Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/CpWSa_sEdT-yCdMykTptNpkDOvE.roa
File: CpWSa_sEdT-yCdMykTptNpkDOvE.roa (raw, json)
Hash identifier: lZccZ1Gnfs3vsym5pIdUD6QpQcOzAXy9oFsfYSfWfmk=
Subject key identifier: 0A:95:92:6B:FB:04:75:3F:B2:09:D3:32:91:3A:6D:36:99:03:3A:F1
Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial: 018570951F85EBCD8BB0F44DBA9F0E53B0E1
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/CpWSa_sEdT-yCdMykTptNpkDOvE.roa
Signing time: Mon 02 Jan 2023 03:44:59 +0000
ROA not before: Mon 02 Jan 2023 03:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201602
IP address blocks: 185.199.50.0/24 maxlen: 24
185.199.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:1f:85:eb:cd:8b:b0:f4:4d:ba:9f:0e:53:b0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Validity
Not Before: Jan 2 03:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a95926bfb04753fb209d332913a6d3699033af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:c1:b8:02:62:a1:6c:74:0b:cc:27:df:b3:
46:6f:81:d5:c4:98:01:50:0c:97:a4:18:e4:d6:f7:
b2:a3:34:63:d2:e0:e4:db:9c:a5:b3:4e:b5:66:69:
b5:2b:01:cc:57:17:a3:f7:32:e0:6f:f2:68:ac:76:
d5:1c:03:90:cb:eb:94:e1:b7:c3:4a:2a:25:fc:f0:
5d:67:dc:9b:42:6b:41:5f:69:ed:81:77:b4:8d:7c:
1e:c5:43:ce:a5:20:9a:27:f8:6c:77:43:72:e9:df:
93:c0:b8:e0:0c:11:4d:09:7e:81:32:33:1b:ca:1d:
66:58:da:e7:9c:13:fb:85:f6:7b:33:a5:0a:77:42:
52:99:e5:88:f1:bf:f7:1d:d1:9b:0c:57:b4:29:9f:
76:7f:08:d6:77:74:74:39:e3:73:7e:65:73:ba:e0:
50:23:a7:c1:f6:c9:55:71:65:c3:93:e0:54:06:4e:
6c:85:dd:c9:36:de:c2:10:6f:a5:e3:50:72:b9:5f:
04:16:67:01:d7:d8:52:8e:33:a7:ec:5d:af:73:41:
7c:64:7b:1e:f7:08:23:c7:fa:15:0a:13:ac:71:59:
ee:df:ec:90:88:9a:a8:07:63:17:fd:0f:4b:b5:13:
da:1c:d2:4d:17:49:e5:45:32:c0:53:c8:25:eb:2c:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:95:92:6B:FB:04:75:3F:B2:09:D3:32:91:3A:6D:36:99:03:3A:F1
X509v3 Authority Key Identifier:
keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/CpWSa_sEdT-yCdMykTptNpkDOvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.50.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:97:4f:08:9b:23:a1:f2:10:bf:cb:05:c2:b1:f5:b1:b9:a7:
c2:c0:ef:57:27:2a:88:8f:00:f2:8f:47:ee:98:64:b8:24:b8:
cf:3f:a1:f8:72:b0:40:0a:9c:3a:fd:14:4f:be:8e:aa:04:13:
23:e4:0b:25:48:d3:49:2a:b9:c8:dd:dc:35:48:47:2d:a4:71:
ad:5b:6c:8b:48:21:50:8d:42:69:e9:05:95:73:d5:b4:c2:4a:
c3:81:21:db:f7:9a:1d:57:ef:88:1d:a3:66:60:fc:6b:25:f4:
0e:dc:d5:77:90:fe:94:41:84:8d:7b:4e:50:b2:00:ac:6f:3e:
86:ac:0a:c6:71:0f:12:2f:ef:26:04:db:b9:d2:79:63:75:ab:
f6:6e:e5:26:97:f7:46:33:55:fe:08:fe:29:dd:54:12:a2:c6:
a2:af:e7:9f:61:08:5c:18:30:13:ab:e3:9d:77:e8:d3:6b:fe:
20:d9:14:33:ae:9f:b1:78:06:5f:04:d0:9e:ff:ca:f8:7d:46:
64:40:c9:3e:3d:ff:67:ce:4c:3b:a4:0e:33:3c:87:2c:9e:0f:
79:3d:4f:06:17:cc:5b:bd:a9:03:99:ba:6e:17:1b:de:6b:64:
84:bd:ed:96:f1:7f:45:eb:40:a6:14:c2:fd:0f:b5:c0:c7:a2:
52:78:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:13 2024 by rpki-client on console-ams.rpki-client.org