Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/uWyHcErhELnk0cXNpWsXvvz_Sl4.roa
File: uWyHcErhELnk0cXNpWsXvvz_Sl4.roa (raw, json)
Hash identifier: /mgiicvNNAI3HRiV7MomxP43gtfww+huGbmaHXMSMg8=
Subject key identifier: B9:6C:87:70:4A:E1:10:B9:E4:D1:C5:CD:A5:6B:17:BE:FC:FF:4A:5E
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 0186EA524B32FD54BFCE49A1FC6B4FF382E1
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/uWyHcErhELnk0cXNpWsXvvz_Sl4.roa
Signing time: Thu 16 Mar 2023 12:08:27 +0000
ROA not before: Thu 16 Mar 2023 12:08:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 92.51.39.0/24 maxlen: 24
92.51.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:52:4b:32:fd:54:bf:ce:49:a1:fc:6b:4f:f3:82:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Mar 16 12:08:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b96c87704ae110b9e4d1c5cda56b17befcff4a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:c1:a9:d1:45:b7:ce:0a:d2:31:c0:18:69:
83:fa:16:78:d9:15:56:1e:8c:d0:27:1b:ca:32:16:
45:75:01:15:6f:95:5d:1f:53:93:c1:83:17:f6:e0:
9e:5a:b7:11:f7:f2:c7:c5:ce:4f:a9:2f:62:18:4e:
1d:69:ee:62:26:04:dd:fd:68:7d:28:2b:17:3a:4f:
1d:0e:49:f1:d7:7d:6a:1e:4a:69:f4:67:a0:7a:29:
56:49:eb:60:7c:07:fa:52:a2:fa:e1:7d:66:2e:d1:
4f:7a:19:53:a2:d7:23:bf:52:7b:b2:05:a9:32:43:
8a:c9:39:b1:f2:e3:70:67:00:8d:a1:b4:1f:08:60:
51:1e:63:b6:45:2a:2c:e4:65:21:eb:5e:4a:49:d8:
a5:47:a9:a0:2f:f3:fd:9d:9d:35:24:86:99:eb:66:
f8:fe:45:70:3f:85:0c:73:3b:0f:16:ef:73:54:40:
7f:92:31:c5:4a:7f:29:98:cb:ac:c0:9f:61:a5:b2:
b3:6e:5d:22:8e:e3:49:e6:33:a5:4d:c7:7f:38:3a:
6a:82:03:48:23:03:2e:bf:da:2d:23:00:c5:42:e0:
98:44:fd:cb:0f:f0:c2:bf:17:b3:e4:a9:38:2f:60:
86:37:6c:73:76:46:d5:35:0e:62:58:a5:f0:15:71:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6C:87:70:4A:E1:10:B9:E4:D1:C5:CD:A5:6B:17:BE:FC:FF:4A:5E
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/uWyHcErhELnk0cXNpWsXvvz_Sl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.38.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:95:61:fa:68:74:4f:b3:bc:de:bf:e4:5b:38:f0:f7:d7:f0:
f6:c3:60:7d:0c:e0:1c:c7:96:6f:27:39:f9:aa:31:40:97:03:
af:b8:83:5f:ef:5e:a3:9d:30:7e:19:87:d7:7e:74:d7:35:23:
77:98:3a:d8:52:74:04:9d:e7:7e:a6:20:89:22:fd:65:91:f5:
4f:f5:45:46:33:1f:04:3d:08:22:72:02:04:48:46:29:6f:34:
ee:62:9c:12:8f:71:23:50:7c:a6:ee:47:cf:f8:8a:ba:93:f7:
ce:a9:a5:77:62:f6:df:04:f1:4a:61:09:67:5e:bd:76:58:01:
6d:d7:7f:5b:34:d3:15:1c:c8:6d:a1:ea:08:30:b4:ba:90:94:
87:69:92:1a:5a:57:f5:50:a2:f1:40:6f:48:01:8f:b3:7e:cb:
6b:39:b7:2f:49:80:70:a1:04:0a:4a:7f:17:03:a5:bf:1b:d0:
dc:2e:67:c3:8b:80:12:55:55:90:7d:22:ac:ac:50:b9:2c:c9:
cb:0c:b7:6d:c4:88:23:76:48:50:f2:41:48:ae:34:bd:30:4c:
33:53:7d:e1:a9:ec:d0:99:57:6c:55:bf:05:d6:63:ed:00:61:
bb:cb:0b:03:3f:ac:e7:dc:b2:f8:ae:b5:b5:44:97:f0:de:a3:
68:29:dd:e6
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 23 20:13:38 2023 by rpki-client on console-fra.rpki-client.org