Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/w6dyelQktaywkwB6yFNuNr3cmxA.roa
File: w6dyelQktaywkwB6yFNuNr3cmxA.roa (raw, json)
Hash identifier: TvmTqilGjF6nMEqC68YR4ORW35sPdSHfGlhGNXRcfEU=
Subject key identifier: C3:A7:72:7A:54:24:B5:AC:B0:93:00:7A:C8:53:6E:36:BD:DC:9B:10
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF969E69B44589B5CEBDA5884DF4E4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/w6dyelQktaywkwB6yFNuNr3cmxA.roa
Signing time: Tue 02 Jan 2024 06:32:25 +0000
ROA not before: Tue 02 Jan 2024 06:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42922
IP address blocks: 185.252.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 13:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:96:9e:69:b4:45:89:b5:ce:bd:a5:88:4d:f4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3a7727a5424b5acb093007ac8536e36bddc9b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:23:b7:8e:b0:85:56:4b:a7:62:71:78:ee:
54:19:5b:45:e7:e1:8a:c2:00:ed:d4:b5:f8:49:06:
0f:a5:55:24:61:08:26:60:1b:d0:19:af:f9:d3:e0:
da:3c:13:bd:1e:d1:80:06:2c:80:f7:5b:e0:15:31:
61:de:0f:92:0c:3a:5e:44:12:36:32:d6:09:a6:e6:
7c:bc:1b:47:33:88:8d:8e:e4:98:b5:88:14:95:f2:
fd:9d:9a:49:af:b7:ee:10:9e:cb:ed:71:f7:64:0e:
63:d6:ab:20:10:1d:3c:70:e5:66:88:e5:12:b2:3b:
8d:df:81:90:75:d3:c5:ce:82:b3:79:d8:46:b9:8d:
9c:6a:31:95:cf:27:bb:17:eb:e2:08:d7:3d:87:5d:
b5:0b:9f:c9:91:bf:3f:dc:40:86:6f:63:d1:43:f6:
0f:92:dc:db:cc:60:18:00:d3:ca:41:17:05:cb:1b:
3e:a8:b5:86:41:ed:15:40:f9:d8:83:8e:49:49:65:
cb:25:6f:b3:37:a2:44:4e:91:9d:53:81:0e:49:c8:
cc:f1:61:27:a1:59:8c:d4:2b:78:e3:d8:47:7a:19:
d0:5f:c9:b2:50:49:74:1f:84:43:50:40:ae:6a:82:
8c:ba:69:90:3e:2c:3d:fc:7b:58:2a:a2:63:0c:c0:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A7:72:7A:54:24:B5:AC:B0:93:00:7A:C8:53:6E:36:BD:DC:9B:10
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/w6dyelQktaywkwB6yFNuNr3cmxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.145.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c9:b9:6b:c2:2d:ee:b6:77:b6:59:da:51:aa:54:70:40:6a:
ef:b8:20:48:22:a2:14:88:4a:1a:10:22:03:7b:52:da:6e:f0:
8b:93:f7:5f:84:4c:d6:74:96:32:38:98:e7:d3:5e:29:71:24:
cb:05:bd:11:d9:8a:73:39:cc:13:13:90:a7:c4:de:32:c5:51:
eb:97:ce:8e:13:01:db:55:ee:8f:12:87:34:7e:4d:cb:f5:db:
84:fe:2e:ae:ae:1c:e9:ef:3b:85:15:98:7c:2a:2d:43:48:e2:
68:4d:db:4c:cb:f2:b7:6a:1e:1c:ce:c8:67:df:8e:7e:e1:a2:
38:bb:6d:7d:21:ae:5c:3d:cd:57:6f:7e:58:aa:d2:4d:ae:7d:
c2:53:9d:79:73:c9:ea:db:15:55:c9:51:11:1e:d4:62:9d:12:
a1:14:4f:37:a4:da:03:b1:7b:63:bd:6f:98:d9:60:f0:86:47:
77:0f:0d:09:cb:a3:e1:5c:bc:75:85:f0:1f:7d:09:67:51:d4:
e0:c0:ac:2b:5a:03:a5:e0:bf:fb:5f:a9:f7:41:c2:55:10:a5:
57:96:12:45:21:ad:ae:1d:8e:f2:9f:0f:5f:96:95:de:99:cd:
c4:66:9c:b8:d2:b8:8c:ef:75:1c:0e:dd:de:0f:8e:f0:67:f8:
c1:20:e7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org