Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/1-Pg5UZ1OpqURv3V5jSB11nHZ5js.roa
File: 1-Pg5UZ1OpqURv3V5jSB11nHZ5js.roa (raw, json)
Hash identifier: ypTRTq6WJswhvqXW8WYeJ02auL3X7P5zqrR2NiES+uY=
Subject key identifier: F8:F8:39:51:9D:4E:A6:A5:11:BF:75:79:8D:20:75:D6:71:D9:E6:3B
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 018570FBCD78BBD2637E47BE30E8DE7AD087
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/1-Pg5UZ1OpqURv3V5jSB11nHZ5js.roa
Signing time: Mon 02 Jan 2023 05:37:08 +0000
ROA not before: Mon 02 Jan 2023 05:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45014
IP address blocks: 185.100.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:cd:78:bb:d2:63:7e:47:be:30:e8:de:7a:d0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Jan 2 05:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8f839519d4ea6a511bf75798d2075d671d9e63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bf:2c:4c:18:ef:1a:70:4e:32:f5:60:c6:1f:
ca:72:17:04:42:27:67:5c:b3:29:79:a4:e4:64:88:
e6:56:66:8e:9a:e2:54:e8:8b:c4:56:2f:c5:35:88:
87:51:2f:7d:0d:fb:22:da:6c:84:28:97:01:59:14:
b8:0b:f6:75:9b:83:e3:50:ec:d8:7e:81:f9:a3:11:
0e:6f:2d:c9:50:8d:4e:9b:b4:ed:91:89:34:59:bf:
11:81:cd:fe:f7:26:89:8a:2e:a7:f1:4e:9b:e1:69:
3f:6a:06:5e:a7:b8:6a:47:84:6e:bd:d3:e6:5f:f0:
27:5e:01:6e:6d:17:6c:fe:62:6b:0c:23:9e:aa:72:
d3:8d:51:91:b9:24:01:fa:97:73:e7:e8:70:17:d4:
05:17:98:76:95:b0:33:65:e1:cc:97:30:d6:50:42:
c4:80:42:37:29:20:13:bb:3f:83:fb:81:66:d8:18:
ff:31:6b:d1:7f:a2:81:82:4c:a6:72:fb:60:77:0b:
7a:36:77:bd:90:49:cc:68:c3:c0:f8:6f:62:e3:67:
78:a7:f0:95:0d:c1:66:c7:f5:65:f1:af:e6:96:d5:
83:e3:ce:62:1e:60:77:b0:2c:d6:d7:7a:fa:91:dd:
93:16:87:b7:b1:09:e7:b0:66:5d:1f:c0:42:7d:40:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F8:39:51:9D:4E:A6:A5:11:BF:75:79:8D:20:75:D6:71:D9:E6:3B
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/1-Pg5UZ1OpqURv3V5jSB11nHZ5js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.251.0/24
Signature Algorithm: sha256WithRSAEncryption
22:30:71:b3:85:df:71:57:a1:c7:3c:ad:db:f5:26:db:78:0f:
f8:f6:19:ac:72:4e:55:48:80:93:6f:94:8f:9d:fc:8b:89:b6:
92:57:47:69:08:35:a4:fb:b3:84:cd:e8:2d:c9:60:6c:5b:1d:
a8:7e:24:39:85:9f:29:b8:be:96:72:96:43:1a:56:20:2e:8b:
41:9e:61:10:eb:36:45:34:56:d8:c3:bc:0f:36:dc:2e:79:7b:
8f:bd:fe:37:02:69:1e:3d:db:c0:15:76:6b:9b:8f:bc:08:7f:
bc:ff:8a:29:a8:af:27:1c:2b:e6:26:10:0d:d7:37:c2:af:5b:
99:b6:39:d0:fd:c1:d4:9f:13:7b:b9:29:1d:8b:0e:03:5e:fc:
f6:9f:ef:f3:e4:0f:8b:51:77:86:56:1c:8d:c8:23:af:6b:c2:
26:40:5f:73:5d:5e:f9:26:18:a6:28:f0:de:63:e0:28:f9:18:
52:d2:88:22:c7:39:98:92:d2:34:5e:67:ca:af:3a:83:ad:93:
6c:65:49:1c:7d:b6:64:e4:e0:a3:40:30:6b:cf:45:82:e2:31:
f4:2e:a4:40:67:e8:30:f4:aa:42:f6:a3:8b:81:e7:18:e5:af:
70:7f:bf:60:66:41:6e:56:d3:fe:ab:43:33:85:2c:91:6d:52:
22:55:aa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:29 2024 by rpki-client on console-ams.rpki-client.org