Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/wU_nsnWTYToIuZqqzjEaRr2RuuY.roa
File: wU_nsnWTYToIuZqqzjEaRr2RuuY.roa (raw, json)
Hash identifier: w7Eq9B1WtPZ3aFDblGG+woptpdsaKYEOSKpk0NVIUkM=
Subject key identifier: C1:4F:E7:B2:75:93:61:3A:08:B9:9A:AA:CE:31:1A:46:BD:91:BA:E6
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 0187E15A48087A2A32196C7E9101A482A5DF
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/wU_nsnWTYToIuZqqzjEaRr2RuuY.roa
Signing time: Wed 03 May 2023 11:23:22 +0000
ROA not before: Wed 03 May 2023 11:23:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398781
IP address blocks: 185.51.23.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 22 Jun 2023 18:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:5a:48:08:7a:2a:32:19:6c:7e:91:01:a4:82:a5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: May 3 11:23:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c14fe7b27593613a08b99aaace311a46bd91bae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:ab:56:63:5b:88:e7:25:cd:2a:56:3d:eb:
de:c4:bd:fc:a7:1c:07:1f:e7:1b:d6:61:02:be:f6:
be:5c:37:d6:8d:58:1a:21:ee:48:bb:0b:db:fc:b6:
3e:48:0e:c2:d6:76:62:81:84:01:31:a9:1d:f6:21:
47:e8:15:07:31:64:3b:41:7d:40:b2:6b:9b:30:d8:
34:19:d6:97:c7:3c:90:b3:73:c3:a7:7c:b8:4d:c6:
af:09:7c:d2:a8:02:6f:b9:88:e7:af:da:0b:dc:97:
16:c8:d8:25:5d:c9:eb:e4:3d:b1:f2:88:3e:dc:77:
f5:65:35:cd:9b:e1:ef:a3:bc:09:c5:71:92:22:66:
fa:f4:7a:33:fa:8c:e9:c8:83:47:05:35:83:eb:c5:
e8:b2:b6:d3:0e:56:a5:75:da:b6:d7:17:fc:ba:28:
18:fc:1b:7d:13:0a:dd:ff:4f:a3:c8:9a:d9:df:6c:
83:07:24:5a:d3:9d:1f:41:a8:95:d6:dd:d2:df:bb:
c4:7f:c0:79:33:e2:a9:be:82:e3:27:1a:ac:9e:32:
81:a9:ab:87:c9:cb:88:5e:0c:8f:b9:97:df:03:84:
66:84:44:10:7f:ef:71:7a:44:8b:df:f7:4e:2e:35:
7f:ea:ae:6d:ac:f2:10:86:d4:82:c7:36:f5:ce:f3:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:E7:B2:75:93:61:3A:08:B9:9A:AA:CE:31:1A:46:BD:91:BA:E6
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/wU_nsnWTYToIuZqqzjEaRr2RuuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.23.0/24
Signature Algorithm: sha256WithRSAEncryption
37:78:1f:7d:46:e3:c1:05:de:66:2d:e1:2f:a7:77:d9:13:d7:
24:35:d2:d5:a6:d7:14:3c:d7:11:50:34:a4:ee:5c:51:2a:18:
e0:2a:0c:44:fb:bf:22:ee:82:82:98:1a:bf:71:4a:47:3a:56:
a0:2f:cb:9e:b0:fc:09:3d:09:b5:dc:29:29:03:67:37:99:0e:
ed:40:ec:5f:c4:61:7f:21:db:31:35:bc:51:a7:b7:ae:18:45:
79:f6:cd:69:31:57:3e:9e:92:f7:37:ca:d4:7e:ed:41:67:12:
07:d4:83:ec:eb:d0:bd:11:d7:a9:2d:7b:b5:75:1a:97:a8:b7:
52:92:bf:e4:25:99:08:91:7c:9c:65:97:cb:23:48:f8:f4:fb:
98:0c:18:b4:89:0d:81:4c:f1:b3:c9:1d:8a:c6:6d:f4:7d:ee:
14:b4:4e:75:a1:f0:d2:16:fe:63:c7:b9:9f:a8:79:5f:36:a8:
1e:53:ca:33:9f:fb:59:22:f3:81:06:fb:93:5b:af:c3:3a:81:
39:6c:dc:53:09:ce:f7:8a:50:dd:52:cf:40:f9:da:3d:66:16:
ba:b8:7b:c4:f2:87:40:7c:81:b3:a5:8e:05:0b:66:2d:32:0f:
78:02:9e:3c:c6:d4:4f:5b:d2:e1:ed:b8:f9:13:f1:23:de:c6:
eb:a2:5b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:51 2024 by rpki-client on console-ams.rpki-client.org