Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/VSInsXUVCrZIKkOakSq6AnvngtI.roa
File: VSInsXUVCrZIKkOakSq6AnvngtI.roa (raw, json)
Hash identifier: /XQ2BoAUBLs6lHYDciHeo46zt9eRFBdINt/75ztI++U=
Subject key identifier: 55:22:27:B1:75:15:0A:B6:48:2A:43:9A:91:2A:BA:02:7B:E7:82:D2
Certificate issuer: /CN=025a8122c247d3efbbd2f6a814a5f687454188df
Certificate serial: 0185708C97AFF5F3B01ED1FBA24C8A4E19FE
Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/VSInsXUVCrZIKkOakSq6AnvngtI.roa
Signing time: Mon 02 Jan 2023 03:35:40 +0000
ROA not before: Mon 02 Jan 2023 03:35:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61380
IP address blocks: 185.8.156.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:97:af:f5:f3:b0:1e:d1:fb:a2:4c:8a:4e:19:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df
Validity
Not Before: Jan 2 03:35:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=552227b175150ab6482a439a912aba027be782d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:fd:ee:27:c2:4d:b6:6d:2a:f6:ba:f4:09:
04:45:0b:42:68:3a:ac:89:51:95:7f:30:5e:58:7b:
00:6b:57:86:ab:12:01:f1:f5:f3:4a:18:f8:3b:39:
ca:e0:6c:c9:78:e2:ea:3d:f6:cd:a0:84:87:23:f0:
b0:6f:f0:ab:9d:00:f1:f8:85:a0:f7:1a:2e:2d:b4:
e6:d8:70:9b:c6:12:b5:d7:d0:f1:ef:40:c0:ed:fb:
0c:95:0c:f1:36:88:ee:5f:14:5a:93:09:69:85:43:
0b:8f:5f:4d:79:6d:35:6e:c6:ae:b7:f7:9a:33:2f:
49:72:e0:97:cd:45:34:41:7f:92:0e:03:39:56:99:
ae:d9:db:f0:b1:aa:74:51:2c:2e:c1:c4:19:6c:ad:
33:ab:2c:6b:02:36:96:5f:d6:64:d6:33:d6:62:ea:
45:94:0c:5e:ab:3b:6a:9d:f9:fb:21:b3:c8:65:86:
68:bc:18:1b:b7:2a:80:b7:cf:96:db:b9:0f:3c:f8:
b9:cb:ad:14:78:f6:b8:be:3c:ce:db:29:02:b0:ca:
cd:8f:71:1e:cb:20:ad:6b:6c:e2:55:1b:4d:a4:d5:
07:27:58:ac:0d:52:18:13:1c:de:52:fe:97:dc:ae:
36:3f:7a:e2:d1:6a:a1:1b:6b:35:95:b1:0e:a5:27:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:22:27:B1:75:15:0A:B6:48:2A:43:9A:91:2A:BA:02:7B:E7:82:D2
X509v3 Authority Key Identifier:
keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/VSInsXUVCrZIKkOakSq6AnvngtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.156.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:92:82:47:d4:1a:88:98:5b:d8:b5:35:3e:63:3a:f9:81:66:
be:d3:cf:5f:92:80:fa:69:e2:c0:90:d5:3a:c6:1a:89:7a:d5:
46:36:24:77:e4:cd:78:09:af:f2:d1:a7:9a:0d:9e:3f:e2:37:
da:4d:53:00:e8:4f:e3:00:44:4f:37:ff:58:10:86:5f:44:f6:
a8:f4:f4:e0:67:92:ca:13:85:e3:0c:06:0a:75:49:45:36:6d:
af:ec:64:aa:05:78:97:f3:33:aa:e5:a2:84:2c:2a:08:8f:6a:
ab:93:46:3f:06:03:d9:6a:de:f8:ae:42:7f:5d:27:eb:a6:46:
f6:1f:6d:8f:9d:b6:2e:a8:a4:bf:3f:e8:45:6b:f7:84:68:85:
1b:d8:47:dd:77:aa:18:b4:26:2a:70:df:9b:13:a4:18:93:a9:
e1:f3:31:43:0e:e7:97:8f:9d:1c:f0:ff:d7:2c:f3:07:16:d1:
07:da:cb:15:23:72:12:cd:a2:96:9c:fd:1b:0d:f9:60:78:e6:
2b:5a:f8:45:e6:14:a6:93:91:fc:b3:5d:17:be:9b:85:42:c2:
6c:65:04:48:c8:f9:14:5b:72:07:42:3e:c4:df:c0:6e:95:22:
93:28:4f:00:be:05:0a:e0:cc:61:66:65:bc:fa:43:00:c9:a5:
d0:1c:3b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:45 2024 by rpki-client on console-ams.rpki-client.org