Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vhN5y3EYIU0HMLeWvvObX4DEfG8.roa
File: vhN5y3EYIU0HMLeWvvObX4DEfG8.roa (raw, json)
Hash identifier: 6GBNc0MuPRilK/0izG76iY6n3ceGqIqGpHEsI5P6hEU=
Subject key identifier: BE:13:79:CB:71:18:21:4D:07:30:B7:96:BE:F3:9B:5F:80:C4:7C:6F
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 01856D4199E48DD89BDB3C30C328357242F5
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vhN5y3EYIU0HMLeWvvObX4DEfG8.roa
Signing time: Sun 01 Jan 2023 12:14:53 +0000
ROA not before: Sun 01 Jan 2023 12:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207452
IP address blocks: 185.244.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:99:e4:8d:d8:9b:db:3c:30:c3:28:35:72:42:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Jan 1 12:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be1379cb7118214d0730b796bef39b5f80c47c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:10:34:3a:8a:e3:9f:15:8c:6c:71:d3:96:
81:fc:0a:58:38:ac:08:66:06:58:eb:6d:68:fa:18:
7f:1f:e1:04:63:4f:2f:92:8f:c8:b0:e1:9a:3f:55:
ce:8d:7f:6a:c2:6a:45:83:c6:41:ca:31:76:b1:bc:
22:00:39:34:32:da:c3:bf:7f:25:c5:3b:59:97:5d:
2b:90:1f:d4:77:25:0a:8e:4d:bd:31:1b:57:a0:c3:
87:a8:b0:d0:a3:46:5b:7a:24:8f:90:b8:7a:3a:21:
df:9f:0c:6e:d0:e4:78:12:89:3f:9d:b4:bf:bf:c1:
46:dc:4b:53:da:89:c9:cd:0d:39:44:0a:f0:2a:12:
58:8d:bf:83:5f:e2:2d:73:60:b6:dc:8f:19:67:d0:
80:80:b9:d5:ef:b3:e4:28:0a:02:99:f6:6c:bc:ad:
14:a4:1f:00:78:e4:88:65:20:7d:f7:70:06:69:33:
bc:99:90:5a:6f:66:50:91:e7:eb:e7:82:5b:d8:c7:
0d:21:b1:fc:e8:d1:2e:c8:98:a3:4a:93:69:5f:7c:
97:b7:9b:76:34:49:b5:44:e9:72:8e:fb:c5:78:c8:
ce:61:05:6d:8f:af:a6:35:12:ec:31:5b:de:d5:05:
bd:43:7d:f5:6c:39:99:bd:fe:eb:35:df:5c:23:a0:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:13:79:CB:71:18:21:4D:07:30:B7:96:BE:F3:9B:5F:80:C4:7C:6F
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vhN5y3EYIU0HMLeWvvObX4DEfG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.248.0/24
Signature Algorithm: sha256WithRSAEncryption
56:8c:c6:0e:f4:a5:dd:99:b8:af:79:02:d8:2b:3d:aa:c5:6c:
8f:40:f0:82:35:f8:cf:da:48:c0:8a:bd:98:7c:3a:f3:ce:fd:
ec:da:94:53:36:b0:fb:5e:7a:6f:d1:d1:5b:10:a6:6a:73:a1:
0b:bf:09:cf:16:d5:e4:9f:aa:49:1e:20:12:39:cc:1c:87:62:
3e:50:eb:5a:4b:6e:b8:67:c3:3c:78:77:be:2a:30:59:d7:dc:
a5:47:56:c0:7c:e4:ac:9d:b2:8d:df:85:3d:8f:89:17:5a:c9:
85:dc:6f:38:0b:d6:b3:96:57:a6:57:ba:6a:47:60:bd:45:82:
75:56:79:76:cb:c1:af:2c:a1:23:0f:1a:69:bd:58:04:a1:5f:
f6:d9:6d:03:2c:37:1a:52:77:17:e0:88:c6:df:dc:38:96:49:
8e:04:ff:51:77:37:d6:0c:e3:b3:4d:70:ad:f4:5e:66:11:b0:
9e:58:18:2b:61:3d:4b:58:fd:69:3d:d7:81:f3:53:e3:00:d2:
75:55:7b:ac:23:72:eb:7d:f6:86:dc:b1:cb:14:8e:da:d3:df:
a5:a3:36:00:fc:32:d9:67:ef:32:6c:bc:30:f3:32:22:0a:42:
e7:c5:9a:06:cf:cb:f3:69:69:8f:01:81:c0:64:dc:50:b0:38:
75:32:dc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:04 2024 by rpki-client on console-fra.rpki-client.org