Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/vkHsMo98-qaQHZIBUjfctObBK6M.roa
File: vkHsMo98-qaQHZIBUjfctObBK6M.roa (raw, json)
Hash identifier: wz2AfdkT7o0mN2+O3RA/ip7g9XJlCNwJXpPqivdmsVE=
Subject key identifier: BE:41:EC:32:8F:7C:FA:A6:90:1D:92:01:52:37:DC:B4:E6:C1:2B:A3
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 01856BD353B23ACFEB9A9797DA0C73249107
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/vkHsMo98-qaQHZIBUjfctObBK6M.roa
Signing time: Sun 01 Jan 2023 05:34:49 +0000
ROA not before: Sun 01 Jan 2023 05:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62248
IP address blocks: 185.42.168.0/24 maxlen: 24
185.42.171.0/24 maxlen: 24
185.42.170.0/24 maxlen: 24
185.42.169.0/24 maxlen: 24
2a01:6560::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:53:b2:3a:cf:eb:9a:97:97:da:0c:73:24:91:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Jan 1 05:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be41ec328f7cfaa6901d92015237dcb4e6c12ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:c4:9f:db:04:f3:84:af:c3:93:22:d9:24:
fe:90:d1:a1:75:2b:a8:0b:91:97:3d:79:cb:80:1a:
a9:5c:d1:c9:f1:7a:95:43:a6:5b:1d:86:65:cd:b2:
b8:9f:ff:28:b7:6a:2e:66:f9:4b:45:05:57:1d:48:
41:b9:d1:69:55:a4:69:c1:77:07:f0:46:2e:49:7d:
69:49:3a:f3:2f:71:fd:8d:02:14:be:df:45:b8:1b:
2d:c7:e0:e7:d3:a6:d3:69:82:57:44:34:f6:96:b8:
b0:c7:1a:17:ee:36:f5:e6:23:5a:df:be:8e:52:75:
e2:f8:9a:44:aa:06:99:bf:21:3e:72:d8:ce:59:bb:
dc:36:93:cc:6c:8b:80:a7:97:3c:52:f0:23:c8:ed:
45:76:4a:14:48:47:13:95:ee:dc:96:74:db:7e:6e:
6f:a5:e4:3e:3b:2a:f1:20:33:38:f4:fd:f3:80:62:
37:f8:7e:39:76:7f:fc:4d:ae:09:db:97:6b:83:3c:
c1:56:43:5c:0a:54:a4:5b:22:09:76:71:c1:b6:ad:
a4:e0:e2:21:1c:35:bf:c2:7c:18:b3:84:ca:a2:7b:
de:51:98:cb:81:87:8b:31:a3:ed:96:e0:da:db:9d:
cc:a9:41:c6:77:29:3d:fd:6b:51:76:80:59:27:20:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:41:EC:32:8F:7C:FA:A6:90:1D:92:01:52:37:DC:B4:E6:C1:2B:A3
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/vkHsMo98-qaQHZIBUjfctObBK6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.168.0/22
IPv6:
2a01:6560::/32
Signature Algorithm: sha256WithRSAEncryption
83:e3:d3:4a:43:61:cb:4f:ee:41:d5:e9:4c:d6:0c:6e:19:06:
8d:a1:f8:8d:91:00:71:94:f4:0f:ab:e7:44:b3:51:4e:8f:6d:
b7:ed:7d:eb:8c:36:30:26:28:88:5f:d8:c8:17:77:90:43:db:
70:aa:8e:56:68:a5:78:d9:a8:d5:75:07:1d:70:81:3c:05:f5:
11:dc:0a:df:35:a8:8b:36:25:19:18:e9:78:89:4b:c6:7d:9c:
96:e8:e7:2b:0b:50:d7:d4:bd:a0:fc:62:a5:27:d5:59:1b:73:
db:99:00:f0:8e:a2:d9:88:c1:b5:c3:d1:b7:4c:20:f1:af:7c:
6a:10:8d:5c:32:d4:f5:40:7c:ca:77:f3:dd:2c:f7:05:e2:a2:
26:65:1e:51:13:69:99:a3:cb:39:dd:ec:c7:5d:53:d7:7d:ae:
74:99:c3:63:b3:77:c7:5f:66:7d:1e:9b:76:5b:78:ae:38:3b:
d6:c2:0c:9c:13:b9:79:4a:07:fb:c2:95:0d:69:0d:9d:bd:16:
98:d0:48:6a:98:c2:77:66:cb:21:bd:bb:a4:b4:48:23:8c:c9:
b8:d7:ca:34:5a:ba:de:2b:ac:b6:d0:50:03:af:77:34:24:fc:
d2:d6:d6:b8:ba:a8:72:23:2b:49:9b:49:0b:97:53:35:7c:28:
2a:b6:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:03 2024 by rpki-client on console-ams.rpki-client.org