Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/Rwd5274zWWCtz3YsiVSm83MHn7g.roa
File: Rwd5274zWWCtz3YsiVSm83MHn7g.roa (raw, json)
Hash identifier: ErsLb8gkzY73mQSg3gGSnljCY9euv8IbmPGoSPPhuX4=
Subject key identifier: 47:07:79:DB:BE:33:59:60:AD:CF:76:2C:89:54:A6:F3:73:07:9F:B8
Certificate issuer: /CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Certificate serial: 0185E4AA1A76CFDC3A4CF570843569E31726
Authority key identifier: 91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/Rwd5274zWWCtz3YsiVSm83MHn7g.roa
Signing time: Tue 24 Jan 2023 16:43:51 +0000
ROA not before: Tue 24 Jan 2023 16:43:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 185.51.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:aa:1a:76:cf:dc:3a:4c:f5:70:84:35:69:e3:17:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Validity
Not Before: Jan 24 16:43:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=470779dbbe335960adcf762c8954a6f373079fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:27:9b:10:b5:d9:e0:33:bf:f1:04:84:49:45:
fa:96:df:cf:f9:f3:99:61:c5:f5:39:d7:e9:a7:f4:
4c:5c:00:a0:f8:c6:35:80:48:57:84:be:03:6e:87:
f5:72:fb:02:3a:19:7d:92:a8:f4:0a:6c:95:4a:b5:
cd:8f:de:ef:e9:a0:cc:f4:c1:5b:39:9d:16:59:0f:
24:ff:73:42:05:0e:47:93:c9:a3:68:0b:e2:86:67:
94:38:39:6b:58:84:fb:e2:5c:af:a1:fd:b8:01:ed:
1a:c2:5c:89:24:c6:0a:ab:3c:ce:03:3b:1b:e0:6e:
12:55:39:e0:06:2d:8a:48:30:d7:ca:19:61:b0:78:
c5:13:2d:5a:d2:6d:21:b9:67:33:80:65:82:3e:02:
03:a1:7a:1d:9f:01:d5:98:06:ae:93:44:1b:2b:92:
71:22:55:dd:99:e0:20:4e:b9:6a:fe:a6:5e:8b:52:
91:ad:4e:f0:0e:76:19:7c:06:ee:fb:18:aa:e5:ac:
91:25:ab:dc:f5:c3:0e:e5:90:f3:a2:08:b0:a4:52:
80:d7:cf:ca:c3:92:03:6a:14:83:69:f2:48:44:3c:
3d:03:83:08:ab:94:0a:2c:dd:e1:7f:23:ba:6e:63:
e0:d2:f7:38:9c:24:58:31:e3:61:ab:c2:55:7d:10:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:07:79:DB:BE:33:59:60:AD:CF:76:2C:89:54:A6:F3:73:07:9F:B8
X509v3 Authority Key Identifier:
keyid:91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/Rwd5274zWWCtz3YsiVSm83MHn7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/kZvynhrKI6UV4R9mlgtOuVyAz7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.120.0/24
Signature Algorithm: sha256WithRSAEncryption
49:94:b7:4d:1d:2e:2a:3c:d5:59:c6:75:aa:6b:d4:02:5f:3e:
15:7f:a2:9f:67:99:5b:14:db:14:aa:09:2e:ec:f4:05:0f:f0:
dc:82:63:74:df:d0:ae:d4:aa:02:fa:38:eb:80:10:66:59:9a:
96:f8:a8:76:c9:77:7d:cd:c2:77:d9:bf:a7:19:60:25:ab:bd:
d8:19:dd:11:9d:44:8f:1f:b7:fd:ff:4a:19:b4:f5:e7:99:8f:
29:ae:c5:56:83:43:9e:05:52:74:1f:6b:f8:00:13:9f:29:f7:
58:02:41:09:42:a9:cd:c1:c6:e2:97:b2:d0:82:cf:95:c5:5d:
b8:e3:1a:de:e5:c9:d9:74:9f:1d:51:78:56:c9:83:35:a1:40:
10:b3:29:b3:5a:02:03:00:c9:9e:f4:ff:1e:a9:c1:03:97:e0:
90:e7:a1:f3:4d:02:e9:15:f0:e5:51:c1:40:b4:08:21:eb:b3:
d8:4c:b8:53:26:f5:3a:ee:cf:ce:21:78:1a:2a:af:1c:fd:e5:
ac:fe:6e:a9:b6:3d:b4:bc:9b:c4:d1:65:0d:dc:ad:86:af:d1:
21:78:90:7b:be:a1:74:fb:8c:4c:b6:2a:c7:55:ee:b3:88:80:
5a:7d:6a:3c:21:95:42:68:76:c3:aa:5c:6a:67:2e:a9:43:60:
dd:f7:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:55 2023 by rpki-client on console-ams.rpki-client.org