Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/wA3eOWBi7qdQD4P496FqSlEktsY.roa
File: wA3eOWBi7qdQD4P496FqSlEktsY.roa (raw, json)
Hash identifier: fXMC1KH5TsmYFM9pZmDlsYfL/WcUF8xY2irKc9+rQKI=
Subject key identifier: C0:0D:DE:39:60:62:EE:A7:50:0F:83:F8:F7:A1:6A:4A:51:24:B6:C6
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 01880FDE56B4F235DC851B0B5A90F2CBB44C
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/wA3eOWBi7qdQD4P496FqSlEktsY.roa
Signing time: Fri 12 May 2023 12:10:09 +0000
ROA not before: Fri 12 May 2023 12:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209588
IP address blocks: 92.51.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:de:56:b4:f2:35:dc:85:1b:0b:5a:90:f2:cb:b4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: May 12 12:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c00dde396062eea7500f83f8f7a16a4a5124b6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:c1:3b:f7:ea:fd:19:c0:2d:34:a7:ff:ff:
6c:81:db:74:bf:ca:3e:58:3d:97:9f:90:b3:e1:98:
bb:19:ef:96:b0:79:ba:82:1f:87:3e:cf:a8:c1:36:
f6:c3:53:f6:f4:fb:e0:27:aa:b6:48:f4:13:35:40:
01:66:65:ac:7d:67:99:64:43:76:3b:8c:ab:67:a9:
4e:9f:d3:63:b5:a3:78:71:18:e8:bd:e9:fc:5e:6a:
34:b9:fa:7c:f8:40:bd:04:20:30:c4:68:2b:60:c9:
a1:7e:93:11:2b:38:11:c4:d1:8c:40:d7:77:dd:18:
40:a9:43:ac:ff:89:8e:e6:a3:e5:fd:54:02:88:4f:
f0:05:11:71:9f:4f:19:e8:84:c0:32:0d:9b:6f:0d:
e0:05:d8:57:0b:67:0c:e9:e5:f9:b7:5f:8a:98:4f:
8b:33:35:e7:43:34:cb:f9:03:4f:81:c1:ac:19:db:
2f:03:c6:02:a7:f8:82:24:a9:4a:76:22:f7:a5:2c:
fd:26:2b:fd:7f:67:f9:d8:80:a5:51:7c:de:b3:4b:
2e:b6:64:d1:0b:12:0f:8e:cf:28:d7:96:25:62:b1:
8c:76:16:c4:43:20:d1:12:33:79:4b:bd:50:4d:46:
00:fd:dd:f0:26:84:1b:09:35:fb:0d:68:6e:eb:82:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0D:DE:39:60:62:EE:A7:50:0F:83:F8:F7:A1:6A:4A:51:24:B6:C6
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/wA3eOWBi7qdQD4P496FqSlEktsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.2.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:64:b7:bc:a4:6f:7f:27:30:33:19:f1:b8:73:ae:a0:10:c6:
7c:80:28:53:e2:3f:d7:f7:14:d1:35:68:89:17:49:a0:57:8f:
c3:16:31:b2:6a:6b:4d:cd:a5:e3:0d:85:a9:7e:a6:a2:dd:82:
6b:85:16:07:4a:43:6e:fc:71:7b:81:c1:03:6c:9a:71:a9:4a:
1e:da:69:72:7d:85:df:64:19:e3:98:76:f6:f4:3b:f6:33:0a:
20:44:b5:1b:de:7c:87:f6:c7:b5:a5:91:7d:8c:68:ec:88:e2:
79:73:3c:41:0e:2c:8f:a2:be:21:5e:e6:f3:33:a8:d3:94:00:
e8:5d:65:44:bc:53:e8:08:ce:50:78:49:95:56:ac:83:07:ea:
7d:b8:16:5f:00:f0:86:93:8e:45:93:d2:4a:5a:1e:7e:fa:9d:
e9:8a:04:51:9e:2d:2c:4a:d7:91:69:35:39:5c:de:ca:8e:69:
ab:fb:54:0b:03:06:39:b2:d3:2f:32:d1:5f:34:cb:42:ea:ea:
84:49:98:33:e1:d2:58:ee:c7:d1:b8:f0:19:42:4b:d9:f6:5f:
b8:94:00:41:dd:3f:82:67:66:bf:f1:d6:67:f9:c1:d8:cb:e5:
c8:a6:68:8a:1c:ae:94:b7:3c:8e:d3:ca:fe:4c:c6:da:c4:f1:
f3:36:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:57 2024 by rpki-client on console-ams.rpki-client.org