Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/VX6K-NMeMo-nr0p_vDpEnStnKEU.roa
File: VX6K-NMeMo-nr0p_vDpEnStnKEU.roa (raw, json)
Hash identifier: P4YtthsB8NuRGnLfXlaHBfCa1DLQZCZihdLbo1h47AY=
Subject key identifier: 55:7E:8A:F8:D3:1E:32:8F:A7:AF:4A:7F:BC:3A:44:9D:2B:67:28:45
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018CC794FAF8CC8B54B965E2E7FBCF4C5402
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/VX6K-NMeMo-nr0p_vDpEnStnKEU.roa
Signing time: Tue 02 Jan 2024 00:31:18 +0000
ROA not before: Tue 02 Jan 2024 00:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209260
IP address blocks: 185.104.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 07:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:fa:f8:cc:8b:54:b9:65:e2:e7:fb:cf:4c:54:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 00:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=557e8af8d31e328fa7af4a7fbc3a449d2b672845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:31:8e:fa:43:fa:e0:81:c5:0d:4d:0b:a9:
ad:b8:cf:cf:5e:7d:4d:7b:1b:d7:68:d5:c5:4d:7b:
12:e7:09:d1:14:ca:52:9c:06:45:2d:de:08:6e:ce:
66:7c:17:6e:04:48:81:ba:a6:88:62:b4:75:5f:46:
96:bf:6b:96:36:34:f5:11:3e:c6:64:9d:23:2c:56:
6e:a6:f9:93:7c:37:97:fc:ea:b2:a3:0e:3b:e4:91:
3c:9a:7a:40:53:78:c0:d0:e7:97:c7:34:03:be:7a:
65:b5:c8:c7:0b:29:41:f2:5a:8c:e9:ac:4b:94:6d:
68:a1:3e:83:d9:d1:cb:a4:ec:9e:60:0b:1e:55:b1:
cd:5c:6f:71:63:b5:cf:ef:6c:97:8e:00:ea:9c:5b:
46:70:f9:58:fc:ba:ec:1d:c2:9d:68:89:8b:a5:ad:
c5:ff:c4:c1:03:b3:60:f7:5c:a7:76:b7:6d:1a:02:
78:b9:68:42:22:dd:11:e5:6b:2e:05:69:09:c2:09:
b8:61:6e:72:27:53:51:ff:66:06:a5:e5:83:a7:5f:
71:ae:8f:38:87:2e:dc:89:5b:9e:62:33:40:f8:a5:
94:1f:8f:50:94:85:1c:23:64:50:2a:be:d0:39:da:
fc:76:bc:53:11:07:cd:be:a6:96:bf:4f:30:de:03:
ac:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7E:8A:F8:D3:1E:32:8F:A7:AF:4A:7F:BC:3A:44:9D:2B:67:28:45
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/VX6K-NMeMo-nr0p_vDpEnStnKEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.12.0/24
Signature Algorithm: sha256WithRSAEncryption
25:37:56:ca:9c:d3:ac:69:d1:79:ed:be:67:04:3b:67:e6:9f:
24:94:f7:7a:77:7c:59:21:67:ce:8e:2d:64:10:0c:49:d6:a0:
a5:ef:c2:72:81:e0:d4:8a:85:59:f3:54:2f:8e:bd:9b:5b:df:
de:ec:20:e8:68:ee:10:fd:e4:df:30:c1:68:e3:e1:ec:4b:8d:
5d:2a:94:ae:d5:d3:4a:94:5e:be:b9:19:46:42:e2:e0:eb:08:
2c:0f:fe:ff:d7:79:ac:31:09:7d:9b:41:e0:e5:2f:d1:5f:00:
5e:9d:8d:48:aa:e7:a4:a4:8a:5b:8c:6d:42:4b:10:97:6b:3a:
92:e0:e7:ff:30:1e:82:6b:66:80:0b:f9:45:ca:f3:96:68:a4:
62:f4:9b:3f:04:e6:97:24:97:11:2e:4d:2d:31:c2:eb:66:05:
7d:d6:b4:ec:d9:12:6a:8a:69:46:e9:97:9d:a9:79:a7:bf:11:
89:9b:ed:c2:8a:ea:49:cb:40:2d:d8:d4:1d:e0:66:f3:c8:87:
e9:8e:ad:c3:a5:a0:7f:ee:62:ba:fd:65:cd:57:80:cd:f1:4c:
e6:ca:36:8f:03:b8:ea:96:6f:f1:d7:c2:8e:81:dd:05:c1:23:
1c:47:2a:f0:d2:9b:97:e9:fe:3d:12:df:64:8e:c0:68:b0:97:
35:91:30:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 11:29:11 2024 by rpki-client on console-ams.rpki-client.org