Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WrV1znR2c1wS_hX0OdsngA6n9Pc.roa
File: WrV1znR2c1wS_hX0OdsngA6n9Pc.roa (raw, json)
Hash identifier: niWja2ciDQdvNmNm69ldxF6XkTSmn1ERD2BMZ3PdhAo=
Subject key identifier: 5A:B5:75:CE:74:76:73:5C:12:FE:15:F4:39:DB:27:80:0E:A7:F4:F7
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01867D591B8DBE9847229069471CC979F5D8
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WrV1znR2c1wS_hX0OdsngA6n9Pc.roa
Signing time: Thu 23 Feb 2023 08:17:17 +0000
ROA not before: Thu 23 Feb 2023 08:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 185.92.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:59:1b:8d:be:98:47:22:90:69:47:1c:c9:79:f5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 23 08:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ab575ce7476735c12fe15f439db27800ea7f4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:cc:03:c7:cf:56:26:15:8f:24:49:bc:af:
0b:d9:37:94:0b:d3:97:01:3a:db:f4:9a:c5:28:c2:
62:ae:a3:42:1e:df:92:ea:8b:ef:ce:2b:e0:51:d9:
e5:f8:b0:5e:60:6f:58:f7:5c:28:2b:5f:2d:96:a5:
00:fb:cf:e8:3b:4a:13:ec:b9:8a:69:66:10:1b:95:
74:2a:a2:12:ad:20:d0:d1:5a:0d:f6:2b:84:e3:2f:
f7:b2:29:db:d6:b8:e4:18:07:5a:9f:10:42:01:4d:
7f:a7:c8:c1:8f:5f:dc:6e:77:66:c4:82:fd:83:d0:
db:89:38:6d:03:5a:b9:55:5a:ce:eb:70:bd:78:12:
27:71:6f:25:9f:c7:0a:3e:67:31:d9:b4:1d:4d:8e:
7e:b9:79:aa:cc:39:94:ab:76:cd:55:a7:0f:7e:eb:
db:23:92:f0:d1:60:af:95:f8:c6:a5:3e:aa:44:ba:
83:ac:38:b0:f5:f4:0f:96:de:77:f9:18:84:af:c3:
9f:50:a7:69:00:8a:62:3c:8e:19:8b:91:ee:35:e2:
ad:9f:0c:9d:4f:4d:61:50:90:f4:52:3f:41:d7:da:
04:3f:0c:54:24:26:41:99:a7:f0:31:36:63:6f:eb:
c9:e8:b2:92:0c:f8:f2:84:cb:3a:1f:1b:0a:9d:67:
a4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:75:CE:74:76:73:5C:12:FE:15:F4:39:DB:27:80:0E:A7:F4:F7
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WrV1znR2c1wS_hX0OdsngA6n9Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ad:7e:77:8b:14:ba:f5:31:f9:85:35:37:45:d7:eb:c4:70:
ef:36:e4:3e:72:0d:4e:a7:2f:de:a5:48:bf:b3:18:a9:06:f0:
f8:02:dd:3c:f8:d2:82:62:fa:8a:80:9f:f9:97:07:d1:03:6b:
d2:e2:5e:84:d9:a0:0f:d8:30:00:05:4c:d5:eb:42:91:3d:d7:
59:46:23:1e:09:7d:ab:03:01:b3:78:0f:65:0e:d6:24:13:e0:
33:cb:1c:77:67:e4:d5:53:c1:69:4b:64:fc:42:32:66:7e:5c:
ea:ec:62:84:ef:9f:ac:88:7b:d0:a6:b8:56:c8:7e:81:4e:92:
bd:e3:b1:57:8e:41:80:a6:35:b3:bf:62:b4:0e:43:f2:0d:e8:
9c:c1:95:56:8c:46:be:cb:69:7e:dc:79:b5:31:7b:8d:e4:60:
bd:35:b0:44:a9:23:86:83:54:f6:83:a1:1d:b7:4d:4f:d0:09:
b4:2b:b3:67:c9:f1:4d:df:91:33:b9:fc:81:a3:fe:38:cc:06:
db:4f:08:6a:6b:69:44:41:90:96:25:4a:d6:fc:2f:b8:22:b4:
df:68:be:ce:50:eb:fa:9f:a5:0f:a7:8d:c9:87:45:49:3e:48:
5c:26:09:b0:9f:76:57:11:98:bf:56:9f:eb:44:a6:21:ff:ee:
b3:27:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 23 11:40:16 2023 by rpki-client on console-ams.rpki-client.org