Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/wMhWnLnLYEAqtpMlLscyQlCtF-U.roa
File: wMhWnLnLYEAqtpMlLscyQlCtF-U.roa (raw, json)
Hash identifier: 4dT/CNSfd70kDJEbnsEz7sNjqWnWDO/CHs7rzEQiw8c=
Subject key identifier: C0:C8:56:9C:B9:CB:60:40:2A:B6:93:25:2E:C7:32:42:50:AD:17:E5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4D4B5771083088C1500594828BFEA
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/wMhWnLnLYEAqtpMlLscyQlCtF-U.roa
Signing time: Sun 01 Jan 2023 19:35:19 +0000
ROA not before: Sun 01 Jan 2023 19:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204821
IP address blocks: 185.231.184.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d4:b5:77:10:83:08:8c:15:00:59:48:28:bf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0c8569cb9cb60402ab693252ec7324250ad17e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:27:97:27:a0:4a:c2:b0:a1:bc:54:a5:82:
60:d7:2c:69:d1:12:82:0d:44:e4:fb:3a:82:77:9b:
55:be:45:f9:dc:8f:e1:4d:e1:9b:dc:dc:af:89:3b:
ef:26:4a:d0:77:f5:db:6b:81:ac:c9:a4:61:b8:e5:
f0:95:a7:f1:9b:fd:b8:83:8d:07:c5:f1:1f:01:65:
59:dc:6a:9b:c5:1e:62:e4:c8:5b:44:9d:fb:a9:66:
ef:d9:63:e1:77:52:4f:42:1b:5b:12:a2:61:56:c9:
bb:b4:d3:e6:9b:9e:6a:23:f2:92:1c:9b:11:e7:14:
a5:80:d5:e3:08:05:2a:20:b2:1c:9f:0f:07:74:f3:
7a:6d:36:e1:06:4b:1e:72:b3:bb:36:2b:72:85:c9:
ea:79:cd:12:f7:00:2c:1c:9e:eb:fb:fd:86:66:11:
45:b4:73:1e:62:49:06:46:26:8c:8d:56:eb:2d:54:
e3:87:69:10:66:1b:73:aa:25:f9:95:32:82:77:df:
00:4c:25:96:5f:78:ae:2e:4e:5b:bb:e9:08:13:0e:
2c:ba:f3:f3:be:31:42:c8:64:2b:c6:35:3c:0b:d5:
d2:4e:ca:f2:01:32:ee:95:a4:36:02:ad:c5:27:98:
fc:15:d1:30:34:43:d2:05:c5:2f:81:61:08:f6:f3:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C8:56:9C:B9:CB:60:40:2A:B6:93:25:2E:C7:32:42:50:AD:17:E5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/wMhWnLnLYEAqtpMlLscyQlCtF-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.184.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:8e:0b:75:97:f5:c4:93:14:fc:c8:01:ea:56:c6:bb:ee:67:
f6:fb:30:fd:6c:9b:54:44:3e:20:26:61:13:40:3d:08:f1:d8:
7a:de:eb:ae:01:5b:96:96:f4:93:45:20:b7:67:35:df:f6:69:
d0:0c:6d:f9:d2:6e:0c:22:30:e2:c2:c9:8a:53:bd:61:97:e3:
d2:bb:91:b6:e2:a7:de:a5:81:e0:d5:51:d8:29:d6:58:f6:83:
05:51:08:6c:2f:bf:32:c9:4d:d3:98:1f:8d:35:fa:29:69:04:
0e:03:4d:c4:79:85:ad:20:f3:e8:21:23:74:ef:e8:8f:ac:88:
37:84:7e:41:6f:9e:36:77:61:25:10:a8:91:48:66:95:d2:5d:
e5:e2:11:36:1a:1e:6f:e5:0c:da:41:27:58:68:02:3f:e4:5c:
ce:77:f7:40:22:3e:68:da:ab:7d:9c:9b:02:99:94:e1:e8:14:
e7:71:fb:70:28:85:4c:59:25:b1:a4:6f:38:78:15:a8:f7:e9:
a9:4b:6b:ab:ff:d3:d6:e7:7a:80:b5:51:5b:47:30:7a:3e:af:
ef:22:ab:18:53:4c:25:87:aa:c3:50:9e:d1:84:e1:4b:6b:a8:
5b:f1:a0:0c:89:9c:17:e8:2c:cb:2f:4d:75:a7:f1:41:86:00:
a8:9c:cc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org