Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/1-UnfzA3auAmyiaoXIhc_voYu1Mk.roa
File: 1-UnfzA3auAmyiaoXIhc_voYu1Mk.roa (raw, json)
Hash identifier: pG0JCNwPDMsrPItSENLlQB7KGeoiiHgJH4V3ytDoFEw=
Subject key identifier: F9:49:DF:CC:0D:DA:B8:09:B2:89:AA:17:22:17:3F:BE:86:2E:D4:C9
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 0185704BA2D42CC823D119B37093CA0A7E24
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/1-UnfzA3auAmyiaoXIhc_voYu1Mk.roa
Signing time: Mon 02 Jan 2023 02:24:43 +0000
ROA not before: Mon 02 Jan 2023 02:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47576
IP address blocks: 185.251.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 09 Jan 2023 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:a2:d4:2c:c8:23:d1:19:b3:70:93:ca:0a:7e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Jan 2 02:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f949dfcc0ddab809b289aa1722173fbe862ed4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:23:13:f8:34:5f:f8:40:62:ae:91:85:56:57:
04:f8:0d:01:5d:b8:e3:af:93:21:51:d3:dd:22:6c:
75:b7:b2:ba:ab:cd:00:22:90:7f:29:cd:a6:99:36:
f0:e1:2a:25:36:6d:b3:b9:8b:09:82:68:22:4b:35:
94:8a:7d:e9:6c:e4:5a:65:87:d8:ac:ca:85:2d:71:
bf:68:7e:53:3f:cf:6b:17:d8:87:9b:d7:99:0b:93:
f3:20:5d:31:c2:8f:7e:a4:fc:a0:3c:7e:6a:48:9c:
bb:3e:ed:62:32:6e:58:30:e6:81:e7:b9:e1:6c:b8:
26:5b:d9:3b:cf:37:93:39:32:c8:27:32:57:52:ca:
68:42:13:04:41:82:bb:94:87:0b:2d:4f:25:b5:69:
38:4b:49:a1:68:30:3c:05:3b:87:58:7c:9e:66:2b:
9a:4f:6d:43:95:7f:fe:65:64:52:0f:5d:85:11:6c:
64:fa:41:1b:e4:5e:46:51:e3:10:46:a2:f6:69:d7:
ef:8d:aa:bb:8b:7e:fd:49:9e:a3:7f:28:7a:98:45:
de:2d:21:9b:3c:d1:14:e6:78:82:2e:7c:48:2b:da:
93:ef:36:71:7c:e3:06:c9:cb:70:02:e4:55:73:c5:
37:53:d5:29:93:dd:2d:e8:6e:a1:ab:ec:b4:d7:0f:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:49:DF:CC:0D:DA:B8:09:B2:89:AA:17:22:17:3F:BE:86:2E:D4:C9
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/1-UnfzA3auAmyiaoXIhc_voYu1Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:41:ba:ea:ae:94:8d:77:cc:cd:53:bb:0e:79:c4:c0:f3:72:
2a:a2:c4:36:d2:77:20:0d:63:43:d5:71:c0:8e:e6:dc:e4:01:
34:be:fe:61:0d:02:c6:79:99:62:e0:eb:a0:af:79:37:a9:64:
b5:36:e9:5d:1b:fd:71:8b:fa:d4:0e:91:fc:bd:51:d1:15:0b:
1e:78:f7:66:76:52:a7:16:5d:0b:30:04:18:68:f9:59:0f:96:
02:06:7e:4b:ca:f2:37:a5:be:f8:cb:b4:4c:20:02:6c:7f:bd:
57:73:fc:24:0a:64:57:79:e4:58:67:ce:5c:1a:7e:fb:f3:5b:
60:44:0d:d8:5b:21:49:3c:88:85:72:9e:12:e9:b7:f1:47:5a:
98:c3:8d:33:86:0f:24:46:fa:37:cc:2d:bc:4f:52:13:7e:7c:
38:39:b1:ea:8d:15:8b:73:a4:72:22:c1:f7:67:5d:be:b9:db:
3f:f6:89:f2:02:57:7a:fc:56:96:af:4d:0e:6b:c6:83:14:12:
5c:dc:4b:33:15:aa:4c:54:3c:14:07:47:55:35:56:72:7d:df:
43:c8:4b:f3:a3:79:a9:98:5f:88:19:e9:f1:f7:a0:25:64:6e:
9d:6f:0c:b4:05:ca:ae:5e:45:2e:f8:ef:ab:9f:c6:a6:76:54:
68:96:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:55 2024 by rpki-client on console-fra.rpki-client.org