Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1-Ww03s4npVcETpWY5RF9-8yQFj8.roa
File: 1-Ww03s4npVcETpWY5RF9-8yQFj8.roa (raw, json)
Hash identifier: KCenROFqtouOcmTr78e8eYYChBn7jIG+iATA6GN6JVg=
Subject key identifier: F9:6C:34:DE:CE:27:A5:57:04:4E:95:98:E5:11:7D:FB:CC:90:16:3F
Certificate issuer: /CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
Certificate serial: 0188918414DF60A8C586607B6FB9971F8587
Authority key identifier: 57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1-Ww03s4npVcETpWY5RF9-8yQFj8.roa
Signing time: Tue 06 Jun 2023 16:22:12 +0000
ROA not before: Tue 06 Jun 2023 16:22:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202170
IP address blocks: 185.51.93.0/24 maxlen: 24
185.51.94.0/24 maxlen: 24
185.51.95.0/24 maxlen: 24
185.51.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:84:14:df:60:a8:c5:86:60:7b:6f:b9:97:1f:85:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
Validity
Not Before: Jun 6 16:22:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f96c34dece27a557044e9598e5117dfbcc90163f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:95:ce:be:84:72:a3:f7:8c:d8:66:03:66:
04:cd:c7:79:ce:c3:82:a0:b4:ed:b3:9b:3e:6c:c4:
54:e5:c5:db:ca:de:55:47:27:b0:d8:4c:e4:d3:1a:
1d:a9:6a:11:b9:fa:6f:10:f8:3a:77:21:a0:0d:51:
5b:31:4f:20:65:c0:ce:fd:11:21:dd:c4:f0:05:86:
61:a0:19:62:68:78:79:e0:7d:8b:00:c7:8d:ce:2c:
10:15:80:d4:94:7d:7b:fc:8d:c7:bf:13:75:5a:4a:
ca:b2:26:d7:3a:c4:81:f8:1c:b9:a8:93:56:2d:92:
b8:e1:f0:de:02:9f:27:e6:d2:81:81:38:e2:42:62:
14:a3:5c:fe:8e:06:28:99:db:9c:95:e6:10:4d:85:
c4:82:8e:a0:b6:f6:ce:89:c2:a0:30:30:c0:c8:3d:
55:0d:ea:77:6f:8d:6e:a3:83:6e:6e:b1:cd:b6:d3:
1a:0a:19:85:fe:7f:0e:e2:40:4f:56:2c:58:a1:dd:
21:cc:bb:6b:7b:9f:0c:04:87:5d:01:30:a7:f1:9b:
46:c2:94:5b:0b:ed:5c:13:55:4a:50:94:5e:a9:ee:
8c:2e:f3:bb:b7:54:ef:54:78:d9:71:ed:93:0c:5e:
2a:78:b1:28:a0:8c:58:9d:02:9e:4b:6c:d0:16:ff:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6C:34:DE:CE:27:A5:57:04:4E:95:98:E5:11:7D:FB:CC:90:16:3F
X509v3 Authority Key Identifier:
keyid:57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1-Ww03s4npVcETpWY5RF9-8yQFj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.92.0/22
Signature Algorithm: sha256WithRSAEncryption
80:51:a6:22:d7:d5:7d:30:4c:c5:82:9e:00:d8:34:b1:ad:5a:
3e:b4:87:9e:36:1e:eb:2a:87:dd:f1:99:c5:17:01:61:7c:af:
0e:74:90:04:db:b3:88:94:b0:95:02:37:bb:2d:5a:21:07:56:
67:6d:82:7b:3f:0c:a2:31:c9:c1:63:96:a7:05:71:05:5f:6b:
ec:cc:ef:18:83:85:2c:b1:cc:6a:89:92:7e:f6:0d:80:dc:8b:
29:d5:0f:e3:4e:4e:7b:f3:10:ed:04:05:c3:21:7e:82:03:67:
d3:3d:66:cb:0a:4f:1e:12:d9:8b:30:4f:1f:3d:2c:4f:91:1e:
d2:56:70:9d:9c:63:66:d7:ad:10:9c:30:5d:87:ed:05:0e:3e:
80:c4:ea:0d:25:4a:52:1a:ac:8f:04:a8:a9:b8:d7:76:8b:3b:
9a:be:6f:7b:2d:1c:1a:e8:c1:df:4a:86:56:8a:2b:82:05:7b:
d1:bf:bc:61:ef:72:de:86:5c:72:7b:99:9e:dc:24:1c:62:21:
59:66:c3:b3:ac:e5:f4:8c:2b:b2:9c:4e:cc:85:75:5f:b0:db:
ed:fd:2c:7f:fb:be:04:d5:d7:45:25:37:5f:8e:24:91:47:3b:
77:73:41:33:f5:2f:41:30:c4:d9:b8:33:3f:c7:6e:4a:79:b7:
e8:76:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:17:08 2024 by rpki-client on console.sobornost.net