Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/rcs_CTow1CSd5Pgz9bxYEYpgUMA.roa
File: rcs_CTow1CSd5Pgz9bxYEYpgUMA.roa (raw, json)
Hash identifier: 19xQW8p4XdqjLAiEV+etSK/XV89//8egkjZxALJTZhw=
Subject key identifier: AD:CB:3F:09:3A:30:D4:24:9D:E4:F8:33:F5:BC:58:11:8A:60:50:C0
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 01870F159ACA52455633B73C8FD6A3A62260
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/rcs_CTow1CSd5Pgz9bxYEYpgUMA.roa
Signing time: Thu 23 Mar 2023 15:28:06 +0000
ROA not before: Thu 23 Mar 2023 15:28:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43431
IP address blocks: 185.76.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:15:9a:ca:52:45:56:33:b7:3c:8f:d6:a3:a6:22:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Mar 23 15:28:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adcb3f093a30d4249de4f833f5bc58118a6050c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:ad:d2:f8:6a:8e:43:04:71:6f:2e:01:46:
85:d3:51:96:df:9a:74:2c:63:58:e9:af:e8:d4:38:
60:e0:f6:81:75:6d:63:f6:af:6e:cb:8a:fc:69:6f:
1e:36:57:94:39:c1:60:69:a1:2a:c6:26:ba:94:16:
60:b9:2e:5c:23:a7:e2:3d:07:54:a4:29:03:3b:50:
ac:93:c6:e4:52:b3:d6:78:d9:eb:96:c0:9b:28:29:
8b:00:82:81:62:68:2b:6d:2e:09:a4:21:16:ee:be:
1a:56:1f:e4:f8:d3:21:d0:29:17:b1:33:2b:d4:8a:
f1:ff:0a:f5:c3:a8:d8:a9:d0:63:20:2b:dd:c2:ed:
f2:30:c9:ce:ed:3a:b2:ab:f5:85:62:32:db:4b:79:
db:67:ad:51:43:74:1a:a7:2f:99:98:ad:a6:c9:d1:
02:9a:b2:e9:22:5a:7c:ff:4f:c6:c8:98:28:64:da:
6c:75:24:63:2b:c0:a1:32:e4:04:88:12:6b:ee:20:
e9:82:66:81:dc:df:01:f7:12:71:65:9c:bb:0c:86:
d0:88:36:81:5b:9f:c2:a1:57:1e:1d:db:ad:f4:be:
c4:4d:39:77:62:fa:e2:52:d2:0e:22:c2:99:29:8a:
55:ad:2c:fc:77:ba:14:76:ab:62:56:e6:02:0e:50:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CB:3F:09:3A:30:D4:24:9D:E4:F8:33:F5:BC:58:11:8A:60:50:C0
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/rcs_CTow1CSd5Pgz9bxYEYpgUMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.42.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c2:93:e1:b7:69:2f:48:f7:f9:40:38:b5:18:1b:d9:d6:a0:
a2:0c:90:f5:df:55:c1:73:7a:d2:91:1a:a9:0d:25:40:e5:37:
85:0c:ba:fd:fe:2d:9a:3d:04:e1:7e:1b:3c:5c:5c:39:75:3f:
ef:06:32:da:2c:63:33:d0:c9:23:19:e9:3a:99:8e:07:34:42:
11:e9:41:c6:ca:9b:43:4a:a6:1b:f0:8c:33:9c:e9:d6:35:62:
91:6b:79:37:f2:d3:40:ba:e5:e6:37:cd:c5:97:c3:9d:55:fa:
14:a3:57:6f:09:ae:4f:e6:0a:64:89:e8:3f:61:25:bf:79:3a:
d7:a8:37:73:b3:9c:40:be:48:70:f6:70:c1:c6:82:20:48:f9:
de:a2:a0:a1:b7:11:bd:37:50:27:5c:e1:2b:26:3c:f5:21:25:
56:5d:b4:7f:a4:58:75:aa:6e:ca:57:02:39:5a:e5:bf:77:8a:
8d:a2:16:f0:14:26:ad:21:b8:98:9d:2e:b1:8e:04:76:ac:8c:
fe:39:53:df:e3:7b:2d:74:d6:73:ad:32:8c:72:b9:40:29:dc:
69:2a:7a:f1:2f:f1:3a:28:ed:cb:4e:33:34:d7:88:e0:8d:f2:
6a:23:21:18:72:bd:b1:e4:bf:93:e2:40:8b:de:3e:67:6f:7f:
19:40:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:25 2023 by rpki-client on console-ams.rpki-client.org