Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/51BTwTxNp1XIT7Srg0nhE1rfCqo.roa
File: 51BTwTxNp1XIT7Srg0nhE1rfCqo.roa (raw, json)
Hash identifier: 2lFbCe5k1bNedEMfOnM/sfHxwZDr+OqYy9oWtNcF2HA=
Subject key identifier: E7:50:53:C1:3C:4D:A7:55:C8:4F:B4:AB:83:49:E1:13:5A:DF:0A:AA
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 01879F38A11236F40F958B12953D41344439
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/51BTwTxNp1XIT7Srg0nhE1rfCqo.roa
Signing time: Thu 20 Apr 2023 15:11:41 +0000
ROA not before: Thu 20 Apr 2023 15:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 92.240.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:38:a1:12:36:f4:0f:95:8b:12:95:3d:41:34:44:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Apr 20 15:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e75053c13c4da755c84fb4ab8349e1135adf0aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:0b:83:d1:b0:0b:23:e9:31:3f:45:c9:a7:
bf:14:fc:0e:3c:2c:61:bf:b3:f5:e3:87:b9:70:ed:
e0:35:36:f7:9f:80:1f:8e:e4:49:7e:2a:35:ab:0e:
96:e0:39:04:3d:cd:4e:6a:5d:d0:97:08:72:8f:05:
3f:f0:56:84:2d:27:73:d3:ef:94:87:0b:db:ee:80:
6b:2c:58:1a:46:94:66:ea:0e:66:e5:69:55:f9:a5:
22:cd:0d:63:39:83:0c:82:b2:ea:e0:c7:01:fc:9b:
ac:21:03:dc:df:86:a8:32:d9:01:16:59:51:d9:40:
68:f2:76:7f:d3:aa:1a:46:47:c8:ca:f9:c7:94:b4:
15:f6:9b:7c:89:ab:84:c9:da:bd:37:ce:61:58:a6:
fe:f2:73:83:41:60:91:94:c9:ee:44:eb:33:ff:bb:
2c:90:f8:1a:ad:e2:eb:50:f1:c9:a5:1c:6d:52:6f:
ce:f3:5f:1c:09:3c:ed:93:74:6b:c1:9f:9e:c4:4f:
50:6a:fd:1d:ea:e4:a7:80:7d:63:5c:88:ff:12:36:
e6:db:79:65:23:10:73:5d:9f:5e:6f:3a:ab:4b:c3:
a5:43:27:fa:36:1b:76:6a:8b:6a:40:24:af:a5:fc:
df:76:d9:0a:6a:de:cf:7d:23:6e:59:d9:d3:2b:02:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:50:53:C1:3C:4D:A7:55:C8:4F:B4:AB:83:49:E1:13:5A:DF:0A:AA
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/51BTwTxNp1XIT7Srg0nhE1rfCqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5e:91:07:5e:b5:bd:65:3d:f2:a6:13:f7:38:76:89:03:26:
d6:e2:b5:a3:28:f2:89:be:44:00:27:d4:72:6f:67:46:db:b1:
f3:1f:1c:3d:19:7c:ca:a9:dc:3a:5b:cb:88:ef:3b:15:b3:1c:
75:8d:0e:ce:b0:aa:a4:ff:00:64:62:21:2d:04:8b:79:4f:c5:
4c:0d:c4:9a:68:9e:98:f5:33:63:4d:27:80:7c:ba:68:53:3a:
00:58:7b:b9:36:58:32:ec:7b:3f:e3:9a:08:61:81:a7:b3:e9:
c7:cf:9a:6a:61:e7:33:6a:01:57:c5:5b:24:55:e9:ff:27:4d:
15:07:75:e3:e2:3a:2b:d9:4c:38:67:0e:c5:b4:78:93:f2:57:
6c:9c:7b:91:37:ad:70:3f:03:a0:dd:83:1c:29:cf:81:3d:8b:
03:f0:35:5c:ff:7b:8f:34:80:26:2e:bd:ca:21:8a:c3:c5:71:
07:54:47:45:ac:fd:de:db:54:33:25:c2:28:0e:e6:72:60:10:
64:a3:ea:93:c5:36:65:f2:74:02:46:40:4b:25:2b:81:be:a3:
fa:66:25:6c:84:f5:0f:24:14:f3:8b:74:20:5d:a3:e4:eb:a5:
af:8b:2f:a0:e6:64:36:66:41:00:b5:1f:da:00:e1:f0:66:b4:
81:d5:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 11:31:08 2023 by rpki-client on console-fra.rpki-client.org