Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Vu72KHoU-ksqC4_kn022eDMkiHY.roa
File: Vu72KHoU-ksqC4_kn022eDMkiHY.roa (raw, json)
Hash identifier: 0oypN/+5HUQeQWB+x55dkPCEVITslqEyB4m9+bUHzQs=
Subject key identifier: 56:EE:F6:28:7A:14:FA:4B:2A:0B:8F:E4:9F:4D:B6:78:33:24:88:76
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 019122C5A93F66E4E3005B70A1C92FB5093A
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Vu72KHoU-ksqC4_kn022eDMkiHY.roa
Signing time: Mon 05 Aug 2024 13:41:04 +0000
ROA not before: Mon 05 Aug 2024 13:41:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401084
IP address blocks: 185.101.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 11:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:22:c5:a9:3f:66:e4:e3:00:5b:70:a1:c9:2f:b5:09:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Aug 5 13:41:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56eef6287a14fa4b2a0b8fe49f4db67833248876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:40:d9:31:6c:e3:2b:47:31:df:f0:e3:93:
98:f6:3c:c1:1e:bf:a2:a4:74:d7:e4:85:f5:56:32:
8f:2f:06:74:77:4a:ff:cc:99:44:77:22:42:c7:a2:
02:45:4e:02:63:4d:2f:c0:8b:95:71:27:26:a2:c5:
f0:58:8f:40:49:43:cc:61:4c:8d:8c:4f:cf:a3:f9:
a4:91:d7:5d:8e:f7:0f:ef:d9:87:20:3c:aa:58:2e:
3c:1a:b4:e7:fd:15:fb:8e:49:a8:fd:47:d7:a5:77:
f3:d1:96:f1:63:f6:fd:e2:3e:d7:de:29:02:2f:00:
4e:76:a7:00:44:02:f1:14:9a:41:ba:fc:78:fc:d7:
da:77:e3:58:76:7a:ea:99:e8:ec:11:ff:2e:47:08:
e1:54:73:75:6d:b5:dd:74:b6:5f:fc:33:a2:f9:2a:
fe:1b:cd:27:3e:ee:4f:ec:2e:17:c0:2a:47:08:cf:
cd:39:ee:f4:45:6b:8b:3a:4b:42:0a:12:cb:c7:cd:
14:85:63:56:aa:5c:a9:3e:1c:59:6e:5e:4c:08:1d:
02:e7:b9:98:fc:16:85:e4:14:a0:21:4d:fd:36:ae:
88:77:63:79:09:a7:f0:95:55:70:ed:cd:f5:e4:a7:
88:c2:7a:e9:63:54:1f:b8:dd:5c:02:9c:a0:19:fb:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EE:F6:28:7A:14:FA:4B:2A:0B:8F:E4:9F:4D:B6:78:33:24:88:76
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Vu72KHoU-ksqC4_kn022eDMkiHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.46.0/24
Signature Algorithm: sha256WithRSAEncryption
27:90:6a:10:0a:7a:d5:52:a6:29:50:ca:bc:da:95:42:95:4e:
99:7a:ac:e2:10:32:d4:0a:08:21:2f:a4:8c:c7:88:cf:27:17:
e8:26:e5:2c:61:d1:8a:ba:23:76:e0:4c:11:7a:01:f8:1b:83:
ca:1e:9d:0a:f3:9b:44:24:27:54:79:f5:0d:8d:92:2c:6d:c7:
05:b5:7b:cc:8e:e4:36:1d:a0:4b:00:9d:07:c6:ca:31:f0:a3:
49:d3:05:4a:06:78:27:0f:25:3b:8a:d9:55:03:fd:ee:9d:3d:
fa:63:c7:1d:cf:6d:3d:42:d3:1b:a1:91:25:bc:64:85:99:16:
98:c5:54:9d:5c:61:2c:d6:f3:b4:d1:2b:dc:91:72:11:e8:8f:
ac:9e:6d:9e:be:df:4b:bf:e6:77:36:80:eb:89:7f:11:26:3d:
73:98:12:8b:8e:b0:71:a9:80:5a:fa:d1:7a:6c:c3:a3:d8:c7:
b4:7b:07:85:eb:cc:bf:36:3e:55:e0:2e:eb:10:54:16:85:a8:
8e:c3:f5:70:99:3c:13:7e:a2:b4:5f:a5:26:3b:41:69:be:ac:
45:8a:9d:c9:01:93:13:2b:3c:00:63:a5:e0:f8:4b:30:1d:26:
45:54:66:57:d8:07:e2:f3:02:cd:66:17:f1:85:b1:cc:91:16:
0b:fc:be:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 14:58:13 2024 by rpki-client on console-fra.rpki-client.org