Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/cWcFheKlWd67hNKfyUOYemhv9VU.roa
File: cWcFheKlWd67hNKfyUOYemhv9VU.roa (raw, json)
Hash identifier: 5CD2aEInjX4tozhgHvN8Xfv7Qh3MHQ8hGJ8PtYs64tI=
Subject key identifier: 71:67:05:85:E2:A5:59:DE:BB:84:D2:9F:C9:43:98:7A:68:6F:F5:55
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 01856E2689D5F6C2EADFE5ACF1ABFE41EE5C
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/cWcFheKlWd67hNKfyUOYemhv9VU.roa
Signing time: Sun 01 Jan 2023 16:24:57 +0000
ROA not before: Sun 01 Jan 2023 16:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208000
IP address blocks: 185.139.51.0/24 maxlen: 24
185.139.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:89:d5:f6:c2:ea:df:e5:ac:f1:ab:fe:41:ee:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Jan 1 16:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71670585e2a559debb84d29fc943987a686ff555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:c3:f7:e3:58:6b:9d:3a:15:65:ce:db:cb:
99:8c:02:d4:14:64:06:28:4e:cf:d2:92:f3:8f:84:
6d:fc:61:7e:17:98:aa:2d:08:64:0f:98:b0:34:c4:
51:82:db:91:51:1f:02:3b:e5:cf:69:11:d1:27:e5:
fb:59:1b:42:31:77:fe:1c:60:97:7d:98:0a:e4:df:
2e:61:f5:6e:19:60:cc:7c:13:22:c6:8d:ce:62:1f:
79:cd:f2:af:49:de:a9:7a:3c:95:c3:e2:76:c5:9b:
ab:fb:8a:74:9b:18:ea:33:12:8a:bb:f9:03:25:f6:
f0:eb:49:2d:ee:51:8d:b6:23:ee:e9:7b:c0:91:99:
eb:a7:f5:d5:4f:c5:7a:21:fe:75:56:37:0b:f3:ee:
96:dc:ee:cf:8c:d3:f2:61:0a:b3:7f:4d:2f:82:fe:
63:b2:6d:1d:b8:da:6a:bb:c9:c5:ae:bf:9a:f8:13:
97:20:22:a1:e4:6c:fa:1d:49:67:46:ae:68:46:b0:
4e:ff:a1:52:0a:97:71:17:06:9f:eb:cb:04:e8:aa:
67:9e:d8:48:83:bc:25:56:c7:02:7b:b0:bb:d6:82:
7d:2a:11:7c:63:06:b8:a5:ab:c2:5c:a4:72:ef:83:
d2:88:07:8f:12:d3:07:9e:b2:f9:0f:26:5d:5f:73:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:67:05:85:E2:A5:59:DE:BB:84:D2:9F:C9:43:98:7A:68:6F:F5:55
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/cWcFheKlWd67hNKfyUOYemhv9VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.50.0/23
Signature Algorithm: sha256WithRSAEncryption
54:6c:f2:a1:f1:59:05:ae:8a:5a:39:d2:52:45:b6:8a:36:d1:
7e:d6:b0:2e:80:2c:16:a4:34:33:27:61:af:22:6b:e2:f2:d0:
08:0d:35:32:04:cb:2e:31:d2:5d:e1:a1:36:f5:37:71:c4:62:
b4:7a:ce:19:6d:de:d7:d7:5f:6e:a3:f9:4d:78:e2:a0:27:72:
db:f9:b1:7b:a8:5d:a9:63:8d:56:7d:df:78:d4:97:73:1d:af:
dd:4b:07:84:1b:4b:93:d8:ca:f1:8e:7e:ac:44:d0:2f:2e:eb:
38:66:3b:73:90:af:93:49:02:ba:26:96:5a:25:7f:d0:cb:1f:
82:c7:4a:ff:06:51:3a:e9:00:e7:8b:7a:27:16:91:4b:53:68:
4a:c4:3f:9b:e0:e6:a2:9d:bb:9a:e4:32:1f:87:ed:cf:13:d8:
4b:9b:47:b8:4f:89:91:dc:ae:48:57:1a:78:49:b6:8d:f2:9d:
0d:ed:19:4d:b5:a1:e6:98:38:dd:96:79:b0:14:9c:80:d6:83:
45:d4:38:d7:24:0c:12:c3:06:80:f0:1e:68:18:06:14:54:3f:
f6:e1:33:df:e2:4b:94:43:f2:a9:7f:28:ae:db:28:45:7d:9b:
f5:a8:30:04:22:0e:10:8c:1b:f6:fa:66:f3:49:82:7a:f9:a8:
f6:a1:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:48 2024 by rpki-client on console-ams.rpki-client.org