Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VUR697PE3yzLObLM6tynMpZdbdk.roa
File: VUR697PE3yzLObLM6tynMpZdbdk.roa (raw, json)
Hash identifier: aY9CnZ7GbUxkfxXWCM8wfaqyMJ1uBq1sS3np5O9VAvg=
Subject key identifier: 55:44:7A:F7:B3:C4:DF:2C:CB:39:B2:CC:EA:DC:A7:32:96:5D:6D:D9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0185732845750CE4C4969B4929A6DF18649D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VUR697PE3yzLObLM6tynMpZdbdk.roa
Signing time: Mon 02 Jan 2023 15:44:57 +0000
ROA not before: Mon 02 Jan 2023 15:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204579
IP address blocks: 185.13.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:45:75:0c:e4:c4:96:9b:49:29:a6:df:18:64:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 15:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55447af7b3c4df2ccb39b2cceadca732965d6dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:66:fb:7e:d3:ca:f0:e1:88:06:5c:5d:9e:
9a:32:8a:07:9a:4e:b5:9d:47:70:f2:9c:07:26:17:
33:25:d4:0b:df:32:ce:5f:f8:0c:3e:eb:d9:1b:16:
6b:e2:a2:3c:b4:b3:37:29:ef:20:61:c4:d3:50:fa:
6d:84:f5:e8:18:91:7e:20:3c:1f:b5:9c:f6:a2:a7:
ea:ff:40:45:33:9b:b4:93:ff:b0:fb:8e:3d:a3:94:
82:12:57:6d:a3:10:c5:68:9f:64:c9:3c:a1:be:5f:
a6:56:84:6b:7d:8c:fc:fc:4c:71:95:4d:07:d6:69:
f5:95:a2:e1:e8:39:2c:26:ba:b8:6e:88:b7:f1:4a:
dd:53:4c:d5:c4:a5:e4:95:d7:a8:e5:21:2e:b7:98:
ea:4c:2b:cb:a1:66:2a:3c:c3:69:e5:b2:d8:2e:3e:
e4:b5:ae:ac:cd:ef:55:ec:4f:34:cd:12:37:78:51:
e1:ba:36:84:92:a1:41:46:cc:f9:ae:06:fc:9f:11:
77:fa:b9:88:c4:5c:12:c4:95:d0:f5:9e:29:9b:e8:
bb:19:11:bb:83:70:66:9d:0c:c8:fe:07:c7:d3:44:
d0:a7:24:20:94:16:1e:22:67:78:fb:86:a8:2f:a9:
2c:52:02:87:21:8f:e4:7c:2d:61:eb:70:c6:07:ec:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:44:7A:F7:B3:C4:DF:2C:CB:39:B2:CC:EA:DC:A7:32:96:5D:6D:D9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VUR697PE3yzLObLM6tynMpZdbdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.158.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:85:31:6c:6e:37:2e:c2:f1:e8:d3:67:b3:01:d4:76:05:fd:
df:04:3c:a2:cd:7d:50:61:3e:20:1b:cd:f1:25:a9:ad:19:42:
d7:e6:85:b8:13:12:f4:77:1b:eb:41:ba:4d:8b:4f:52:3b:c8:
82:bc:47:78:71:3d:81:ae:9e:8f:64:69:e2:47:3a:b5:9c:d2:
ce:c7:e9:32:e9:c7:e8:e0:27:8a:a3:32:1d:f2:e0:ab:57:2b:
18:5d:d3:9c:7d:7d:c0:f7:00:cd:cf:cb:86:5a:38:4d:c4:55:
d0:c6:fb:1b:a3:74:45:c7:b8:e1:c2:15:bf:a8:e7:a0:a8:56:
c6:08:8d:8c:38:40:92:a9:18:d3:e2:64:7b:43:6f:80:de:8a:
a9:62:7d:43:2d:f7:54:53:aa:98:9c:8e:a0:11:10:07:ce:f9:
c0:5f:b9:8c:11:97:f8:67:1c:76:f7:af:2e:41:68:a0:93:a8:
67:cb:90:5b:fe:88:80:a9:3a:e5:88:be:fd:19:dc:64:38:1b:
ae:55:35:78:54:3d:01:cb:69:9f:0c:00:45:26:d8:66:8b:c4:
b6:2c:75:d7:d2:3c:e4:f1:19:dc:4a:1d:b7:7e:b8:98:6d:55:
89:92:c6:3d:f6:c2:98:b1:62:c4:51:06:5d:76:4e:34:b7:c9:
65:8c:d9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org