Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/0oxkRqRwi8Sg5k4zKbiYlNL2y-s.roa
File: 0oxkRqRwi8Sg5k4zKbiYlNL2y-s.roa (raw, json)
Hash identifier: /+oJCNdK7aoVQPoYmYqCIl/dmKNfpI8Uacbr9gJio9g=
Subject key identifier: D2:8C:64:46:A4:70:8B:C4:A0:E6:4E:33:29:B8:98:94:D2:F6:CB:EB
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 018B911A83EA76332D4CAB077CA0AEF79333
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/0oxkRqRwi8Sg5k4zKbiYlNL2y-s.roa
Signing time: Thu 02 Nov 2023 17:35:15 +0000
ROA not before: Thu 02 Nov 2023 17:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205814
IP address blocks: 185.234.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:1a:83:ea:76:33:2d:4c:ab:07:7c:a0:ae:f7:93:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Nov 2 17:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d28c6446a4708bc4a0e64e3329b89894d2f6cbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:ab:d2:53:eb:2f:64:4a:f4:28:66:4a:37:
04:56:42:49:11:c8:4d:58:bd:d2:b5:c2:ba:7c:d1:
77:49:5b:48:1b:17:f6:4d:bd:74:98:ef:8f:89:83:
af:81:e5:4d:5e:fa:9a:07:ce:e6:21:cc:1d:d3:87:
41:16:c4:a9:94:1b:e8:e7:d1:92:15:41:b0:89:95:
d4:2e:50:1b:8f:2b:fe:80:74:b3:7d:31:8d:99:72:
df:57:26:6e:8f:f2:84:04:5d:6d:5b:e4:2f:25:bf:
44:e5:88:85:b9:2e:a4:bd:67:d0:86:b9:9d:1a:44:
89:7b:cf:78:35:a5:6e:ae:21:d4:a4:e9:0d:23:96:
2e:28:b6:c8:2c:70:f0:7d:35:34:d6:b4:f6:c8:e8:
d1:bc:53:7b:8d:8a:c3:7d:a2:bd:39:c5:e9:84:40:
37:3f:8a:b8:b7:04:ab:4b:8a:8e:04:18:f5:14:16:
ad:89:8e:8c:cf:4f:4f:22:97:df:1b:28:7c:67:c6:
f2:dd:d3:1b:1a:4d:33:80:e5:3f:6c:ca:84:0d:04:
55:38:2c:b5:9a:8c:66:24:61:44:31:56:7c:10:02:
55:11:75:1c:d7:4b:48:43:29:ca:11:9e:8f:42:a0:
32:c3:c5:89:81:19:08:66:a7:34:95:aa:e6:9d:83:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8C:64:46:A4:70:8B:C4:A0:E6:4E:33:29:B8:98:94:D2:F6:CB:EB
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/0oxkRqRwi8Sg5k4zKbiYlNL2y-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.244.0/24
Signature Algorithm: sha256WithRSAEncryption
53:75:d8:33:c0:36:4e:df:aa:28:99:50:28:f1:63:56:d4:8a:
84:53:ec:c6:57:22:b5:30:d5:78:c0:86:23:42:2a:50:7a:ed:
5a:e0:bd:3b:67:4f:28:d3:c4:ea:ee:7e:ff:40:38:f7:27:fe:
81:f2:bd:4c:66:2a:f3:77:2e:0d:b9:a7:ca:18:fc:95:ac:13:
c8:8a:ca:b5:4b:69:56:f6:63:ca:b2:44:0c:98:78:49:55:76:
53:08:1a:fc:c4:d3:b1:e1:11:7f:bc:4f:17:44:a5:8e:41:fc:
6d:c7:f6:df:f2:2d:7e:54:5a:46:3e:ba:6d:97:2a:99:c6:2c:
7d:75:30:4d:55:3e:62:74:27:e7:3f:f3:90:6f:b5:d7:1e:a0:
70:92:bb:4b:ae:61:1c:ec:31:54:fe:24:3f:7f:a4:59:52:c7:
4d:bd:fa:36:5e:f1:cc:01:0a:b9:29:52:f8:dd:fb:f2:c7:7b:
43:6b:82:fb:07:50:39:17:31:80:6a:04:b0:d1:8e:d8:f0:80:
08:59:1a:fa:d5:25:8b:5e:a8:3b:df:64:e8:fb:6d:9b:e6:8d:
d6:9a:cf:5d:cb:28:d4:bb:d1:cd:fb:75:c4:9e:b2:79:14:07:
8a:d8:da:c1:ae:2d:4b:ee:fe:35:a0:13:06:8d:14:c2:2c:0e:
48:3e:8f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:53 2024 by rpki-client on console-fra.rpki-client.org