Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/WVDeLvovajyjdkSglOBNYkf5TdA.roa
File: WVDeLvovajyjdkSglOBNYkf5TdA.roa (raw, json)
Hash identifier: sy4G43dA9wG/l8QQWdvoQpt6wY4o7MhvG7mvltoz5FY=
Subject key identifier: 59:50:DE:2E:FA:2F:6A:3C:A3:76:44:A0:94:E0:4D:62:47:F9:4D:D0
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 01856B8A382E524200969492FBE0F30BB380
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/WVDeLvovajyjdkSglOBNYkf5TdA.roa
Signing time: Sun 01 Jan 2023 04:14:58 +0000
ROA not before: Sun 01 Jan 2023 04:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205083
IP address blocks: 185.231.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:38:2e:52:42:00:96:94:92:fb:e0:f3:0b:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Jan 1 04:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5950de2efa2f6a3ca37644a094e04d6247f94dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:03:13:95:41:1b:65:31:30:9a:91:f9:0a:
97:47:95:dd:d8:2c:55:c0:d5:4b:c6:74:c9:99:22:
d5:df:c2:14:fd:ba:7b:d0:b9:15:99:91:5c:bd:f0:
22:ff:1d:5a:87:f6:20:40:d3:5a:9d:cc:ac:db:50:
e3:f5:eb:17:f4:f8:fc:3a:3c:70:e7:94:29:ce:34:
2f:56:95:65:d4:65:af:fe:37:83:a4:57:fe:02:f7:
eb:96:e8:a8:dd:0b:d5:45:b4:51:74:56:24:bd:d6:
10:21:14:1a:3f:dd:17:71:99:2c:44:a3:a0:a0:0e:
61:e7:00:23:2a:8a:fa:5a:c9:10:08:fd:de:72:e0:
77:41:35:3c:fd:cb:82:35:83:4f:b9:4e:d2:88:d7:
6f:87:91:11:c4:9e:07:ef:6b:eb:97:85:2d:56:4a:
a9:0a:52:99:d5:fc:a7:bc:24:3a:c0:5f:82:39:6d:
23:ee:c2:40:e5:ea:f0:3d:01:41:39:48:03:9d:21:
a0:34:29:a7:1d:ae:0f:90:de:21:69:f2:d3:39:2c:
1a:2c:9f:7d:74:e0:37:b9:c9:9d:21:b0:3d:da:bf:
45:be:24:3e:3a:1b:cd:13:64:87:93:6c:2e:8b:97:
c6:32:87:b4:a3:8a:1e:c9:c3:4d:a7:ed:46:38:b8:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:50:DE:2E:FA:2F:6A:3C:A3:76:44:A0:94:E0:4D:62:47:F9:4D:D0
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/WVDeLvovajyjdkSglOBNYkf5TdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f0:ed:ff:a1:fa:13:82:63:76:b8:23:6a:db:be:cc:fd:6b:
2c:07:25:7a:aa:6f:3c:dd:43:3b:3d:a6:5e:9a:98:3a:1b:63:
ea:25:95:ba:1f:51:6f:d2:0d:5c:15:32:10:5a:85:81:f4:63:
df:3d:dd:44:99:8a:80:df:e4:e8:da:b9:ea:f9:89:32:1c:11:
2b:2c:10:6f:5e:7a:a9:67:83:df:93:92:dc:5b:74:04:ef:e6:
f3:ed:e6:2e:25:53:2a:f6:02:2e:5b:34:cc:f3:42:25:5f:89:
0b:60:b5:11:68:17:28:3d:8e:80:8b:15:a8:e8:66:de:2e:4b:
6e:5c:6e:80:04:e3:3b:ae:ff:da:1b:35:1e:3c:94:51:2d:4a:
49:69:a5:34:37:42:f4:e6:c5:5e:ae:ab:63:9f:3c:ce:d1:6f:
26:82:1e:a8:86:a0:93:e2:4e:da:51:cd:36:c9:b3:78:30:fa:
b6:51:15:e6:71:2e:98:11:35:5c:80:b3:a8:cf:5e:d2:cf:7e:
21:1b:b7:eb:6c:ab:a3:4d:9a:e2:e1:ff:2d:e4:ae:cc:51:c0:
b1:aa:d1:24:ef:ff:f0:d9:88:46:79:a0:cf:9f:77:77:a7:c2:
50:d6:2d:c5:8c:30:83:34:14:b0:98:e5:ae:dc:11:ff:a5:7e:
4d:bb:75:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:17 2024 by rpki-client on console-ams.rpki-client.org