Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/cBUjUuMdQeNXAqXJoBdWEs8g3Bs.roa
File: cBUjUuMdQeNXAqXJoBdWEs8g3Bs.roa (raw, json)
Hash identifier: ks0XQduSaDzotz5GkWxMIgLV4ZADfime/ohGpAwEd7s=
Subject key identifier: 70:15:23:52:E3:1D:41:E3:57:02:A5:C9:A0:17:56:12:CF:20:DC:1B
Certificate issuer: /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Certificate serial: 01856B9C686B34B2E01D3D9A92EF2543571F
Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/cBUjUuMdQeNXAqXJoBdWEs8g3Bs.roa
Signing time: Sun 01 Jan 2023 04:34:50 +0000
ROA not before: Sun 01 Jan 2023 04:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64406
IP address blocks: 185.72.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:9c:68:6b:34:b2:e0:1d:3d:9a:92:ef:25:43:57:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Validity
Not Before: Jan 1 04:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70152352e31d41e35702a5c9a0175612cf20dc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:bb:e1:b2:91:c6:38:58:85:34:53:89:45:
d3:d0:2b:b3:b9:61:55:df:81:ef:49:55:71:24:3b:
12:e7:eb:c5:8a:ad:e1:e1:55:5b:48:16:38:b2:b4:
25:50:4b:1e:ab:88:12:66:2e:67:2a:71:0c:14:4d:
27:db:cd:92:1d:7e:93:7f:2d:e0:c6:95:98:0f:8e:
27:a8:3b:71:3c:70:e3:d6:bc:89:45:4a:a6:c7:b5:
49:84:08:a6:72:16:59:a2:64:cd:0d:d9:80:36:70:
63:df:33:46:4d:72:c1:0c:be:1f:fc:30:dd:d4:e8:
72:e6:42:82:1f:3a:22:5f:11:56:3b:91:41:d1:c6:
42:af:10:22:df:32:e2:12:23:fc:e1:e2:05:b0:b0:
cb:54:4b:e2:f1:9f:e0:3a:a5:27:be:6b:32:ec:04:
d7:7b:66:43:7c:e4:b4:26:81:d1:a8:9a:78:e7:0d:
5d:fd:b0:16:c7:00:33:b7:45:b9:5f:20:6c:52:51:
e5:ac:00:6b:21:ab:0d:d0:53:da:0d:44:65:9d:46:
bc:6b:2b:f3:ca:a3:b3:d6:82:34:6c:1f:f9:93:52:
a2:ec:0f:2b:53:24:ea:c5:f5:91:02:32:c5:37:38:
3a:98:a4:ad:7b:d5:7c:ae:93:cb:33:15:9e:2d:2e:
3e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:15:23:52:E3:1D:41:E3:57:02:A5:C9:A0:17:56:12:CF:20:DC:1B
X509v3 Authority Key Identifier:
keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/cBUjUuMdQeNXAqXJoBdWEs8g3Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:92:8b:b3:61:f0:39:3c:72:3c:37:fc:8e:64:b1:b0:60:8b:
78:5d:28:f0:f2:c2:02:60:02:ec:b0:39:a1:6b:08:a9:01:b1:
9d:19:50:6e:f0:32:63:d0:cf:6b:6b:12:97:11:65:12:79:48:
0a:a8:3e:78:73:2f:ff:69:65:c6:ec:fd:81:8b:99:6e:d2:ce:
87:ed:af:09:35:bf:b4:ea:7d:e8:04:da:f7:77:f8:e7:6f:c1:
45:f3:96:f5:ae:18:3b:71:1b:3f:38:76:61:9b:e2:a4:19:c1:
e2:71:8d:e1:8f:52:48:dd:55:a1:90:49:56:8c:7d:d7:6a:ea:
e4:55:b0:46:9e:2a:25:9e:f6:c5:df:4f:ef:9f:f9:db:0f:aa:
74:22:cd:ac:66:d5:86:51:b4:ca:ce:53:34:2c:ea:f2:bc:c0:
0f:7e:46:73:e7:4a:d8:d2:7a:57:33:24:14:e1:a0:b9:06:f4:
63:3e:f3:e3:6e:5b:c0:52:6c:2c:a5:ee:39:6b:83:7d:51:21:
a3:8e:e3:97:2c:40:63:01:94:98:82:fd:dd:f8:d6:fe:b7:76:
cb:9c:df:58:5b:7d:13:d5:8d:5c:70:55:12:21:c5:07:33:95:
8c:f5:8e:ce:de:98:1a:7e:a2:07:cd:3e:03:d7:d9:91:5d:a2:
44:34:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:43 2024 by rpki-client on console-ams.rpki-client.org