Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Vs6-lBp8kNfB-OVqPhG30F8Zds4.roa
File: Vs6-lBp8kNfB-OVqPhG30F8Zds4.roa (raw, json)
Hash identifier: lWpJS1Z98d5cZQqTaSzJiemfKq/GegoM1l0aN4mKe0g=
Subject key identifier: 56:CE:BE:94:1A:7C:90:D7:C1:F8:E5:6A:3E:11:B7:D0:5F:19:76:CE
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 018CC86F35466BE6BFA9CA612CB62512DC79
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Vs6-lBp8kNfB-OVqPhG30F8Zds4.roa
Signing time: Tue 02 Jan 2024 04:29:40 +0000
ROA not before: Tue 02 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 185.126.156.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 06:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:35:46:6b:e6:bf:a9:ca:61:2c:b6:25:12:dc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 2 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56cebe941a7c90d7c1f8e56a3e11b7d05f1976ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1d:b2:b6:70:e5:4a:5f:54:56:da:c8:ae:0a:
4a:4f:b5:41:47:f8:8a:20:f0:15:78:14:7b:7a:66:
25:a7:3e:97:8c:e8:74:16:86:71:9d:26:b4:26:88:
19:3c:97:43:ec:36:0c:41:d8:7b:01:3a:43:32:cf:
fb:b3:a3:e6:fd:2a:56:cb:42:15:8b:ce:23:6e:f2:
d6:36:dc:f3:4b:dc:4f:ab:34:58:38:4f:ed:4e:74:
95:96:99:c8:84:18:f6:37:bc:4b:00:2a:0e:fb:e2:
b3:13:e9:77:14:a5:15:11:43:c3:af:90:0c:a7:27:
40:91:67:27:f6:3d:47:17:cb:51:2e:66:85:f0:ac:
1f:84:bd:98:4d:2f:c3:88:48:61:8f:dc:76:b0:e3:
33:17:a6:f8:44:ed:52:a1:4f:9a:80:9b:86:22:21:
31:83:14:81:b5:14:82:72:40:98:2b:26:8b:c7:d2:
57:8f:c2:f6:b4:ff:e0:4d:a4:82:1e:8a:13:af:7f:
7b:d1:03:3d:26:02:f4:9e:6f:08:bc:9b:3c:63:36:
a6:f2:ca:99:60:4d:a9:77:af:22:16:73:27:be:2c:
23:50:d7:c4:1d:42:a5:d6:51:ba:f3:5b:a7:ca:25:
f8:ae:bd:27:2b:4a:c3:df:ed:16:e4:f7:53:97:b8:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CE:BE:94:1A:7C:90:D7:C1:F8:E5:6A:3E:11:B7:D0:5F:19:76:CE
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Vs6-lBp8kNfB-OVqPhG30F8Zds4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:00:7c:a7:31:73:f0:d2:d7:6a:35:93:f0:7d:21:c7:94:e2:
43:06:8f:ef:42:2d:af:03:7a:96:ae:53:b8:d5:ab:c8:d8:71:
d0:ac:5a:f5:78:4d:79:5b:f1:b7:84:58:9d:8d:12:b1:84:96:
1e:3b:bc:8a:3a:e3:a3:d4:a2:7b:28:1d:ba:dc:6b:44:d7:49:
f8:c1:2b:e8:e4:7a:f5:33:34:ce:c9:5d:97:43:06:d9:51:6f:
75:46:07:00:c0:c4:54:e1:81:c7:28:19:c2:d6:51:db:65:88:
d9:92:18:30:de:43:9d:7d:c1:a0:d1:c6:fd:fb:c9:eb:8b:bc:
34:d8:df:f3:6f:76:26:c5:4e:85:f9:c3:65:1f:47:f8:08:c4:
08:a6:72:57:dd:89:14:f2:f1:2c:c1:77:8d:6f:e1:4b:12:d6:
0b:34:84:61:f2:ae:7a:69:5f:62:ad:12:f3:de:45:6f:6d:58:
07:c2:4c:ec:92:17:62:80:55:dd:ed:15:8e:e0:57:47:a5:ee:
12:1d:d9:d2:0d:a9:18:7d:27:b9:fb:91:4a:87:75:44:1d:40:
18:9f:f6:2a:f9:9c:08:43:a4:d9:07:84:3c:06:ad:df:dc:d1:
ec:10:7d:a0:f3:fc:43:87:05:b8:82:a2:e0:a0:e7:d6:6f:a3:
76:05:f1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:38 2024 by rpki-client on console-ams.rpki-client.org