Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/VReow7qasDrkZeiQE2u05VZgdcY.roa
File: VReow7qasDrkZeiQE2u05VZgdcY.roa (raw, json)
Hash identifier: ZbsPCZMPtBOG3oa0v5PO62+0+8LCzmv93PBg3ZqG1eI=
Subject key identifier: 55:17:A8:C3:BA:9A:B0:3A:E4:65:E8:90:13:6B:B4:E5:56:60:75:C6
Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial: 01856EAFE2DAA7A437BB4FAF2F5BFCD70219
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/VReow7qasDrkZeiQE2u05VZgdcY.roa
Signing time: Sun 01 Jan 2023 18:54:58 +0000
ROA not before: Sun 01 Jan 2023 18:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.135.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:e2:da:a7:a4:37:bb:4f:af:2f:5b:fc:d7:02:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Validity
Not Before: Jan 1 18:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5517a8c3ba9ab03ae465e890136bb4e5566075c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:9c:5f:78:0d:ba:7e:f0:6e:4b:79:ba:1e:
fa:0a:20:67:ef:7d:11:e9:3c:92:09:66:42:8c:3f:
23:32:45:c4:0b:41:6d:5e:f1:c2:08:0f:23:6f:ef:
14:ba:d3:93:9d:74:ab:32:da:0c:fd:86:58:66:27:
fe:63:8e:ab:46:2e:1f:24:d2:a6:42:2b:a5:cf:f5:
bc:5e:a8:1e:dd:b6:98:6f:cc:a0:bc:3b:70:5d:f0:
bf:40:a2:c9:85:f4:ff:02:5d:72:15:8e:d9:39:b3:
93:fe:ae:f4:2e:64:a7:76:41:c7:f0:37:02:f1:0c:
00:ce:ce:a1:14:64:ff:1a:9d:e6:91:e4:f3:d8:41:
76:ba:89:08:63:80:4e:fd:5b:54:20:0b:9c:c3:b1:
f2:9e:f3:9d:5e:af:7c:59:c9:e3:f6:c3:01:0d:2c:
d9:d1:18:d5:42:8a:d8:52:aa:58:5f:22:f3:50:a5:
10:eb:33:c5:cb:33:ea:86:35:c2:63:4a:30:96:5e:
11:3a:e6:03:b5:03:ba:af:50:3d:8a:b7:db:55:c9:
e0:a9:c1:54:d1:05:63:70:6d:7e:45:c0:5f:5e:e1:
d0:80:c7:fd:e2:46:c6:44:38:53:46:d6:4d:12:23:
23:42:e5:73:ee:85:a1:e3:63:60:af:0d:8b:60:71:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:17:A8:C3:BA:9A:B0:3A:E4:65:E8:90:13:6B:B4:E5:56:60:75:C6
X509v3 Authority Key Identifier:
keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/VReow7qasDrkZeiQE2u05VZgdcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.57.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8d:6f:74:b7:de:d0:01:09:14:a1:72:85:dc:74:8e:b6:3f:
d0:49:ce:43:b7:fe:4d:33:3c:97:05:3c:c5:36:c3:cf:c4:23:
7c:7d:3b:e3:33:c2:56:b7:ef:ab:a9:d8:2f:81:e7:d1:9e:11:
12:03:5f:7f:08:36:43:5e:45:e8:8c:95:f7:85:9a:47:6a:76:
32:c3:0e:b9:01:3f:5b:5d:ea:b2:c3:62:ba:76:fb:f4:67:8b:
c1:87:c3:de:da:77:c0:87:ed:2d:7a:ac:92:55:fd:c0:87:99:
db:28:4a:2d:56:c8:0b:f2:95:c9:fc:00:1f:6e:23:29:4c:7a:
f3:81:58:ad:68:6d:88:35:9b:3c:cb:84:bf:f1:f9:a2:41:5e:
0f:6d:3e:b9:e2:7e:e8:e2:25:0c:5a:25:5e:6a:db:02:c9:4a:
4e:e9:ca:94:6e:43:27:34:97:af:87:16:ad:78:e9:b9:d1:8e:
5f:c7:b1:20:9d:4f:ea:b6:fb:70:19:7f:bc:3b:20:3e:cc:96:
42:f4:e3:13:65:48:75:a4:e4:2a:1f:53:c7:cf:7f:e1:9d:f0:
36:b7:cd:be:db:d2:69:3e:90:85:64:3c:cd:d2:be:39:5d:bb:
a4:26:52:65:cc:5b:13:64:b1:5c:ee:0f:53:71:38:42:c1:de:
d7:8d:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:42 2024 by rpki-client on console-fra.rpki-client.org