Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/vKsjQvMbsFmGAcJO04ko7CjK8gI.roa
File: vKsjQvMbsFmGAcJO04ko7CjK8gI.roa (raw, json)
Hash identifier: 72ulHy3U0XhzcDrpFbTyhrC+XhMpYaEPLslUnxjMK0w=
Subject key identifier: BC:AB:23:42:F3:1B:B0:59:86:01:C2:4E:D3:89:28:EC:28:CA:F2:02
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 0189344563CDD7946B890896B19CBC96F62C
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/vKsjQvMbsFmGAcJO04ko7CjK8gI.roa
Signing time: Sat 08 Jul 2023 06:51:50 +0000
ROA not before: Sat 08 Jul 2023 06:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60976
IP address blocks: 185.192.112.0/24 maxlen: 24
185.192.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:45:63:cd:d7:94:6b:89:08:96:b1:9c:bc:96:f6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Jul 8 06:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcab2342f31bb0598601c24ed38928ec28caf202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:35:f7:d6:4d:56:5e:44:ab:f1:87:8a:08:
0d:b2:e7:d3:4c:60:9d:0b:13:39:f4:66:7d:e4:b5:
1b:81:1b:a8:34:19:30:7d:ba:7d:8c:c3:74:56:a4:
6a:8a:77:2a:0f:3b:ee:e9:bd:68:2c:8e:f5:07:84:
aa:be:db:24:85:f2:cc:10:da:6c:f5:a0:d2:09:a7:
c2:9d:d0:dc:50:f5:f6:64:2e:11:d4:49:d2:26:c5:
3a:77:e7:23:c4:be:cc:35:a2:29:01:17:90:30:2b:
e8:f0:2e:ce:db:a2:63:87:95:bc:a3:15:0e:a5:19:
d6:6d:a8:25:ac:95:fd:61:c4:bb:63:01:06:94:f3:
fd:b2:7d:b9:1d:59:e2:bd:03:c1:43:3f:fe:94:99:
13:29:86:7d:68:57:07:8f:97:c2:d4:39:2a:cf:44:
1c:39:8b:2d:00:7b:c8:1a:e1:37:df:67:0f:f8:18:
4d:77:6e:89:1a:6c:73:9f:67:34:cf:c0:b9:11:78:
80:ef:ae:a5:ab:1d:8b:4c:00:5c:55:c4:db:1b:bf:
a1:e9:d8:4c:01:98:b6:54:59:46:e4:5c:9d:ac:49:
60:7d:7a:37:81:90:59:2c:5c:c3:41:de:74:1d:2b:
35:33:b5:f6:77:0b:2e:21:87:21:a8:da:1c:c2:91:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:23:42:F3:1B:B0:59:86:01:C2:4E:D3:89:28:EC:28:CA:F2:02
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/vKsjQvMbsFmGAcJO04ko7CjK8gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.112.0/23
Signature Algorithm: sha256WithRSAEncryption
65:22:07:05:b7:54:08:d4:8d:32:52:46:6a:2c:9f:39:a2:95:
95:25:49:ef:53:e2:07:09:42:ef:9d:e8:74:fe:74:7a:22:67:
96:82:ae:2a:2f:66:02:c5:99:4e:56:ca:2b:f3:04:fa:8c:05:
75:4a:11:05:67:e9:82:5f:79:f8:47:39:c2:fc:21:d2:b1:77:
1f:89:e3:92:b9:5a:38:fe:15:34:ed:00:3f:74:d2:9e:27:45:
9c:28:be:7d:6d:7f:87:0e:80:fb:05:6c:a2:9a:df:bc:5b:55:
ba:bc:a1:17:c9:9e:7a:f8:e4:cb:37:80:3f:1a:04:0a:bc:68:
b0:14:a3:fd:26:b5:19:cb:d2:97:1a:40:72:3f:23:93:df:cb:
6d:9b:0a:19:74:64:15:d4:a1:36:72:9f:ee:8c:08:cb:65:a7:
b1:7a:79:f8:5c:05:69:f8:7d:e8:c5:32:57:11:43:79:66:80:
75:cc:88:05:62:da:11:10:31:e3:8e:8b:e4:44:4f:4e:f2:26:
93:27:15:ff:0b:e2:2d:61:b5:54:62:fc:b7:a0:ff:37:3b:a6:
00:9b:f4:bc:a8:f8:c6:c3:67:a0:8b:f3:08:2b:b0:1f:43:20:
35:09:ce:33:23:88:c1:58:83:4a:8e:2f:13:c3:97:e2:c8:44:
6d:10:8a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:54 2024 by rpki-client on console-fra.rpki-client.org