Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/VXdIBTPDTpi4cAF9mbBLu5aUv1E.roa
File: VXdIBTPDTpi4cAF9mbBLu5aUv1E.roa (raw, json)
Hash identifier: 84mDO9EYTDB7Bsqk7uDB+IZJymD438krMWx1C5ZtBYI=
Subject key identifier: 55:77:48:05:33:C3:4E:98:B8:70:01:7D:99:B0:4B:BB:96:94:BF:51
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 018F8F63AA485646772D2342F40FB8EE9F00
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/VXdIBTPDTpi4cAF9mbBLu5aUv1E.roa
Signing time: Sun 19 May 2024 05:47:04 +0000
ROA not before: Sun 19 May 2024 05:47:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 185.99.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 07:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8f:63:aa:48:56:46:77:2d:23:42:f4:0f:b8:ee:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: May 19 05:47:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5577480533c34e98b870017d99b04bbb9694bf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:65:1d:65:25:33:84:2e:14:bc:3a:52:e8:
18:b5:52:b9:5b:34:03:e6:b3:08:62:96:b5:05:e2:
e0:78:d9:a8:f1:68:77:67:58:ef:56:6f:db:9f:7f:
e3:0c:a6:9b:1b:c8:3f:a6:2b:68:c9:55:fe:02:20:
ad:f8:14:06:52:7c:74:6f:7e:d3:61:e2:47:0c:69:
2f:0c:05:1c:5a:6a:6e:00:bd:01:53:e6:12:c7:ed:
74:09:4a:41:ad:20:6e:c3:74:5e:3c:2b:7f:ad:83:
ff:eb:65:0d:ba:34:64:b9:50:3f:4f:13:4f:e7:26:
4d:cf:d1:2a:11:30:cc:b4:d9:50:53:25:47:00:c2:
19:31:c0:6b:36:ab:28:fa:ff:ca:44:be:6f:1e:87:
e0:59:a3:e6:6f:fb:62:d6:d7:c9:06:90:af:a6:5d:
10:4d:1b:23:a8:7a:29:81:21:e0:2a:cb:a5:5e:36:
b9:72:4e:32:e4:19:19:09:4a:29:11:62:16:75:5b:
ed:95:e0:b8:65:16:a1:78:ce:11:b0:f4:51:51:ba:
c0:9f:a2:2b:61:f4:93:65:41:d1:a7:84:39:83:1c:
70:4a:82:1f:78:dc:1f:3c:5a:9f:66:e8:9b:c3:50:
0b:ee:25:29:63:df:ad:62:7c:d0:b5:5e:6b:d9:ea:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:77:48:05:33:C3:4E:98:B8:70:01:7D:99:B0:4B:BB:96:94:BF:51
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/VXdIBTPDTpi4cAF9mbBLu5aUv1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.20.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ca:1d:27:50:9c:37:48:26:23:41:4b:9a:4f:3c:e2:06:3c:
d3:c1:c1:71:db:ca:56:ab:9f:61:c3:5f:7e:92:08:23:43:2b:
4a:c1:87:b5:03:29:68:e9:c2:84:4f:e7:a8:69:13:1e:48:a9:
3d:1f:fe:11:6c:5c:73:33:31:ce:d3:f5:81:0d:3b:6b:0f:e5:
5a:91:3e:5f:64:bd:06:7e:70:27:1b:92:c9:a7:e1:93:cc:ab:
dc:6d:c6:4d:c9:af:79:6b:38:0c:60:f0:e5:34:c8:03:23:e4:
9f:31:aa:9b:a2:40:65:78:56:43:33:b5:c5:08:ba:50:51:86:
ef:b7:5f:60:8a:50:c9:35:bb:be:0e:09:75:1b:65:14:60:6f:
e6:ed:a0:a8:c9:2b:82:c4:42:ff:b3:75:03:16:ee:e2:eb:df:
b3:4a:6d:07:79:8c:85:96:41:2a:b7:c4:82:42:62:23:4a:0d:
d4:da:82:f3:d0:0e:cb:92:e4:c8:a8:7f:b5:eb:a1:d1:54:18:
5c:89:fe:85:00:26:7f:1a:01:bd:e6:80:a6:9b:ce:de:b1:8e:
6f:c2:55:3e:92:72:67:d0:c6:45:22:4f:f0:e7:70:02:98:38:
7b:19:26:40:c7:f6:cf:e0:25:db:0d:0b:91:08:9f:de:b1:5e:
55:e7:c4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 09:41:00 2024 by rpki-client on console-fra.rpki-client.org