Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/WbbL9gPhJrCtKuQuvCAODBOmhzc.roa
File: WbbL9gPhJrCtKuQuvCAODBOmhzc.roa (raw, json)
Hash identifier: 1ea0izLuqYd/gxMRt+BEZntMXqUGiEo7Q5xVv/WXIe8=
Subject key identifier: 59:B6:CB:F6:03:E1:26:B0:AD:2A:E4:2E:BC:20:0E:0C:13:A6:87:37
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 01857015294858EBFF05EBADD494DE41CAC9
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/WbbL9gPhJrCtKuQuvCAODBOmhzc.roa
Signing time: Mon 02 Jan 2023 01:25:13 +0000
ROA not before: Mon 02 Jan 2023 01:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7262
IP address blocks: 185.152.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:29:48:58:eb:ff:05:eb:ad:d4:94:de:41:ca:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Jan 2 01:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59b6cbf603e126b0ad2ae42ebc200e0c13a68737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:90:9e:b4:68:07:c7:52:56:90:ad:c2:0c:
9c:49:0e:e7:51:e0:99:b3:4b:7c:84:ba:01:dc:06:
94:05:b2:a0:19:69:8a:4f:29:95:17:78:ab:ec:ba:
0c:bc:a0:ae:32:b9:9a:dd:d2:df:81:1a:20:72:84:
31:69:bd:05:d3:64:15:b9:ad:ed:73:a3:a7:8b:52:
ff:fe:af:c6:24:e3:1e:24:4c:55:49:18:31:3e:24:
26:8a:3a:44:11:36:3e:06:aa:71:61:ab:d5:d3:cb:
00:60:21:67:ec:cc:ad:55:1a:84:85:4b:55:4a:45:
3a:b9:e8:0c:72:e4:42:63:83:5f:9b:1e:b2:d1:f1:
30:cd:3c:d4:82:0d:4e:c0:60:21:25:4c:4a:24:ec:
43:83:46:17:9b:76:6b:d2:20:1c:95:9d:87:66:76:
ac:26:7a:ec:b2:e7:52:61:e1:41:d8:fc:f9:93:d6:
76:11:98:16:80:2e:a9:d6:f5:02:9d:2a:8f:bd:6a:
81:c6:f5:4f:6b:64:52:f8:cf:9f:50:2f:93:bb:68:
c8:39:e2:35:f3:7c:d1:2f:5f:36:f1:09:a2:f1:bd:
0b:9c:f0:74:c4:dc:b6:72:89:a6:99:b5:90:82:b5:
b9:ec:ab:67:60:8d:df:b6:63:e9:d2:9b:21:e7:07:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B6:CB:F6:03:E1:26:B0:AD:2A:E4:2E:BC:20:0E:0C:13:A6:87:37
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/WbbL9gPhJrCtKuQuvCAODBOmhzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.51.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b2:ee:bd:5a:00:0c:c0:72:4c:8b:01:8b:fc:42:40:2f:7a:
de:54:6f:b9:8e:c9:2e:32:21:53:e8:2a:90:ac:0c:e9:d5:90:
5a:72:13:72:45:f9:b0:ca:4c:d6:e8:f7:08:7d:d9:c7:97:a4:
03:cd:1b:54:af:7e:aa:37:be:60:63:1d:e8:f2:cd:4f:ac:f0:
d6:4e:e0:f4:f8:e5:e8:96:97:b4:9b:50:62:11:dd:ec:9d:d1:
9e:46:a3:43:4e:bd:a2:83:94:31:a0:53:1f:e0:40:77:90:93:
98:8c:86:31:fe:52:8f:78:ea:c6:0c:ec:1a:62:94:06:c5:10:
c4:db:70:4b:99:85:ee:1f:1a:af:74:1e:5d:c1:75:7f:5f:a0:
f6:ee:87:55:f4:ef:b3:d8:81:6e:ad:89:74:d8:be:96:96:b1:
17:d9:f3:e8:30:b2:16:59:88:89:7a:15:44:68:56:96:20:8e:
04:3b:11:85:a1:b3:ac:e9:97:49:67:ac:cb:ce:f7:61:b6:3f:
5d:47:c9:3f:17:f3:48:43:42:0b:d4:57:90:18:86:4f:d8:b1:
74:b4:53:da:85:72:53:5b:09:3c:b1:02:c7:65:6d:19:dd:2c:
8a:eb:5b:2b:b1:0b:9b:3e:bd:b2:ae:b9:78:77:d1:14:4e:0b:
de:6b:4d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:14 2024 by rpki-client on console-fra.rpki-client.org