGnpOmhZaTEQAh29t+0C+Emrgk=
Subject key identifier: C1:0A:43:1E:C3:96:D5:D1:48:F0:90:91:15:10:84:75:6F:5C:75:29
Certificate issuer: /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial: 018570799AD9A3F8585FAC1B9982F2A2302E
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/wQpDHsOW1dFI8JCRFRCEdW9cdSk.roa
Signing time: Mon 02 Jan 2023 03:14:55 +0000
ROA not before: Mon 02 Jan 2023 03:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206283
IP address blocks: 185.123.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:9a:d9:a3:f8:58:5f:ac:1b:99:82:f2:a2:30:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Validity
Not Before: Jan 2 03:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c10a431ec396d5d148f09091151084756f5c7529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:24:1c:ae:ae:ff:b1:83:fd:88:72:2a:8a:48:
72:a9:55:5a:b6:82:20:06:17:f7:49:ed:9d:d3:97:
1e:35:e3:29:c9:e4:c7:39:0f:74:8f:05:f9:49:4a:
99:08:e8:82:2f:51:40:8f:07:f7:9b:a0:ea:c8:8f:
f0:42:c8:3a:af:a7:28:01:78:0d:c5:67:5a:52:61:
80:21:b0:ad:2f:94:25:90:14:59:62:41:7c:6d:1e:
13:75:7e:9a:36:b1:8e:95:64:93:40:eb:c4:ad:23:
7b:2c:10:52:23:1c:a5:b2:d1:c6:43:be:4d:fa:32:
27:2f:0e:bf:42:05:28:b7:e2:f1:50:ad:08:61:48:
c3:99:0c:40:b8:95:95:32:de:96:72:13:cc:6f:fa:
ca:06:9d:b4:9f:f2:f1:81:85:04:ba:85:07:f5:79:
49:3a:bf:15:69:7f:16:1e:67:48:f4:e5:47:69:d9:
f8:85:a1:f7:6b:86:be:fb:b1:49:00:9a:28:5c:8f:
c9:cd:f4:b3:c9:2f:c2:80:7a:5e:c3:62:e2:63:6f:
7a:5c:73:0a:9c:6f:3d:1c:7b:5d:10:98:5f:21:71:
f6:41:05:19:0c:d5:98:5c:59:44:18:12:b8:56:53:
c1:62:0c:c3:26:4e:44:ea:25:ef:13:65:76:c8:01:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0A:43:1E:C3:96:D5:D1:48:F0:90:91:15:10:84:75:6F:5C:75:29
X509v3 Authority Key Identifier:
keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/wQpDHsOW1dFI8JCRFRCEdW9cdSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7f:54:95:29:0a:6f:06:bc:88:d5:b4:c0:0d:2a:85:c7:67:
ea:30:c0:0a:cd:22:4a:bf:71:96:49:b1:d3:84:48:f7:ce:89:
64:ff:35:b7:e1:53:57:8d:54:70:f3:7d:87:b4:13:66:89:3c:
33:7f:19:4f:ab:7c:81:e7:d8:80:44:84:13:5b:ad:23:94:15:
2e:89:8d:83:dd:f6:51:f2:bb:28:c1:c9:99:d8:d0:e2:f1:7d:
be:4b:01:9b:66:8c:80:64:10:ef:1d:e7:64:72:0e:0c:1e:2a:
1d:d1:c6:f7:e0:66:6d:de:b6:36:50:b6:4e:ec:b8:76:4b:7e:
60:f3:94:05:70:ce:bc:df:1c:93:78:d6:ee:42:a3:25:61:67:
0d:4d:59:26:ec:7c:db:f3:c4:24:cc:9c:20:28:ac:e9:b9:85:
2e:80:08:7c:73:00:07:8e:b5:b5:38:bb:5b:8d:22:0a:23:24:
bd:f4:8c:84:4f:be:ea:21:d3:84:40:3c:45:5c:27:ea:5b:35:
de:ce:ee:d4:f9:07:cf:e4:0a:a2:a3:04:44:5b:17:7b:f2:d7:
33:12:be:ab:0f:68:7b:96:39:cb:d4:a3:0f:8e:15:ab:b5:c9:
d0:9a:41:71:ad:57:69:12:ae:1a:c6:87:91:5f:f7:45:14:e3:
87:b2:e3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:40 2024 by rpki-client on console-fra.rpki-client.org