Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vuoUYupCFjQ70oc0X8XXnqM5iOk.roa
File: vuoUYupCFjQ70oc0X8XXnqM5iOk.roa (raw, json)
Hash identifier: 7d+rIXeYtMfCP+MlpN3Su10JIfKfFO+dSKBDhUuvCb0=
Subject key identifier: BE:EA:14:62:EA:42:16:34:3B:D2:87:34:5F:C5:D7:9E:A3:39:88:E9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B28EEBC3A88DD38B9B6F24DB2DB2301FE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vuoUYupCFjQ70oc0X8XXnqM5iOk.roa
Signing time: Fri 13 Oct 2023 12:06:56 +0000
ROA not before: Fri 13 Oct 2023 12:06:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22356
IP address blocks: 185.219.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:ee:bc:3a:88:dd:38:b9:b6:f2:4d:b2:db:23:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 13 12:06:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beea1462ea4216343bd287345fc5d79ea33988e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ef:98:44:4b:a4:23:97:12:dd:f2:75:1a:17:
1b:2f:61:db:db:76:8f:cf:94:16:35:09:e2:e1:61:
72:05:4e:14:8e:3f:cd:b6:e9:0c:61:ed:a6:09:7b:
20:0d:e1:91:0b:9a:9e:11:29:17:a1:e0:b6:69:30:
7c:28:05:99:a0:bb:bd:e4:dc:d2:58:ff:a9:54:bd:
23:e6:37:22:e5:45:28:f5:b3:e0:60:f4:d5:7a:e1:
90:47:af:61:68:a2:b4:2d:25:22:09:ff:fb:ff:7d:
d4:fb:d7:9d:ef:8e:6a:73:bd:13:9e:ce:6b:5a:a0:
d9:02:eb:0c:1c:f3:4b:6c:e8:32:a9:02:80:08:3d:
cf:d3:5f:26:16:96:5c:90:fb:cc:df:09:50:b4:70:
ed:26:85:d5:cb:bc:e4:73:d8:14:d1:34:46:da:48:
c0:ba:40:c2:6e:c9:0f:5e:8c:b8:42:15:75:c4:d2:
e4:0f:58:f9:9d:9b:b6:2b:4e:c8:b0:6b:c5:dd:94:
fc:3e:d5:98:14:09:ac:d7:9e:0e:ff:d8:a3:e1:50:
41:cc:ac:ed:40:c5:03:3b:9b:70:bf:da:2a:68:de:
2f:27:ba:34:34:fc:ce:cd:4f:49:36:12:eb:d3:60:
99:41:58:60:02:d5:7b:ba:1f:a1:2f:26:90:b9:57:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EA:14:62:EA:42:16:34:3B:D2:87:34:5F:C5:D7:9E:A3:39:88:E9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vuoUYupCFjQ70oc0X8XXnqM5iOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.124.0/24
Signature Algorithm: sha256WithRSAEncryption
47:09:ad:39:94:87:de:2a:fb:c3:2c:3f:b4:e7:82:6f:b7:94:
14:c9:c8:7d:4b:43:13:1c:84:a8:b3:68:67:52:43:86:e7:e7:
9e:24:2e:23:e6:90:6c:ae:1d:2c:9c:ad:cb:0f:bf:fe:cc:7d:
33:ba:cd:b4:5e:da:3a:e2:73:8b:b2:1b:13:00:ec:42:c9:76:
a3:4f:2e:25:29:5f:85:4e:52:a1:de:d3:93:03:bb:65:df:8c:
d0:9e:44:80:6b:7c:b0:8d:ce:83:f1:ba:b7:3e:eb:df:7a:d0:
9c:6d:be:32:0d:42:94:62:34:7d:f8:56:99:e1:6b:82:01:af:
72:0b:04:fa:84:73:98:66:ff:d4:05:df:7d:54:02:12:75:d6:
ac:15:57:29:62:4f:04:e3:8d:34:5b:22:f1:0b:ae:32:7d:86:
e5:5e:ee:4b:4d:1a:cc:e2:23:10:e0:35:61:ea:38:27:39:00:
31:d4:30:9f:c8:88:d1:1d:70:ee:c6:0c:d5:01:12:5c:09:91:
31:48:78:17:db:02:c7:33:51:33:17:fe:de:54:d1:c1:40:51:
10:c1:19:40:b5:2e:79:d3:c4:b1:6c:5c:3d:eb:0b:b5:4a:34:
9d:2d:6a:e5:03:29:39:de:52:1c:b7:1f:95:33:3b:fe:8d:51:
e7:4c:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:14 2024 by rpki-client on console-ams.rpki-client.org