Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/VYvDTbkSSymORjjVEgBXwNiVlK8.roa
File: VYvDTbkSSymORjjVEgBXwNiVlK8.roa (raw, json)
Hash identifier: VW6kJs07LJYcqO/LQUYPCr0ATBQ5upNsFM122gGX3lU=
Subject key identifier: 55:8B:C3:4D:B9:12:4B:29:8E:46:38:D5:12:00:57:C0:D8:95:94:AF
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018C405274E0EFD68F942707CAF7898ECDDD
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/VYvDTbkSSymORjjVEgBXwNiVlK8.roa
Signing time: Wed 06 Dec 2023 18:09:54 +0000
ROA not before: Wed 06 Dec 2023 18:09:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397630
IP address blocks: 89.185.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:52:74:e0:ef:d6:8f:94:27:07:ca:f7:89:8e:cd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 6 18:09:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=558bc34db9124b298e4638d5120057c0d89594af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:41:a3:9c:7e:66:38:7c:f5:af:a2:08:e6:
65:a1:55:38:81:7e:0b:50:d6:54:d2:fe:b6:ad:2b:
69:e3:ea:ab:da:7f:70:b4:db:a6:f8:3a:a5:22:ea:
b4:d9:85:b2:0e:b8:0b:f4:89:2a:cb:e9:2c:06:02:
85:61:87:d5:fb:a6:27:5e:f2:56:9c:1d:66:2d:46:
d5:8e:7e:e3:c0:0b:d9:57:83:85:d1:aa:bc:3f:04:
e5:b2:c1:cd:2a:40:47:86:46:cc:4e:d2:dc:d9:27:
01:44:11:f2:41:7d:5b:22:de:3f:4c:23:9e:58:13:
91:67:ad:b5:8e:4e:f7:e9:39:80:d9:3a:c2:12:71:
c2:ac:cd:ba:3f:32:39:ee:83:77:c9:33:e9:f2:df:
86:06:4e:99:51:78:4b:ea:48:cc:c7:af:50:cc:0f:
a0:c0:02:b3:ef:52:c6:e8:a3:e7:dc:91:08:6c:5c:
b1:59:10:97:40:e8:23:b7:dd:60:4f:9e:82:a4:91:
cf:51:53:f0:a6:63:f2:fb:2f:b9:4e:d3:33:03:8c:
b6:b8:e6:9f:53:59:1d:21:13:73:22:50:3b:27:a7:
e0:f6:aa:91:cc:ce:b0:a6:3f:ad:85:fd:99:3f:c0:
fc:53:c8:23:14:6d:ed:f4:b1:b3:bd:f2:da:b7:b6:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8B:C3:4D:B9:12:4B:29:8E:46:38:D5:12:00:57:C0:D8:95:94:AF
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/VYvDTbkSSymORjjVEgBXwNiVlK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.22.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:bc:a9:98:eb:e8:9a:b5:7e:65:f0:21:77:0d:c3:94:e8:80:
f2:92:f6:89:50:ea:60:ce:fb:d4:e2:7b:e2:c0:3b:b6:94:53:
cd:c5:0f:30:77:1e:65:f4:27:af:39:20:3c:81:49:6c:29:47:
ce:97:55:7a:25:f6:6c:5b:d4:b4:42:d2:8f:94:2d:1b:6b:43:
98:76:30:b8:ec:ac:e4:9a:1e:08:94:78:7e:dd:70:89:68:1a:
7e:19:c9:8e:8a:49:a0:e3:9e:4b:ed:15:a6:6d:52:c0:63:7b:
2f:c8:27:a2:69:53:e8:a1:33:fd:07:21:b5:5d:90:82:56:8f:
0d:6e:c7:79:37:45:57:58:86:1c:15:ef:77:57:c2:b8:f7:87:
b1:74:e7:3e:a9:d1:d7:68:07:06:5e:d1:5f:14:55:42:ad:21:
ce:95:5c:63:ba:af:69:99:cb:8f:7c:1f:84:4a:ef:3a:07:8d:
db:c5:d4:1b:9f:b5:c2:d2:d1:8c:7c:b7:51:71:af:7c:3f:b5:
97:ea:ac:aa:51:02:d8:87:ea:6a:06:e2:6d:91:b3:41:60:9b:
34:35:01:0e:46:e5:b8:0a:5d:1a:a3:93:ad:f7:17:13:1a:5f:
d5:e6:19:15:a4:cb:ab:2c:b4:92:37:6a:46:2a:9f:c9:0d:e2:
90:5c:d7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org