Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/KOFwsNcmMPJzDxpOaxfzFLo4MDo.roa
File: KOFwsNcmMPJzDxpOaxfzFLo4MDo.roa (raw, json)
Hash identifier: 0p5k0VepzPd94TCoQCSnuCtP7JRKMKOuMPwz0vOkEy4=
Subject key identifier: 28:E1:70:B0:D7:26:30:F2:73:0F:1A:4E:6B:17:F3:14:BA:38:30:3A
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 0187EB67F75A456B6DA8631C5687217E47D9
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/KOFwsNcmMPJzDxpOaxfzFLo4MDo.roa
Signing time: Fri 05 May 2023 10:14:31 +0000
ROA not before: Fri 05 May 2023 10:14:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.157.51.0/24 maxlen: 24
185.157.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:67:f7:5a:45:6b:6d:a8:63:1c:56:87:21:7e:47:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: May 5 10:14:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28e170b0d72630f2730f1a4e6b17f314ba38303a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:11:3a:ee:b0:f2:af:09:5a:07:8e:d8:4e:35:
4f:e9:ad:54:04:84:df:54:62:02:15:1a:c4:a2:76:
65:69:3c:5d:32:c1:42:85:6f:ad:8d:cc:e2:77:16:
1b:d8:44:a9:69:c6:20:99:65:87:a2:75:65:10:14:
25:50:aa:67:91:27:89:f3:4c:5b:fd:a9:6a:c9:a7:
af:a4:f2:32:63:24:2e:a8:e1:34:d9:29:d6:bf:3c:
12:f2:81:51:e4:42:df:08:e8:d4:c2:98:4a:ee:e9:
a2:34:d9:1c:c5:f2:8a:dd:ec:43:c1:5e:e6:a1:2e:
bc:69:ba:91:f4:8e:3c:44:9c:f7:a4:85:2a:7f:6d:
16:54:15:7f:54:86:cc:a5:fe:3b:e7:29:5b:a1:fa:
46:39:3c:3f:78:1e:b1:8c:fa:09:71:a4:d4:d4:cd:
be:af:85:b4:fe:5e:e2:83:a5:56:9b:9c:5b:29:9c:
3e:d6:09:c4:5a:01:12:12:24:fc:cf:06:57:9b:4c:
d9:f8:15:68:6b:25:a8:80:3f:b0:43:7c:e9:5f:c6:
95:ca:3e:ce:5b:d0:45:92:7e:2e:99:03:30:c8:03:
69:cf:dd:6e:b5:c3:5b:21:2d:db:6e:5f:05:55:f3:
fd:1f:ca:a0:92:7d:70:27:85:cf:5d:89:a5:95:8a:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E1:70:B0:D7:26:30:F2:73:0F:1A:4E:6B:17:F3:14:BA:38:30:3A
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/KOFwsNcmMPJzDxpOaxfzFLo4MDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.50.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:4e:7a:c9:ae:d6:7e:7e:4c:ac:14:0a:72:31:dc:62:6d:25:
af:8f:dc:82:49:47:88:78:48:50:b6:5e:f3:c1:d9:a8:20:b6:
73:a1:62:5a:17:17:82:f0:47:8e:14:22:7b:e0:84:1e:15:d6:
13:22:cb:d5:4d:87:fb:4d:0c:86:1a:c7:90:59:26:35:15:c6:
8e:cc:7a:c6:da:f1:f5:40:7c:a4:b0:ba:b2:98:ba:e8:bf:1b:
6f:54:ba:21:fb:59:55:7d:32:45:3b:18:be:4f:1b:98:8d:58:
4a:cf:63:63:8d:34:c6:5f:f6:06:2d:c7:e4:46:64:87:27:c5:
cc:44:27:b5:46:73:94:fc:2a:e3:9f:97:3c:05:6e:5c:8b:4d:
a5:52:cd:d9:54:03:9b:5d:2c:93:8a:87:d4:29:34:05:f5:0c:
dc:03:0d:9f:9a:84:5c:ba:bd:c7:d2:0f:37:c7:36:74:4d:4e:
f1:c3:2d:25:85:86:a9:c8:13:de:30:8a:36:63:3c:0a:0f:a2:
27:ff:12:35:9b:44:41:1d:d0:16:7e:e3:3b:74:7b:31:e3:8c:
9b:08:a9:47:4d:64:4e:49:23:83:3f:19:8e:db:b2:b1:f6:1b:
ca:1d:98:31:00:b9:cc:ed:bd:2e:8e:6f:67:50:01:b7:bf:99:
01:11:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:16 2024 by rpki-client on console-ams.rpki-client.org