Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/vjpeJSF9Jhs6y3029q45rovPFP8.roa
File: vjpeJSF9Jhs6y3029q45rovPFP8.roa (raw, json)
Hash identifier: 1h5JzLxK2uZi4hVU+bv53kMrgi9l4j6H4z2fOI7wCLk=
Subject key identifier: BE:3A:5E:25:21:7D:26:1B:3A:CB:7D:36:F6:AE:39:AE:8B:CF:14:FF
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 018CC7950E6CCA6F6B3CA361437E80F4262A
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/vjpeJSF9Jhs6y3029q45rovPFP8.roa
Signing time: Tue 02 Jan 2024 00:31:23 +0000
ROA not before: Tue 02 Jan 2024 00:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49110
IP address blocks: 185.143.43.0/24 maxlen: 24
185.143.41.0/24 maxlen: 24
185.143.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 09:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0e:6c:ca:6f:6b:3c:a3:61:43:7e:80:f4:26:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Jan 2 00:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be3a5e25217d261b3acb7d36f6ae39ae8bcf14ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8c:db:78:7b:75:19:a9:e8:2a:71:a2:f0:5a:
44:a2:ca:e1:3b:7a:41:17:d5:f0:80:ce:bf:a4:87:
be:5d:49:ec:00:1e:c4:96:e5:ff:dc:eb:8f:dc:33:
b4:cf:4b:f6:e3:dc:58:dd:e2:fb:11:23:8d:ec:7a:
4a:ee:45:30:2d:be:7c:fc:2a:46:f1:11:ce:90:2f:
f5:40:10:ce:fe:25:a6:48:86:b0:7a:30:f7:6e:53:
aa:6b:73:30:0d:32:8a:ad:24:aa:91:42:6d:c5:36:
1d:34:81:cf:d4:b1:43:4b:88:c0:fc:65:b4:6e:eb:
fa:95:03:af:cf:7b:48:2f:f1:ef:95:79:87:68:ec:
4a:f2:c2:f1:4c:eb:d1:a7:45:76:ed:81:7c:54:be:
c2:23:2e:9e:a5:a0:20:ea:cf:dc:ac:82:ad:88:1c:
d5:cb:ee:3f:3f:e0:52:e6:95:92:ed:87:5f:65:eb:
84:6c:ea:1f:e3:d8:fd:58:59:b6:ed:ed:b9:fe:61:
1e:63:72:a3:f6:05:4c:15:e4:30:0d:be:d8:35:44:
5b:28:94:0f:17:45:be:94:b1:f9:e6:5e:15:8b:0a:
39:02:d9:16:27:20:51:a5:e4:b1:ea:64:b4:09:54:
00:bf:9c:e7:c8:d6:44:d6:7a:1f:15:1e:04:4a:e4:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3A:5E:25:21:7D:26:1B:3A:CB:7D:36:F6:AE:39:AE:8B:CF:14:FF
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/vjpeJSF9Jhs6y3029q45rovPFP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.40.0/23
185.143.43.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3a:30:f4:03:ee:f3:a0:e8:17:17:ed:ed:bb:1d:16:2a:38:
98:8a:d3:45:1c:82:81:c8:fc:bd:a3:8d:d0:e2:f8:1e:4b:4f:
95:3f:87:b6:02:33:d7:7d:7a:99:42:8e:12:1d:25:f3:4b:94:
1f:63:0b:a8:31:86:e8:1f:db:6c:27:9b:b4:79:c8:91:af:66:
ca:e5:7c:65:bf:55:f5:58:de:2a:50:e9:7b:36:4d:f8:96:26:
79:cd:9a:6a:41:c8:db:e7:f0:92:06:9e:99:fa:14:3e:09:28:
30:90:ad:56:e2:44:04:d5:db:25:bd:39:dc:23:03:3a:ef:b2:
78:2c:bd:4e:7b:d2:6a:56:15:b7:02:20:dc:3c:5f:df:a2:78:
ef:29:66:b6:1a:e8:0a:aa:e7:4a:96:9e:bc:ec:50:7a:c1:3c:
a2:dd:c6:61:2d:0e:8d:7c:6a:28:71:f8:22:60:e0:3f:e4:96:
14:1f:c1:6b:5b:72:44:cb:bb:7a:dc:25:53:6d:52:0c:d5:3a:
dd:fe:59:2e:68:18:b5:64:5c:9a:da:cd:92:86:53:14:a3:e0:
25:0d:3d:c1:b4:0e:a2:94:de:16:38:18:e4:59:fe:74:5a:a9:
04:1d:c0:63:79:d8:a0:01:74:a8:04:34:f0:60:c6:10:eb:55:
bf:58:dc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:22 2024 by rpki-client on console-ams.rpki-client.org