Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/WfdBEcwZD55C7dFsd7vF4HMCkGo.roa
File: WfdBEcwZD55C7dFsd7vF4HMCkGo.roa (raw, json)
Hash identifier: AvVEtoy+VPJBBfnGt6WEegFQM69Utw/1eOFvK/jU0WA=
Subject key identifier: 59:F7:41:11:CC:19:0F:9E:42:ED:D1:6C:77:BB:C5:E0:73:02:90:6A
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 018B5AD9F739318417FCA334383078CA97C8
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/WfdBEcwZD55C7dFsd7vF4HMCkGo.roa
Signing time: Mon 23 Oct 2023 04:45:15 +0000
ROA not before: Mon 23 Oct 2023 04:45:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.248.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5a:d9:f7:39:31:84:17:fc:a3:34:38:30:78:ca:97:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Oct 23 04:45:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59f74111cc190f9e42edd16c77bbc5e07302906a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:ea:4e:a3:7b:b7:76:41:13:63:23:d5:2c:
6e:1b:89:b8:54:96:8b:67:6a:c4:d1:a1:24:66:3d:
f7:90:94:ee:f0:82:a9:2f:63:dd:7d:f7:e5:13:82:
f6:f8:73:8f:d0:4a:a8:b5:1d:cc:bc:50:c4:d0:3c:
e3:4f:3f:19:14:13:e9:ab:27:f9:b3:2d:d8:93:50:
02:21:7b:eb:60:2a:35:cc:d3:ce:df:ef:3b:43:e3:
bd:2f:0d:e4:d8:36:41:05:f6:37:30:5f:e1:b3:a4:
50:34:d5:0d:37:73:ff:67:8a:1c:27:e6:24:db:38:
10:70:b4:6a:87:11:5d:68:70:0b:d0:7a:ca:de:1d:
ea:44:bf:40:31:8d:05:d7:8f:b7:a8:ed:f1:78:0e:
a4:a3:53:15:5b:31:aa:42:ff:8b:38:b1:01:5c:a9:
8a:f9:dc:58:5d:2d:1c:5a:87:f0:d9:4a:e9:79:c2:
e8:9a:dd:1a:f9:f5:ce:21:ae:24:82:8d:cc:d7:8b:
df:fb:e3:47:68:ad:6b:5a:04:8a:cd:60:65:77:07:
97:53:ee:a5:99:03:a7:5c:4d:9a:49:d9:d0:11:d2:
f1:59:29:cc:2e:12:1d:03:05:12:51:a0:23:49:99:
f9:ac:27:60:b1:2c:88:d3:7e:d0:45:53:99:88:92:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F7:41:11:CC:19:0F:9E:42:ED:D1:6C:77:BB:C5:E0:73:02:90:6A
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/WfdBEcwZD55C7dFsd7vF4HMCkGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.50.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6f:1e:33:ba:54:5c:43:d3:2b:45:39:16:c3:8d:87:74:53:
ec:0b:9e:2d:e6:1e:ff:e2:c2:b4:17:cf:92:dc:62:cc:1e:72:
83:6b:c2:1e:74:9d:6b:19:3b:10:e4:4a:60:f9:45:7a:69:42:
ed:0e:12:08:e7:22:f7:06:79:9c:bf:d8:94:29:14:5f:57:8d:
67:73:6d:0c:cb:84:1a:48:27:11:17:77:20:10:47:97:06:01:
8a:e0:45:f6:cd:50:ba:ab:02:ad:2a:9e:a9:a1:97:f4:23:6e:
5f:2d:31:28:c4:fd:0f:cc:b8:0f:5b:67:40:e4:38:80:e5:e0:
0b:fd:32:17:2d:80:c7:55:b8:4b:51:4e:30:e2:cc:6a:b4:ca:
a9:d9:36:2c:9c:de:e2:3b:a7:91:ee:fc:99:26:2c:51:de:b4:
9a:9d:79:9d:7b:0a:52:a6:c2:96:aa:af:d7:d2:52:ab:64:fa:
52:5a:02:d0:f1:e2:41:a9:8a:46:b3:3e:12:93:8f:b7:b9:5d:
40:7d:28:e2:53:92:f0:75:21:33:c4:f0:4a:d7:89:56:16:fe:
ad:04:20:bf:a7:8e:8e:1f:18:15:56:10:81:c6:7d:04:4d:af:
ee:9c:fd:01:de:b5:7f:05:c7:a6:7a:87:40:8d:52:6b:c9:ea:
1f:ec:ac:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 06:28:45 2023 by rpki-client on console-ams.rpki-client.org