Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Vp8wyawX7In68rN5SaT7A8tl2qg.roa
File: Vp8wyawX7In68rN5SaT7A8tl2qg.roa (raw, json)
Hash identifier: nTPT3lf1f5I6u/vR/amkMPWuK9ZdW+3Pmz+1e0jIk/w=
Subject key identifier: 56:9F:30:C9:AC:17:EC:89:FA:F2:B3:79:49:A4:FB:03:CB:65:DA:A8
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C416DCD68FB5E80846942B1114B5754
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Vp8wyawX7In68rN5SaT7A8tl2qg.roa
Signing time: Sun 01 Jan 2023 07:35:05 +0000
ROA not before: Sun 01 Jan 2023 07:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208286
IP address blocks: 185.244.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:6d:cd:68:fb:5e:80:84:69:42:b1:11:4b:57:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=569f30c9ac17ec89faf2b37949a4fb03cb65daa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d1:1e:b2:d9:f4:aa:02:21:59:5d:9e:c9:0e:
e7:61:2a:0c:ed:fe:0c:1f:bd:f9:cd:53:2e:17:fc:
8f:01:23:c4:b9:d0:65:1e:6d:44:35:bc:31:7f:6f:
1c:15:f8:3a:91:33:33:13:22:8a:89:c7:53:88:19:
58:e6:93:c7:3e:45:b1:b5:59:88:8e:49:39:09:d5:
39:07:91:c5:9d:13:ff:4c:e0:7c:96:fc:3d:e0:c1:
d4:ec:63:4f:e6:5e:7b:b0:2f:5c:2e:eb:8d:2c:bf:
9e:79:d0:e5:a0:1a:3d:ba:f4:93:15:d8:57:d1:0d:
b0:b4:84:3a:a2:96:0d:5e:0f:40:11:dc:6b:bc:da:
e3:9c:09:6a:ff:10:45:8a:73:be:23:ec:4b:1f:b7:
19:4b:05:d2:45:b2:5e:5d:29:72:92:f9:0b:c0:8a:
86:f8:25:d4:96:bf:4e:b7:b0:47:90:f7:c9:95:57:
8d:d8:a1:bc:7a:e9:40:7b:47:f9:ee:61:b1:95:2d:
02:7a:2f:e5:57:69:d8:14:e0:6e:49:44:01:ce:84:
b6:0a:f7:76:a8:31:82:4c:ee:da:81:18:6c:4c:6a:
9d:13:f9:04:c0:d7:c3:eb:a7:d8:c0:a3:58:d5:5d:
c0:34:24:06:15:d2:9e:03:cf:12:4f:ac:ff:c3:f7:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9F:30:C9:AC:17:EC:89:FA:F2:B3:79:49:A4:FB:03:CB:65:DA:A8
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Vp8wyawX7In68rN5SaT7A8tl2qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.25.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b8:a6:fe:cf:c9:eb:2b:37:04:00:fb:dd:6d:43:88:02:0b:
4a:d6:23:40:ac:1c:56:02:59:43:cd:0e:f9:d4:12:34:04:ee:
4f:b2:78:84:81:e7:9e:aa:4f:7b:44:98:0a:17:36:65:7f:40:
11:fe:b4:c6:8b:0d:39:86:11:20:d8:1f:50:dd:15:08:b7:36:
e3:1c:95:32:66:a2:22:1c:f5:3a:c2:a7:4b:29:39:b8:1b:3c:
32:b9:dd:06:d3:22:df:22:65:0d:c0:34:6c:fe:ff:4a:42:17:
cf:b7:c7:1d:c9:d9:d9:4d:39:a9:ee:d4:1d:88:9d:ec:ea:ee:
b4:3a:70:4d:c7:59:56:f5:87:91:cb:8c:53:6a:38:79:4e:3c:
a3:06:22:f5:05:e6:15:0d:28:10:89:b0:e4:41:0b:03:4e:f9:
14:df:8d:52:c1:8a:4f:5f:46:46:b9:20:1f:5f:a2:d1:ab:10:
77:14:19:7c:21:60:aa:ed:85:a4:e4:58:51:62:a3:bd:5b:af:
d0:79:fa:d9:bb:1d:c0:c0:15:d6:69:48:a5:30:1d:e6:eb:26:
2d:52:fe:92:fc:9a:45:3c:67:84:02:b1:6a:6e:7a:c3:45:89:
5e:b8:20:15:4e:ed:02:42:45:29:a2:95:97:d9:95:32:a1:03:
f4:c0:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:11 2023 by rpki-client on console-fra.rpki-client.org