Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/vGKnVJOjtOW4ZvmV7fUlo3FR3vg.roa
File: vGKnVJOjtOW4ZvmV7fUlo3FR3vg.roa (raw, json)
Hash identifier: kChJSLUayyxx+ykgg6rwhg4RtHMWUAKI/KJ6rzRD840=
Subject key identifier: BC:62:A7:54:93:A3:B4:E5:B8:66:F9:95:ED:F5:25:A3:71:51:DE:F8
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 018630C1A5F3AB67F65238078010A9AD2BDB
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/vGKnVJOjtOW4ZvmV7fUlo3FR3vg.roa
Signing time: Wed 08 Feb 2023 11:20:42 +0000
ROA not before: Wed 08 Feb 2023 11:20:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42473
IP address blocks: 185.228.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:c1:a5:f3:ab:67:f6:52:38:07:80:10:a9:ad:2b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Feb 8 11:20:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc62a75493a3b4e5b866f995edf525a37151def8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:99:70:2c:7c:7d:d1:a8:6e:bf:fa:bf:b7:
2d:a8:2f:de:70:92:16:f1:fd:6a:5a:d9:aa:d9:fc:
db:6a:c1:93:0a:65:37:8a:8a:9f:dd:71:bf:72:eb:
fb:c9:4b:46:80:66:db:b6:ed:e9:99:ac:e9:0f:83:
ff:cf:e4:32:e9:fd:33:19:d7:1e:b4:03:9d:bc:db:
e4:ec:d1:a5:9f:e0:ae:44:c2:48:14:47:3f:74:6e:
c5:e0:41:be:a9:3c:45:b5:6d:80:6c:3f:d4:12:8a:
cc:ca:55:3c:96:31:65:36:2a:be:0d:34:8c:bb:8e:
f2:d4:8d:ac:cc:e7:5a:1b:ab:f5:4c:56:78:07:17:
e0:d1:4c:c6:10:69:ad:2a:d4:a7:dc:71:34:0d:63:
ee:30:f9:15:f3:cb:7a:32:89:9e:f7:8b:1a:9a:18:
44:8d:cf:f4:71:4c:85:c9:4d:1d:47:7b:b2:05:35:
90:3d:93:a3:3f:09:f1:ab:97:b1:e2:ca:42:2b:9c:
ec:e6:62:3a:16:c7:e5:38:c4:f3:be:ce:8b:16:ff:
59:0c:60:66:15:e0:be:4b:86:5f:ae:06:fb:9b:21:
30:47:a1:23:48:c9:3a:4e:ac:5c:0b:37:91:45:17:
14:e7:31:26:18:c6:b6:54:4e:ec:35:19:3d:c6:55:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:62:A7:54:93:A3:B4:E5:B8:66:F9:95:ED:F5:25:A3:71:51:DE:F8
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/vGKnVJOjtOW4ZvmV7fUlo3FR3vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.243.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2c:a3:3d:03:8d:44:3c:41:06:0c:64:59:ea:a4:8b:1a:4f:
e0:60:11:c2:c2:17:f1:33:ae:c2:23:45:7e:3c:58:a2:26:d2:
d3:91:29:64:2a:ee:9a:58:59:86:0b:c5:41:ae:35:98:1f:ef:
eb:62:ed:a2:80:75:93:9d:18:f5:0e:e1:47:45:a9:e0:0e:36:
a2:de:11:3f:88:02:ca:d6:39:70:ab:4a:eb:38:f1:e3:cc:da:
bc:2a:fa:6d:7e:70:1f:9b:71:17:bb:70:ea:e2:c4:fa:ef:86:
bd:53:af:d2:68:f2:62:6b:a7:30:7c:78:0d:3e:ab:fc:51:c9:
9f:0e:27:4c:c0:0b:c8:06:e4:df:86:8b:95:8c:76:64:ee:7c:
18:1c:ad:eb:a6:8e:a5:7e:d3:c3:00:77:85:27:95:5b:cd:81:
b8:1b:b8:a5:35:46:e0:45:89:fc:ec:d4:74:13:98:4f:e6:f3:
b2:35:fa:df:99:67:8c:97:fa:4f:0d:ea:35:65:39:bc:22:12:
10:6f:98:7e:c7:c5:a6:1b:26:1e:e9:8f:37:a9:bc:78:74:13:
ab:15:0b:59:db:62:b5:c2:3c:0d:f2:9c:4b:c2:4d:92:f1:b6:
20:7f:3c:19:6d:0d:8b:18:83:dd:32:06:52:86:3e:3e:8d:18:
89:69:f9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org