Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wySgBavrjADu24hVzcIbC2bJdpE.roa
File: wySgBavrjADu24hVzcIbC2bJdpE.roa (raw, json)
Hash identifier: EFz8ONEFUV/k8/pBj9LpBZKxSTgombANYm7SNdHF5JQ=
Subject key identifier: C3:24:A0:05:AB:EB:8C:00:EE:DB:88:55:CD:C2:1B:0B:66:C9:76:91
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53FA518420D4E5CB08B8F6BC62570F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wySgBavrjADu24hVzcIbC2bJdpE.roa
Signing time: Sun 01 Jan 2023 07:55:20 +0000
ROA not before: Sun 01 Jan 2023 07:55:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51561
IP address blocks: 185.184.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:fa:51:84:20:d4:e5:cb:08:b8:f6:bc:62:57:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c324a005abeb8c00eedb8855cdc21b0b66c97691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:cf:ca:f8:b7:ff:7a:34:d6:e1:a3:46:0a:
3d:d5:3c:33:d7:32:32:c5:db:d6:9a:ec:8d:d3:57:
4d:54:65:7a:6c:a6:37:05:3a:e2:83:fc:10:16:27:
3b:17:ae:d0:6b:ae:44:31:0c:48:5a:7b:41:14:c4:
64:37:6a:e6:a6:0c:d0:db:83:0b:eb:5f:57:73:a6:
3a:94:03:4d:0c:cc:b1:b9:d6:8f:7b:3c:65:78:f6:
d8:1b:03:e2:c0:01:c9:49:16:2e:b6:e8:cc:a2:26:
95:63:0e:6c:d0:e7:41:ef:cc:c4:c3:b9:27:88:74:
5c:fe:4b:c0:fb:d2:de:73:de:2d:8e:a3:9a:51:bb:
b1:cb:b7:3e:7d:0f:3e:c1:a1:6f:74:a2:31:af:3c:
db:50:52:1e:22:6b:23:1b:03:a9:9e:f5:82:89:6e:
c2:a9:04:da:b3:f5:ac:f8:4f:ec:12:6f:7d:0c:34:
6f:66:3c:51:c0:c2:db:97:6f:6f:d3:0c:41:b4:d9:
00:9e:c3:95:8e:28:34:07:de:27:c1:b0:8f:3c:c2:
ba:0d:38:d5:f1:e1:29:c7:a4:a0:05:5d:cb:cc:e7:
d5:b8:70:3a:e3:7b:aa:1b:b4:79:c9:4c:7b:8b:de:
95:99:d2:6b:7a:8c:d6:40:0e:5e:1e:82:ee:d1:24:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:24:A0:05:AB:EB:8C:00:EE:DB:88:55:CD:C2:1B:0B:66:C9:76:91
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wySgBavrjADu24hVzcIbC2bJdpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a3:af:1b:4d:d8:ed:f2:b1:fb:69:5f:e9:49:28:40:c4:79:
9f:c4:f9:e2:c2:d4:92:90:f0:95:13:1b:df:0e:dd:85:8a:8f:
40:90:a1:88:a9:73:2b:80:15:d5:8d:21:50:6c:b6:12:8f:d9:
f8:ce:e7:cb:f6:90:02:4d:0b:66:97:47:02:e4:e0:c1:61:0d:
9e:55:a0:0c:9b:45:21:0f:b1:f8:a2:46:90:7c:41:5e:1e:1d:
88:77:54:35:bb:97:21:fc:d6:43:b7:75:d1:c9:81:0e:df:86:
39:24:da:17:ae:55:ca:d7:91:a0:8f:ad:20:65:e5:36:d5:ac:
c8:af:7a:63:da:a2:ec:99:24:7c:d3:7b:3d:6e:d7:a4:ad:38:
ac:88:3f:45:15:04:fc:8e:01:5f:42:15:65:79:14:f0:2b:29:
78:55:f1:d3:ba:62:56:77:a5:eb:b6:c6:96:66:cc:de:60:e2:
3b:7a:34:a5:58:1f:0a:a2:43:cc:9f:e6:2d:b1:bc:e7:94:c2:
56:5a:86:b4:a8:f5:cc:92:e1:41:54:1b:0b:60:4a:38:6b:29:
d8:a4:c2:a7:6c:73:2a:b2:68:09:8f:d0:0d:40:f8:a1:c6:8d:
c1:10:35:4a:4c:8d:8f:59:8b:a7:9e:02:b1:f9:1c:6d:79:96:
db:e4:c2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org