Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/VjPDtxAoWdLc3xzExUzsvwPZPeQ.roa
File: VjPDtxAoWdLc3xzExUzsvwPZPeQ.roa (raw, json)
Hash identifier: AkiSxZqlnTT1nb8pjkxC3NtsVj/2WQ4Kid+3AJQguoc=
Subject key identifier: 56:33:C3:B7:10:28:59:D2:DC:DF:1C:C4:C5:4C:EC:BF:03:D9:3D:E4
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 01872D44FED59AF30E1AF899D882C679F518
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/VjPDtxAoWdLc3xzExUzsvwPZPeQ.roa
Signing time: Wed 29 Mar 2023 12:08:29 +0000
ROA not before: Wed 29 Mar 2023 12:08:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39180
IP address blocks: 185.24.17.0/24 maxlen: 24
185.24.16.0/24 maxlen: 24
185.24.18.0/24 maxlen: 24
185.24.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:44:fe:d5:9a:f3:0e:1a:f8:99:d8:82:c6:79:f5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Mar 29 12:08:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5633c3b7102859d2dcdf1cc4c54cecbf03d93de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:87:16:52:66:ff:1f:3d:b8:08:2a:04:ed:
1e:a8:4c:94:ae:37:38:25:82:37:e1:8f:42:00:3e:
7c:ab:f6:9c:bc:88:ce:54:f1:e3:63:b5:27:cb:bb:
55:7e:e0:3a:17:48:47:d4:b6:8c:91:8f:be:17:a4:
fd:d0:0a:ec:f6:c5:f2:24:6d:f2:67:12:04:5c:7f:
80:42:83:14:42:ee:77:61:ac:90:91:41:42:ff:f7:
e9:f1:33:be:4e:6b:17:c5:43:51:19:69:bd:4d:a8:
6e:0c:ba:0d:1c:40:4b:ac:ac:a9:9c:40:33:a8:26:
cc:38:51:c4:81:b1:e8:61:cd:57:0f:94:89:bf:5e:
bf:26:14:35:df:68:fd:55:90:e1:85:7e:b8:d4:e0:
bd:00:46:7b:a0:f2:6d:ef:41:e4:0d:3d:be:99:c5:
07:f1:94:08:cf:2d:cf:d0:fc:87:07:30:07:a8:ce:
ba:27:81:7d:ac:c7:b3:4e:55:9d:9e:14:2e:e8:f8:
c2:74:ce:d1:5b:ef:db:c5:1e:3a:e2:f6:1b:be:ab:
7e:b7:44:ce:f5:48:da:e6:38:b7:e9:0a:6a:5e:e0:
0f:08:9e:7d:7d:93:90:42:4b:fa:c3:7e:24:5a:13:
99:bb:2a:92:7c:be:29:64:da:c2:ef:76:2a:d7:3e:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:33:C3:B7:10:28:59:D2:DC:DF:1C:C4:C5:4C:EC:BF:03:D9:3D:E4
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/VjPDtxAoWdLc3xzExUzsvwPZPeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.16.0/22
Signature Algorithm: sha256WithRSAEncryption
e9:c8:9d:7a:97:72:38:12:a4:b3:fc:d7:36:02:b4:d1:63:4a:
39:6a:b8:e7:6a:dd:51:91:64:5a:f1:e0:27:ba:9f:31:15:ec:
7b:cc:7f:0d:b8:51:b3:d3:07:1c:ab:cf:1f:45:6f:99:c5:d2:
d9:ff:8f:ba:79:28:ea:e3:ee:18:15:bf:4f:41:12:25:f9:1a:
df:77:73:c6:27:e4:8a:16:29:43:7c:a8:f5:ea:e0:e7:69:e4:
26:5a:40:5d:d4:36:b6:a4:44:7c:05:8e:c8:bc:cb:1a:a7:65:
a1:27:15:91:6f:7c:73:2f:25:5e:97:c8:80:8e:14:75:31:52:
ec:07:a6:b0:5c:8f:29:c2:f2:6f:e1:6a:65:de:0e:bb:2e:d5:
c5:cc:4a:ee:bb:bc:f9:9f:a7:17:f9:4c:63:3b:d1:c3:44:35:
91:80:58:58:78:ee:da:fe:78:9f:db:e7:d0:37:49:78:71:f5:
0d:7d:01:06:30:27:71:ee:50:32:65:11:47:c3:7d:57:5c:db:
34:a7:04:5a:f2:62:7d:90:ba:5b:d2:fd:26:8c:8c:9d:c1:78:
c7:18:d1:c6:83:c3:27:90:f1:9a:e1:b8:c2:97:78:0f:3d:10:
b6:8e:cc:a8:1f:bc:a0:27:86:30:a5:e5:80:16:32:d3:e3:bd:
0e:d7:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:20 2024 by rpki-client on console-fra.rpki-client.org