Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/wv2YZcalfq83JgO6PdWu0CulTwY.roa
File: wv2YZcalfq83JgO6PdWu0CulTwY.roa (raw, json)
Hash identifier: p8S4DuhkValyzhXDG0XevkhpusKkEbvwF5ZJSo3rEVg=
Subject key identifier: C2:FD:98:65:C6:A5:7E:AF:37:26:03:BA:3D:D5:AE:D0:2B:A5:4F:06
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 01857082C7F7B542FB4F559E830C319A07C5
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/wv2YZcalfq83JgO6PdWu0CulTwY.roa
Signing time: Mon 02 Jan 2023 03:24:57 +0000
ROA not before: Mon 02 Jan 2023 03:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.206.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:c7:f7:b5:42:fb:4f:55:9e:83:0c:31:9a:07:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Jan 2 03:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2fd9865c6a57eaf372603ba3dd5aed02ba54f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:30:ea:e7:7f:83:c2:9b:94:5e:83:ba:98:
32:0e:cc:91:f0:bf:74:41:29:7f:b9:a8:a3:47:78:
4f:be:c5:8f:d8:00:c2:98:6c:91:0b:62:1f:03:90:
1e:5f:a9:c5:45:14:80:6f:d6:41:ec:9a:95:e6:7f:
7f:de:b4:35:61:47:0a:a5:59:1e:09:1c:eb:4d:1f:
bb:99:cf:f6:da:b2:bf:d8:33:c3:9e:2a:8e:bd:0b:
0c:81:36:b6:3b:0a:b2:94:dc:95:65:3b:10:7a:89:
20:f2:7e:a3:a9:98:c1:a5:07:f7:48:1d:ab:d3:2e:
09:6d:56:ec:84:ca:77:76:ef:b6:60:9b:cc:68:a2:
b7:0b:36:c8:aa:be:88:6e:73:d4:dd:1a:dd:70:58:
87:86:bd:27:6e:15:c5:ca:af:e7:0f:d3:20:8c:31:
21:ff:20:5f:6a:c4:6a:04:c2:99:6a:08:fc:24:db:
f1:5d:50:57:5d:12:9f:37:ba:ef:2d:b0:c7:30:99:
fd:1a:b8:61:29:50:b8:e1:88:1c:84:92:36:4f:37:
ec:7e:c1:09:cd:ec:85:56:78:19:de:04:dc:43:78:
5f:b6:c6:57:fb:90:20:1c:04:98:47:3c:5b:0a:0a:
80:8e:ee:45:91:70:92:3d:4a:12:7c:85:32:a3:29:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FD:98:65:C6:A5:7E:AF:37:26:03:BA:3D:D5:AE:D0:2B:A5:4F:06
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/wv2YZcalfq83JgO6PdWu0CulTwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.228.0/24
Signature Algorithm: sha256WithRSAEncryption
88:53:bf:43:52:06:72:6c:3d:c3:10:af:44:61:88:8b:22:50:
e7:13:24:8c:a8:b8:97:7e:c9:03:07:99:a6:cd:46:0f:51:8d:
2b:f7:b5:52:ee:38:f6:88:a9:d3:84:05:ed:6f:f9:86:37:da:
c4:13:46:13:b9:f8:a4:53:39:38:06:15:6f:35:e3:bb:84:28:
69:89:56:bf:13:29:cc:78:c5:77:a1:67:0d:0a:0a:33:9e:67:
4e:2f:1f:e0:0f:49:e1:1c:4f:d4:0e:e8:3e:27:de:f0:26:32:
15:6f:cd:e2:43:f5:d9:3a:14:da:38:33:f2:cf:bc:9a:93:9a:
7c:55:db:b6:84:16:58:c1:4b:f5:c1:de:19:89:87:e6:a1:1f:
5c:c1:f4:87:8c:ad:7f:4a:f0:bb:a6:da:67:7d:2e:c3:c7:9e:
55:2e:cf:15:bd:e5:5a:a6:67:ce:1c:3d:5b:3c:b8:f4:7e:26:
8c:2f:fb:d5:8b:d9:2a:18:ee:c7:62:c2:19:b5:fd:43:75:8f:
3a:f5:5a:42:d1:c7:33:bd:ac:c5:2c:31:2e:dc:1b:12:63:0c:
ef:44:e8:75:83:d3:37:25:cf:e5:68:ef:e2:30:2f:cf:7d:5b:
62:86:33:50:65:0f:d8:5b:f3:84:d4:64:a8:ab:92:c6:bc:93:
19:89:9d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:30 2024 by rpki-client on console-fra.rpki-client.org