Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/WysCB2qz84pfeYjTSS_Uj1IWjOA.roa
File: WysCB2qz84pfeYjTSS_Uj1IWjOA.roa (raw, json)
Hash identifier: finBB5+jFUyz4j5vAVdjpsghl0s8FCKUDlLK20t0JhA=
Subject key identifier: 5B:2B:02:07:6A:B3:F3:8A:5F:79:88:D3:49:2F:D4:8F:52:16:8C:E0
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0185710C35D41DFDC4AC531A3AA848293943
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/WysCB2qz84pfeYjTSS_Uj1IWjOA.roa
Signing time: Mon 02 Jan 2023 05:55:03 +0000
ROA not before: Mon 02 Jan 2023 05:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209181
IP address blocks: 92.249.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:35:d4:1d:fd:c4:ac:53:1a:3a:a8:48:29:39:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 05:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b2b02076ab3f38a5f7988d3492fd48f52168ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:9d:02:ff:a2:3f:c5:e9:fd:45:45:8a:c4:
d0:f9:89:84:38:59:92:13:5a:2d:aa:20:9f:06:58:
05:6a:67:fa:6c:dd:20:be:b7:7c:2a:b9:34:79:24:
4a:d1:95:35:95:eb:47:61:fc:b0:c3:45:05:46:3e:
d0:b9:fe:3d:e2:53:6a:ac:dc:b7:03:51:3b:80:18:
28:94:b4:3b:82:03:5f:65:49:34:6b:8b:d5:b6:99:
4c:f7:85:ab:9d:0d:97:98:fd:92:fb:eb:05:67:11:
23:df:4b:4f:02:6e:a6:d6:c3:6c:44:36:29:01:b3:
7d:54:6e:dd:8e:2a:ac:fd:27:01:95:fb:0a:98:80:
bf:d7:f5:07:b4:8a:cb:48:4b:e1:51:49:e4:4a:dd:
48:01:7d:a5:68:80:42:66:f2:79:0b:8b:16:73:4a:
14:58:bd:62:b1:6f:60:5a:77:eb:79:54:01:a0:7b:
bb:67:20:23:72:ae:6f:ae:9d:96:db:d9:30:3f:b6:
84:60:df:6c:5d:d5:24:2a:ef:94:01:72:ed:73:f1:
18:b4:ec:d0:a7:f2:e1:10:39:fd:16:ea:e3:6a:96:
4d:27:dd:d2:72:4c:7f:92:4f:be:f3:b3:3e:13:45:
ad:bc:8f:47:15:09:3e:cf:d4:ed:6d:65:d8:ce:a1:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2B:02:07:6A:B3:F3:8A:5F:79:88:D3:49:2F:D4:8F:52:16:8C:E0
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/WysCB2qz84pfeYjTSS_Uj1IWjOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.30.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ef:fa:69:41:11:4a:74:a1:34:49:67:30:c1:5c:85:d3:95:
e8:56:7f:a9:25:8d:de:21:aa:f6:8b:35:b0:6f:2e:f6:ef:11:
6d:9b:dc:87:49:4e:82:1c:d4:2b:b6:b2:76:39:be:df:c8:a5:
ce:d8:f6:5a:7e:07:a0:6c:9e:7d:f9:c8:de:8a:4c:cc:dd:6f:
4d:16:54:1f:c0:b3:75:03:b2:34:42:41:a0:4b:bc:8e:89:13:
2f:0f:fb:8b:f7:62:4a:72:1e:f3:f9:53:68:0c:16:6d:ac:3c:
a8:d3:6f:87:cc:34:92:23:4e:67:55:3a:25:c8:d7:87:78:d5:
45:c5:8f:90:c3:f6:1e:16:29:a1:a0:c6:51:99:8c:19:ef:05:
17:d5:42:df:64:27:28:09:c6:27:bd:61:19:a3:e2:7c:f4:56:
4f:48:5e:42:4d:0d:85:de:94:b8:d6:7d:99:2b:c1:20:bb:ff:
6c:f5:33:3e:ea:cf:0c:77:84:a3:13:4f:0d:7e:93:6a:14:ad:
80:fc:e2:35:1e:f6:80:d2:8d:22:f7:07:78:c3:43:66:53:d6:
b6:f6:71:7b:1f:18:a7:f9:75:73:17:6c:e8:0f:7b:1c:5a:da:
24:89:4c:21:92:b6:55:e3:66:f3:83:26:2f:a3:89:80:21:09:
02:77:ec:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:39 2024 by rpki-client on console-ams.rpki-client.org