Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/owSGF1Q7ViCxtT448-JTFn-KjBg.roa
File: owSGF1Q7ViCxtT448-JTFn-KjBg.roa (raw, json)
Hash identifier: g3BKgKbtcVZ8GmbaQBEsKqQOTUsiXnJcK4nGxK5+2vM=
Subject key identifier: A3:04:86:17:54:3B:56:20:B1:B5:3E:38:F3:E2:53:16:7F:8A:8C:18
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01856F79753E7ABFE852710325DA989A02DF
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/owSGF1Q7ViCxtT448-JTFn-KjBg.roa
Signing time: Sun 01 Jan 2023 22:35:08 +0000
ROA not before: Sun 01 Jan 2023 22:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213157
IP address blocks: 185.86.83.0/24 maxlen: 24
185.254.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:75:3e:7a:bf:e8:52:71:03:25:da:98:9a:02:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 1 22:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3048617543b5620b1b53e38f3e253167f8a8c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:8f:62:c6:6f:cd:95:20:6b:eb:65:83:18:
f8:18:10:e0:c5:40:24:6e:94:c0:97:b0:81:0e:5c:
25:f3:24:8e:30:d5:c1:ab:18:d8:45:fa:5c:cf:25:
35:b8:a8:22:53:ff:a0:56:6f:a8:f3:21:ec:99:74:
b1:13:36:e2:f6:8e:e5:cd:e4:7f:9a:5a:0a:41:d0:
c3:35:e5:3d:6c:58:b4:3b:bf:f2:be:83:73:d4:bc:
f5:09:f9:bd:ca:09:aa:23:93:03:1a:d7:56:47:8c:
f1:7e:47:18:39:f1:d0:28:63:ef:ac:6a:89:6f:7d:
f6:e7:9d:6c:a3:a5:2b:39:22:ee:04:f0:c5:71:26:
54:3d:2e:7f:cf:cd:db:92:25:b0:ad:b5:7c:a5:ce:
57:be:49:03:58:28:ca:fd:37:9c:0b:8c:ef:6a:89:
ac:48:a2:90:42:07:7d:0a:0d:36:da:4c:31:43:84:
f1:d0:3d:03:9e:9c:7b:c7:5e:3e:b8:26:a9:19:ab:
4c:ae:88:76:5c:1e:6a:c2:e6:e3:b8:10:6f:9e:e7:
07:d3:ad:e6:6b:b0:30:ee:c1:53:95:dd:f4:43:ee:
85:9b:f3:a9:b9:13:ac:84:8c:cb:e9:1b:f2:0d:b2:
28:11:1a:15:bb:14:49:56:00:4e:69:4f:af:77:25:
4b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:04:86:17:54:3B:56:20:B1:B5:3E:38:F3:E2:53:16:7F:8A:8C:18
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/owSGF1Q7ViCxtT448-JTFn-KjBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.83.0/24
185.254.92.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e1:20:8d:3e:5f:44:19:b9:2f:e7:66:7c:35:ed:d3:48:50:
d2:da:0f:f5:91:fe:54:a6:e4:f9:3e:71:1c:cb:46:33:91:a2:
08:b1:62:75:fc:b6:fa:6d:36:60:a5:b6:9e:e0:b6:17:5b:93:
e3:b8:94:f8:1d:0c:eb:45:65:9e:91:09:64:9b:f6:ee:a1:7b:
b2:dc:02:db:b8:54:7d:46:47:12:72:40:0a:dd:6e:fb:e6:c8:
55:5c:1e:31:d7:c0:86:38:3b:5b:97:41:49:13:23:70:10:75:
82:44:90:c2:9c:82:37:85:2e:d9:32:d4:c5:78:ab:db:2e:fb:
59:a6:49:4b:e6:4e:e0:08:1c:35:2c:3c:1c:cf:0a:6e:70:e5:
bb:88:2a:3b:f7:5c:75:53:4a:2d:bd:73:04:0d:ae:5b:69:d7:
02:36:e4:49:3f:1b:14:12:28:d8:75:60:0f:ce:9a:ee:ae:e9:
71:95:39:e2:9b:0d:05:3a:90:15:fc:59:54:97:0e:0a:28:57:
65:b5:f6:f8:5e:ef:0c:a8:2f:97:d1:82:dd:c1:72:07:98:4a:
81:02:e6:9b:de:cd:ab:77:25:c3:db:58:ad:00:84:5a:c2:27:
81:75:74:03:0e:02:7a:c3:31:63:b4:2d:1e:2f:13:55:64:ff:
4a:9f:f3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org