Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/f8gTIV3wJ1t4hoys-qCaIndeXYU.roa
File: f8gTIV3wJ1t4hoys-qCaIndeXYU.roa (raw, json)
Hash identifier: bSXaF7gSLMfRYtlVdWEPDg+R0JDfCD6SjKRI5pIefGY=
Subject key identifier: 7F:C8:13:21:5D:F0:27:5B:78:86:8C:AC:FA:A0:9A:22:77:5E:5D:85
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 018C34B87C92E9AA7E8EB2E09ABD56F15A41
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/f8gTIV3wJ1t4hoys-qCaIndeXYU.roa
Signing time: Mon 04 Dec 2023 12:05:54 +0000
ROA not before: Mon 04 Dec 2023 12:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15702
IP address blocks: 185.190.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:b8:7c:92:e9:aa:7e:8e:b2:e0:9a:bd:56:f1:5a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Dec 4 12:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fc813215df0275b78868cacfaa09a22775e5d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:b4:16:b3:5c:d2:d7:29:ce:0b:df:ab:f1:
73:a8:0d:21:3f:45:d2:19:3c:62:64:c9:52:64:39:
ce:da:ff:8d:b6:7d:f5:c3:e5:02:e1:0a:e3:0d:a2:
88:3e:98:06:44:01:18:24:a6:b3:15:5c:c2:50:81:
4c:86:bc:b3:63:12:36:00:ef:0d:b0:ca:23:62:19:
1a:c2:e8:46:48:ef:21:b4:7c:1f:ac:61:e9:2a:b4:
66:76:e8:c6:3f:8b:a5:ea:ee:05:9f:6b:d3:bf:33:
0a:b7:74:6d:8a:56:a8:5b:6c:57:92:10:7f:fa:62:
b5:36:d5:38:d6:5b:3c:29:fc:c0:f3:00:e5:7e:95:
09:f4:ba:d4:3c:8b:99:73:ae:c2:65:64:25:bb:fd:
d7:8d:54:a5:59:4d:d4:cc:62:e5:f2:da:77:c3:82:
88:5b:e9:92:74:91:2e:f3:02:8f:28:20:9e:73:93:
e2:0b:84:45:5f:87:6f:17:e3:9a:a7:9c:77:fe:53:
e5:1b:e7:16:f1:32:55:42:3d:f1:5e:5b:61:c6:9a:
21:c0:e5:42:9f:0d:ce:c6:f4:55:cf:b7:79:22:75:
e6:96:a9:c4:11:b1:07:0c:ac:ee:7e:5e:75:3c:6b:
b5:55:0e:cd:92:6f:18:1d:60:cf:8a:89:6f:15:8d:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C8:13:21:5D:F0:27:5B:78:86:8C:AC:FA:A0:9A:22:77:5E:5D:85
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/f8gTIV3wJ1t4hoys-qCaIndeXYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.51.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5e:9f:ad:8e:dc:5e:08:19:9d:07:a7:73:99:f6:cc:79:ae:
7a:da:0a:33:44:2c:9f:46:6c:3d:82:4d:70:2d:1c:ba:3b:e3:
35:b8:77:57:05:0c:3d:de:56:57:3a:f7:e3:28:a4:01:7a:e6:
68:24:44:91:4e:1b:b7:03:38:90:f1:16:93:80:2f:0b:44:cf:
10:43:1f:75:43:96:73:92:52:15:c3:bb:5d:62:0d:7a:01:f0:
f1:ff:43:42:dc:b3:e8:09:29:f8:f5:6a:f3:87:f8:3a:26:35:
68:da:f6:78:5a:c2:26:2d:fe:1e:bd:34:dd:65:db:99:22:0b:
2e:1a:dd:55:be:b9:60:1a:91:21:83:81:fc:8d:ca:32:13:16:
1c:36:cc:c3:07:78:fb:31:0c:96:10:fc:e4:97:bb:03:ac:29:
b2:ac:cd:27:f8:5b:b2:a0:95:de:b2:13:43:06:68:0e:30:f2:
99:79:d4:26:9c:bf:97:0d:b4:0c:e6:ed:7b:44:3e:29:33:84:
72:fd:55:d1:c3:ec:11:f7:70:a9:a4:25:c3:03:50:14:b0:45:
d3:6a:5e:ed:23:75:b3:3f:7d:22:24:e0:e3:ee:4b:40:f0:51:
e7:33:1c:fd:af:5e:ad:9e:41:72:59:77:fd:b7:3f:09:17:4b:
d7:e4:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:31 2024 by rpki-client on console-fra.rpki-client.org