Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/DWg33rlIZAiMDslxeugO9HFZ5rQ.roa
File: DWg33rlIZAiMDslxeugO9HFZ5rQ.roa (raw, json)
Hash identifier: uVuxcWAZsfZMU8pDdsCHwI7vmBPUvn67R/hwhnVsnTM=
Subject key identifier: 0D:68:37:DE:B9:48:64:08:8C:0E:C9:71:7A:E8:0E:F4:71:59:E6:B4
Certificate issuer: /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial: 018570797DB44C4CAD79BC1A5F68CC40A15F
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/DWg33rlIZAiMDslxeugO9HFZ5rQ.roa
Signing time: Mon 02 Jan 2023 03:14:48 +0000
ROA not before: Mon 02 Jan 2023 03:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29256
IP address blocks: 185.151.148.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:7d:b4:4c:4c:ad:79:bc:1a:5f:68:cc:40:a1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
Validity
Not Before: Jan 2 03:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d6837deb94864088c0ec9717ae80ef47159e6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:7d:fb:31:62:1f:43:9a:61:e7:f7:0b:54:
a9:3b:9e:e2:18:82:c6:4f:78:04:a6:25:8f:8f:70:
62:e0:5f:1f:75:5c:15:ef:c7:a9:2d:fb:9e:27:47:
dc:28:55:65:86:0a:3c:3f:35:f3:56:7c:de:9b:c7:
39:db:7e:d9:b0:4a:e5:e5:de:72:5d:9a:c2:45:9a:
0d:2f:b5:1f:e8:d0:47:60:3b:ab:19:97:6d:67:8f:
2d:55:71:c9:f8:bc:5b:db:ec:fc:52:71:90:19:97:
11:b3:66:38:d4:0c:d8:78:19:a2:c6:9c:2e:00:8b:
4c:cb:e4:18:1d:6e:ff:8e:bc:2b:b4:ce:e0:da:18:
28:f3:55:c2:cb:4d:70:58:c5:e0:57:04:f5:b6:ab:
b0:52:c5:44:6f:89:2e:4f:e5:3a:71:90:4d:cb:76:
85:03:be:c0:0c:64:c7:e6:8b:1d:ea:de:43:97:48:
20:5a:2f:b1:a5:d4:cf:78:32:10:0a:31:6d:4b:40:
e7:4c:6e:65:5f:40:8a:b0:e6:76:53:94:73:0d:cf:
34:9f:70:ef:b3:01:03:bb:29:bd:82:14:d8:b3:a5:
1e:67:10:b6:c1:36:b0:ed:66:fc:e8:c9:be:a3:4e:
3a:d7:ea:6b:32:5b:e4:9d:b4:fd:10:ab:21:07:d9:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:68:37:DE:B9:48:64:08:8C:0E:C9:71:7A:E8:0E:F4:71:59:E6:B4
X509v3 Authority Key Identifier:
keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/DWg33rlIZAiMDslxeugO9HFZ5rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.148.0/22
Signature Algorithm: sha256WithRSAEncryption
25:b0:87:f8:9e:88:4b:70:04:ff:fb:55:de:60:ec:8a:2a:13:
3e:94:5d:58:54:7a:12:f3:7d:51:6c:23:00:f3:a6:ba:3a:aa:
ed:d3:25:de:58:43:80:1c:00:0d:e9:50:76:9f:60:d8:70:18:
ef:5b:89:4a:bd:92:68:01:f7:52:38:93:35:0d:3b:6c:87:92:
8c:00:cc:4d:fb:3f:12:bb:e9:51:cf:2b:f2:ad:d8:02:ce:26:
e2:15:0c:2a:a9:81:64:0b:a5:76:f5:63:f9:f5:b5:a0:be:5e:
95:cc:50:c3:d4:87:d4:a8:e8:97:9f:90:cc:a5:74:31:cb:38:
4d:a4:9e:0b:84:80:41:0f:6e:18:47:55:e8:63:40:12:6f:f0:
66:a6:f3:28:ea:91:48:22:69:3c:9f:d7:97:02:64:72:ee:c0:
2f:df:8b:db:30:57:f8:d1:9a:49:4a:2d:cd:12:c7:48:6b:55:
fe:9c:17:33:1a:f0:c2:f0:1f:5e:a6:57:44:e3:42:1f:97:e2:
b3:63:c9:b5:96:20:9b:24:07:30:bb:3f:0d:31:44:f9:6b:0d:
cf:34:f3:c1:d2:84:5e:0b:cd:90:f4:77:92:ab:e9:ef:2b:a1:
04:11:1e:e9:b2:7b:24:9a:e8:fc:7b:90:94:fe:72:ac:6a:ab:
c6:c5:1a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:02 2024 by rpki-client on console-ams.rpki-client.org