Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/VsOOKT8ptYCWMwT3L12MhJWIymM.roa
File: VsOOKT8ptYCWMwT3L12MhJWIymM.roa (raw, json)
Hash identifier: NC+Rb7mdJ+daUu+uhq6lYu0bfn49rHuxX4naMNLgD9U=
Subject key identifier: 56:C3:8E:29:3F:29:B5:80:96:33:04:F7:2F:5D:8C:84:95:88:CA:63
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 018573B19DA7ACE63D9FF7FD8ABF6B106168
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/VsOOKT8ptYCWMwT3L12MhJWIymM.roa
Signing time: Mon 02 Jan 2023 18:14:58 +0000
ROA not before: Mon 02 Jan 2023 18:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206495
IP address blocks: 185.186.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Nov 2023 07:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:b1:9d:a7:ac:e6:3d:9f:f7:fd:8a:bf:6b:10:61:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Jan 2 18:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56c38e293f29b580963304f72f5d8c849588ca63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:5d:d5:6c:c4:9e:6c:2c:6e:27:89:cf:71:
35:fe:ed:aa:76:55:a5:ed:cf:ac:e3:5a:e2:f2:09:
95:76:8e:65:ff:cb:a8:ff:fa:5f:9f:2e:15:a1:3d:
e3:07:07:a4:23:0b:f5:6c:70:56:c8:93:f3:18:31:
9b:4a:25:a3:20:ec:eb:a9:62:c1:a6:15:ab:12:31:
d4:5e:ce:80:03:b9:03:a1:9b:2d:60:f5:4a:c8:42:
a5:e6:f8:6a:06:80:4e:0c:38:1e:fc:d9:90:86:c3:
9d:d8:0d:e8:da:ac:80:7e:b7:f3:6a:e1:ea:ca:1c:
4b:15:e6:5c:e6:15:39:54:f4:2a:7a:21:b3:0c:5d:
ba:5e:18:97:53:86:4d:12:4e:f8:0c:63:8e:0d:3d:
a3:48:22:8a:5d:bb:fa:6a:45:d5:93:58:9d:31:14:
bd:ae:90:2a:5c:64:7d:e1:58:5e:46:16:62:cc:ab:
5f:3e:57:8c:02:d8:3c:12:fc:b5:31:82:0e:e7:56:
3f:3e:7a:3c:c5:4a:76:ce:6c:05:da:c2:c1:82:51:
cf:e6:4b:8a:76:b8:96:56:cd:e3:88:ed:35:72:03:
29:70:ee:a4:93:09:63:cb:04:57:81:c7:f3:fa:d7:
6c:c6:4e:ac:05:6a:68:f4:e9:fd:44:33:70:53:03:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:8E:29:3F:29:B5:80:96:33:04:F7:2F:5D:8C:84:95:88:CA:63
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/VsOOKT8ptYCWMwT3L12MhJWIymM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.242.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8b:4d:ca:3f:a5:bc:d1:d9:ff:e6:4c:10:69:74:20:88:05:
e2:d6:bb:0a:e3:37:aa:02:19:1e:18:b2:0a:37:06:42:1a:39:
a8:61:a0:af:be:6e:b0:d0:15:49:20:9b:4c:c6:57:10:ad:5f:
04:68:c5:e6:23:11:94:06:db:60:f4:ad:c7:96:1a:06:a0:ef:
51:e1:33:1e:93:73:d8:b4:69:0e:d8:14:91:9e:42:c9:a0:d0:
2b:c9:4c:02:33:4a:11:4c:f8:41:1b:21:22:06:1b:72:5a:e7:
cf:27:7a:86:a5:67:c0:0d:59:4e:99:ff:ff:ca:2e:9a:bd:69:
4e:5a:16:35:0f:74:73:a7:58:5d:ef:8a:65:7a:9a:b0:03:69:
d1:b1:41:d3:05:c5:f8:e9:06:86:6a:2e:98:2c:33:09:c9:eb:
54:c8:55:bf:74:b3:7d:8b:66:1f:14:88:d6:68:e5:ba:b5:35:
51:7d:f6:dd:cc:bc:a3:05:06:50:b1:78:e1:4a:21:88:03:1d:
38:ea:fb:b1:b9:55:a3:ed:36:9f:4e:a2:1a:dc:8e:81:83:d0:
8c:2e:c8:bb:6b:3c:ad:d6:87:d2:6d:38:e9:c3:7e:80:c1:41:
81:93:2f:dd:80:ee:48:48:3c:2d:f5:ad:23:b9:d4:24:8b:a8:
64:29:65:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org