Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/oFTBwJ8MAM55TIDuWghVLjH9nHo.roa
File: oFTBwJ8MAM55TIDuWghVLjH9nHo.roa (raw, json)
Hash identifier: jynXqHSfqXLlIjoPuMXH/XuLnbm0Al8O18SVBceOlY0=
Subject key identifier: A0:54:C1:C0:9F:0C:00:CE:79:4C:80:EE:5A:08:55:2E:31:FD:9C:7A
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 01856DC1AACDA3625F3BE79691B92A6A1F75
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/oFTBwJ8MAM55TIDuWghVLjH9nHo.roa
Signing time: Sun 01 Jan 2023 14:34:46 +0000
ROA not before: Sun 01 Jan 2023 14:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203653
IP address blocks: 185.234.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Nov 2023 17:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:aa:cd:a3:62:5f:3b:e7:96:91:b9:2a:6a:1f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Jan 1 14:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a054c1c09f0c00ce794c80ee5a08552e31fd9c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:75:f8:fa:0f:ee:84:97:4a:24:8e:64:5e:
5a:16:de:74:92:20:f5:34:ef:f3:11:78:4a:94:a5:
38:b3:e9:f9:c9:f3:0e:f1:d9:15:ef:99:43:3d:20:
dc:89:89:d2:cb:f4:08:f0:97:99:df:de:c1:08:8f:
91:18:50:a2:15:57:25:41:ca:61:58:50:9e:5a:5e:
06:24:7f:d5:3c:6a:81:52:1c:6d:39:81:a1:84:f1:
fe:60:23:17:f1:64:78:54:3a:c9:52:84:6e:87:0a:
44:ce:6f:bd:f7:bd:2e:fe:c2:3d:c8:c7:a5:51:b2:
22:b9:40:40:1e:0c:6d:c5:c9:6d:2c:fd:9d:b5:61:
e2:ed:cc:f4:e1:52:a0:42:73:82:67:5f:0e:ca:6f:
2f:3c:58:56:1f:f1:37:aa:57:40:a8:20:79:88:ca:
f9:62:f7:f1:27:75:7e:03:3d:8e:3c:df:db:8a:9b:
df:a5:45:c5:ca:24:93:56:04:00:3d:3e:53:2b:bc:
42:31:59:38:7b:e8:7c:30:15:91:fa:ef:97:87:31:
9f:4f:a9:17:ab:58:49:6b:e3:8b:96:97:96:d3:76:
89:e9:20:d2:c2:d1:f7:e0:5c:84:b6:9c:d5:0e:40:
76:84:ec:8f:a0:99:d5:96:da:f7:e1:3d:32:0c:a2:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:54:C1:C0:9F:0C:00:CE:79:4C:80:EE:5A:08:55:2E:31:FD:9C:7A
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/oFTBwJ8MAM55TIDuWghVLjH9nHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.244.0/24
Signature Algorithm: sha256WithRSAEncryption
52:af:cb:a5:83:71:6c:0c:9a:57:de:fa:b2:3d:84:c6:8b:e1:
d1:cd:eb:de:62:45:91:28:c9:a8:c4:3a:80:d4:ec:a6:65:e3:
8f:f6:06:81:a1:0b:d1:19:c0:0a:b9:04:96:2e:4b:9f:25:61:
b2:44:f1:13:26:a9:04:8e:1a:c6:51:45:c7:57:ee:a7:19:43:
c3:a1:8a:a1:ea:d0:15:44:2b:89:0a:61:5b:48:f2:d7:28:a2:
26:75:14:6b:3b:bf:14:6f:11:51:a9:33:15:fb:71:73:66:c9:
8b:40:49:a3:3d:25:6d:f8:d6:d9:46:e0:72:f0:8a:b3:2a:dc:
7d:79:b9:19:16:26:f8:f1:a7:65:7d:c2:78:1b:70:67:f8:2d:
32:03:62:93:38:a4:15:f6:38:d7:eb:bb:dd:90:3d:e8:b1:76:
db:4a:59:7a:12:01:30:f0:36:06:e7:23:df:09:be:6d:c8:7e:
1f:bc:97:1a:13:81:3f:42:8c:2e:f0:51:11:dd:ce:de:9b:cc:
91:c3:19:d1:00:ff:b3:77:9e:71:86:3e:1a:ce:d6:be:01:e6:
ab:d9:3e:bb:cb:3d:32:af:cc:ce:cc:92:9d:32:e1:94:0f:9d:
5c:05:6a:f7:a0:d0:28:d6:78:7c:dc:48:75:2c:fc:18:57:c6:
69:1c:a8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:19 2024 by rpki-client on console-ams.rpki-client.org