Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/VucgQKtYcJtxOq_a8JKP1k9cZcs.roa
File: VucgQKtYcJtxOq_a8JKP1k9cZcs.roa (raw, json)
Hash identifier: 5yhLfxQmGYOj0HT88v9dEAtWF+lbaN6fhIyCnl8b6m4=
Subject key identifier: 56:E7:20:40:AB:58:70:9B:71:3A:AF:DA:F0:92:8F:D6:4F:5C:65:CB
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 01856B256A69965B62F503A83B89A9FE34C3
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/VucgQKtYcJtxOq_a8JKP1k9cZcs.roa
Signing time: Sun 01 Jan 2023 02:24:52 +0000
ROA not before: Sun 01 Jan 2023 02:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35819
IP address blocks: 185.51.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 May 2023 18:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:25:6a:69:96:5b:62:f5:03:a8:3b:89:a9:fe:34:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Jan 1 02:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56e72040ab58709b713aafdaf0928fd64f5c65cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c7:43:a8:31:98:45:79:a7:9d:11:f6:0b:de:
0c:c8:65:74:bd:08:c1:4f:e9:59:51:c0:e9:d3:75:
18:8d:60:4d:f6:d3:63:23:4d:6a:8a:b7:e3:cc:5b:
06:05:03:0e:b4:fd:16:35:8c:fa:b4:f8:99:56:c1:
ea:06:a7:e3:d8:ae:7a:bc:f1:5d:92:02:0c:75:b6:
8d:9c:a2:ea:57:01:a4:2f:0f:c4:7a:c9:8c:35:46:
4e:43:0a:a4:9f:ec:02:d2:75:5f:5f:66:3d:2b:b5:
2b:77:9b:3c:f0:3e:52:bd:5b:ac:eb:fa:78:28:86:
3c:03:24:62:d2:8d:d0:13:c2:34:1e:86:e3:06:79:
d7:2b:24:51:76:1b:19:5e:ff:d0:24:df:ee:00:03:
09:58:67:31:99:a5:9a:3e:40:23:2b:76:88:b5:c1:
56:76:8b:da:85:c1:c7:1f:21:35:32:f4:ac:d1:30:
54:54:7c:6c:53:ea:ab:f8:6b:aa:79:c3:63:f6:76:
81:e6:93:bc:38:a8:0a:06:ed:2e:22:d7:ed:43:c8:
8f:95:14:58:5b:09:88:d7:47:e9:74:bc:0c:6c:34:
58:55:e3:76:09:03:aa:8b:a3:a9:19:e7:54:ad:bf:
7c:59:d4:47:d3:ea:7c:f6:bc:c9:a8:81:7a:3b:21:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E7:20:40:AB:58:70:9B:71:3A:AF:DA:F0:92:8F:D6:4F:5C:65:CB
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/VucgQKtYcJtxOq_a8JKP1k9cZcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3e:7b:86:76:ff:5b:61:df:72:e7:21:44:68:35:6d:a1:74:
14:3f:b9:6a:b3:1b:a6:91:14:d2:6a:c2:df:51:c9:93:29:29:
12:57:21:54:71:c9:7a:e5:e2:c5:83:77:bc:bb:ad:95:49:90:
cc:29:70:be:1b:60:17:7f:6f:52:a2:8b:85:35:63:50:c5:60:
89:9b:4d:8b:58:9c:68:ac:20:a5:e0:6f:df:62:78:4b:83:79:
5b:b7:e0:71:50:c9:10:a2:19:35:9b:18:8c:b7:c0:19:6a:b0:
a4:83:18:b5:f6:37:29:e1:ef:5c:08:5b:13:f8:27:d5:13:97:
50:3b:d1:db:50:83:59:b9:3e:ec:bc:9c:9e:5c:66:36:de:5c:
1e:19:d5:66:c0:d2:85:2a:90:f5:be:5b:f9:11:f4:1c:46:d2:
57:26:2c:c7:50:c8:80:b7:c3:fa:65:a5:fd:23:4a:11:63:4b:
91:76:3c:a5:25:6d:22:db:6b:2a:ec:e8:6d:45:e2:bf:f7:ec:
79:3a:12:f5:8f:a6:65:ec:be:1b:44:eb:a5:eb:38:b0:7f:48:
4a:b1:2a:de:ed:00:55:00:2b:1e:b7:60:47:d8:b2:b1:fa:a0:
c4:fb:74:d7:e1:e7:e6:10:57:c8:48:50:e6:0e:38:ed:d6:b4:
82:5b:b0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:45 2024 by rpki-client on console-ams.rpki-client.org