Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/0UaBXVaMn53taNznWEOu1YfMTD8.roa
File: 0UaBXVaMn53taNznWEOu1YfMTD8.roa (raw, json)
Hash identifier: nClzw+FOtQPJ55CI3NYy80WOhHRjT4cC7QJ3A7lTgxM=
Subject key identifier: D1:46:81:5D:56:8C:9F:9D:ED:68:DC:E7:58:43:AE:D5:87:CC:4C:3F
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 018EC820BD92526F96B07212FCA950745439
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/0UaBXVaMn53taNznWEOu1YfMTD8.roa
Signing time: Wed 10 Apr 2024 13:09:32 +0000
ROA not before: Wed 10 Apr 2024 13:09:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200088
IP address blocks: 92.51.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 13:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:20:bd:92:52:6f:96:b0:72:12:fc:a9:50:74:54:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Apr 10 13:09:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d146815d568c9f9ded68dce75843aed587cc4c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ea:fb:a1:ca:44:87:08:66:c9:36:d5:7c:7e:
bd:33:d4:2d:0a:96:32:d7:16:3e:8a:98:b7:33:1c:
bd:08:9b:79:88:b2:d6:e9:cc:96:c7:9e:40:b5:f6:
66:32:fb:57:ad:71:da:ee:58:e4:a2:10:c8:a0:b4:
ca:08:24:1d:6d:ac:59:4e:b6:e0:b3:43:2c:5a:9d:
cb:cb:2a:69:ed:0a:46:41:ab:75:89:2b:a7:3c:4b:
0a:ca:e0:a8:3a:03:af:80:a1:d1:02:73:ba:98:f9:
4e:59:cf:49:a8:e5:97:4c:3d:7b:03:1d:1a:96:d5:
ca:06:ad:7d:ee:66:30:6e:a4:b9:bb:74:d7:ef:16:
cd:a6:13:58:fd:0a:90:5a:0b:44:dd:aa:eb:c3:1b:
41:bf:8b:a7:3a:f2:0f:21:bc:30:d5:70:73:85:24:
44:6a:1a:85:99:54:8e:0b:33:98:fa:d5:ac:67:14:
e0:06:fe:9e:31:46:e4:b1:e1:82:5b:c9:9f:33:e2:
d3:31:e8:41:d8:6d:39:99:67:c5:00:c7:8f:78:1b:
c4:bf:de:8b:4f:dc:fa:69:06:ac:8d:39:34:1d:3f:
05:75:b0:e3:54:b2:a0:f5:2c:04:8b:c7:d8:95:40:
a3:ff:11:eb:dc:17:68:69:ae:3a:c0:f2:12:c0:aa:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:46:81:5D:56:8C:9F:9D:ED:68:DC:E7:58:43:AE:D5:87:CC:4C:3F
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/0UaBXVaMn53taNznWEOu1YfMTD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.37.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2c:5d:8e:90:a2:2f:88:fc:0d:4c:7e:59:56:d1:6b:d2:c2:
e6:80:06:fd:f6:9f:c0:94:95:e5:41:d9:bb:ad:cd:6b:d2:9b:
30:63:a4:e1:5f:79:aa:e2:fe:8b:9d:cf:84:5a:e9:58:db:73:
69:a6:22:0d:a0:b5:a1:32:17:53:d2:2b:7f:a1:de:3b:25:6e:
4e:91:63:f3:35:ce:9d:d9:66:42:96:fc:3a:70:c7:cc:d4:ea:
46:93:22:a0:b1:0b:6a:ad:bc:f9:cb:3a:55:7b:72:48:86:42:
0f:55:f9:4e:0f:f2:ba:64:4f:90:ad:70:7a:8e:74:18:bb:c2:
7c:b7:40:b7:de:c6:c7:a3:a0:f2:49:81:b2:38:5d:e2:d3:84:
f6:fc:84:4d:a9:cb:f5:bc:6a:29:b2:14:59:f0:81:53:89:35:
ff:8d:15:fc:9c:ac:b7:74:f3:f5:76:d1:60:d2:11:10:49:ce:
88:34:1c:d6:ba:0a:0f:96:b3:46:a2:2f:8c:7b:2f:69:4e:8a:
68:53:d5:2b:75:81:c2:df:08:bf:74:42:dd:e5:4a:bc:23:33:
68:c9:da:e8:2a:d1:d7:a5:bf:a7:1f:01:75:81:b5:9e:4b:c6:
a0:24:ec:3e:ec:3f:73:7e:05:44:1c:ac:0b:22:9e:cd:42:3d:
f6:c9:c3:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7IIL2SUm+WsHIS/KlQdFQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi
MzliOWQwHhcNMjQwNDEwMTMwOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTQ2ODE1ZDU2OGM5ZjlkZWQ2OGRjZTc1ODQzYWVkNTg3Y2M0YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+r7ocpEhwhmyTbVfH69M9QtCpYy
1xY+ipi3Mxy9CJt5iLLW6cyWx55AtfZmMvtXrXHa7ljkohDIoLTKCCQdbaxZTrbg
s0MsWp3Lyypp7QpGQat1iSunPEsKyuCoOgOvgKHRAnO6mPlOWc9JqOWXTD17Ax0a
ltXKBq197mYwbqS5u3TX7xbNphNY/QqQWgtE3arrwxtBv4unOvIPIbww1XBzhSRE
ahqFmVSOCzOY+tWsZxTgBv6eMUbkseGCW8mfM+LTMehB2G05mWfFAMePeBvEv96L
T9z6aQasjTk0HT8FdbDjVLKg9SwEi8fYlUCj/xHr3Bdoaa46wPISwKp2swIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNFGgV1WjJ+d7Wjc51hDrtWHzEw/MB8GA1UdIwQY
MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct
OGU2Zjg3OGRiNWY0LzEvMFVhQlhWYU1uNTN0YU56bldFT3UxWWZNVEQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0
LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDMlMA0G
CSqGSIb3DQEBCwUAA4IBAQAYLF2OkKIviPwNTH5ZVtFr0sLmgAb99p/AlJXlQdm7
rc1r0pswY6ThX3mq4v6Lnc+EWulY23NppiINoLWhMhdT0it/od47JW5OkWPzNc6d
2WZClvw6cMfM1OpGkyKgsQtqrbz5yzpVe3JIhkIPVflOD/K6ZE+QrXB6jnQYu8J8
t0C33sbHo6DySYGyOF3i04T2/IRNqcv1vGopshRZ8IFTiTX/jRX8nKy3dPP1dtFg
0hEQSc6INBzWugoPlrNGoi+Mey9pTopoU9UrdYHC3wi/dELd5Uq8IzNoydroKtHX
pb+nHwF1gbWeS8agJOw+7D9zfgVEHKwLIp7NQj32ycMi
-----END CERTIFICATE-----
Generated at Wed Apr 10 19:53:43 2024 by rpki-client on console.sobornost.net