Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VYA79bYqIysA2zSmQr2FHJiUcMQ.roa
File: VYA79bYqIysA2zSmQr2FHJiUcMQ.roa (raw, json)
Hash identifier: 2gB9l4El75ppBqdUc63s5Ul7cJmVoE4Ecy+Exq1/AqE=
Subject key identifier: 55:80:3B:F5:B6:2A:23:2B:00:DB:34:A6:42:BD:85:1C:98:94:70:C4
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018571E88C3EC2A85A5B1A67DA37840DD28F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VYA79bYqIysA2zSmQr2FHJiUcMQ.roa
Signing time: Mon 02 Jan 2023 09:55:43 +0000
ROA not before: Mon 02 Jan 2023 09:55:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61959
IP address blocks: 185.43.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e8:8c:3e:c2:a8:5a:5b:1a:67:da:37:84:0d:d2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 09:55:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55803bf5b62a232b00db34a642bd851c989470c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:12:fc:72:9b:e2:7c:90:06:3d:57:fc:0f:
33:b8:90:a4:d2:24:21:56:ea:a0:d5:5f:9f:b9:4c:
30:29:e8:01:02:7f:56:2b:18:f6:72:21:56:88:13:
de:10:38:22:80:96:cb:65:98:c3:a4:b9:c3:6e:2b:
3a:95:ef:60:5d:44:b3:72:52:0b:5f:22:c9:4c:f3:
12:5a:a0:8b:b7:48:d5:1c:71:fc:68:fb:ca:9f:52:
dc:f1:6b:05:ec:bd:e0:e6:5d:21:17:d4:28:5b:ae:
9d:2a:73:67:95:7d:94:84:96:41:1f:09:de:86:f2:
53:11:be:d6:db:60:44:99:72:d5:9a:ef:4c:7f:5e:
69:19:b5:89:bc:4a:a7:76:de:c3:f3:ff:02:ed:b2:
fb:6e:13:33:c6:7c:de:d7:b8:75:9e:a4:2e:57:38:
62:a1:75:bb:22:fe:8f:4c:5e:07:05:7e:ed:46:73:
f4:6d:41:cc:1e:66:25:e3:f8:8e:47:7c:4f:44:28:
18:e6:ac:2a:bb:ac:27:ea:bc:95:d2:1d:34:3d:4a:
79:bf:e3:70:38:e0:4a:3c:bc:9f:c7:e5:e5:36:cd:
0c:17:39:78:e3:cb:c1:97:bf:25:f6:3d:64:48:11:
04:88:a1:25:8f:16:4e:3f:6b:e1:ee:4e:94:bf:bf:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:80:3B:F5:B6:2A:23:2B:00:DB:34:A6:42:BD:85:1C:98:94:70:C4
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VYA79bYqIysA2zSmQr2FHJiUcMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.250.0/24
Signature Algorithm: sha256WithRSAEncryption
61:84:53:61:b1:3e:72:ec:4f:94:0d:df:20:0d:2e:c4:c2:c2:
1e:e4:33:e8:6f:30:2a:5f:e6:b5:e0:ed:fe:1f:ac:73:b9:c2:
e2:50:50:d3:e4:c0:8c:85:6a:f4:0e:1a:ff:0a:38:fd:1c:3a:
e7:1f:e7:27:5a:5f:31:65:9c:91:f7:d6:d8:34:da:60:62:ee:
72:7f:51:8b:1e:1f:c1:4e:3b:54:e9:0a:0f:67:97:35:47:93:
b8:fd:04:ff:74:bc:85:a8:46:44:f1:20:0b:a7:e4:f2:2b:76:
c7:6b:4f:0d:26:14:39:7a:23:4c:a5:2f:f3:93:c3:2c:22:46:
6d:b6:4c:c1:73:3f:0d:e1:c0:c3:06:7c:cb:14:a4:da:28:34:
ea:71:65:67:19:2f:73:24:2c:56:86:8d:81:8c:51:26:b3:66:
6e:bd:e6:2c:61:c6:10:c2:da:66:19:c7:87:ae:01:c6:28:0c:
7a:6a:09:92:d3:5b:fd:c2:a2:c7:e3:c4:a3:3f:9e:b4:9e:d8:
d4:94:34:5f:ba:32:c8:fd:4f:82:7e:d8:67:f3:85:c5:3d:e1:
94:57:47:b5:f9:91:11:78:25:92:85:95:4c:66:ee:49:5a:40:
e4:7e:10:38:50:db:52:eb:19:5b:f7:a5:c9:cc:a7:b9:01:7d:
54:2a:e0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:34 2024 by rpki-client on console-ams.rpki-client.org