Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/VRictCLf6HruA-WhQkSE7s4uOUw.roa
File: VRictCLf6HruA-WhQkSE7s4uOUw.roa (raw, json)
Hash identifier: U3g7ewdDKcgX1a1KZd1frBfj9NogdjOmxfYdlYji0ok=
Subject key identifier: 55:18:9C:B4:22:DF:E8:7A:EE:03:E5:A1:42:44:84:EE:CE:2E:39:4C
Certificate issuer: /CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Certificate serial: 01856B4A13A8CD8E1B27E9AA58EFCC40C326
Authority key identifier: A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/VRictCLf6HruA-WhQkSE7s4uOUw.roa
Signing time: Sun 01 Jan 2023 03:04:54 +0000
ROA not before: Sun 01 Jan 2023 03:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209148
IP address blocks: 85.209.184.0/22 maxlen: 22
2a09:9c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:13:a8:cd:8e:1b:27:e9:aa:58:ef:cc:40:c3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Validity
Not Before: Jan 1 03:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55189cb422dfe87aee03e5a1424484eece2e394c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:86:dc:34:f6:c3:c8:2d:62:20:6e:24:b3:1f:
25:f1:9b:5b:66:03:ad:41:36:16:74:14:0f:a5:05:
1e:05:8b:46:c9:91:4b:99:53:47:ac:d8:f3:63:66:
f9:d6:df:12:ed:38:2b:95:4f:8c:7c:b5:ea:13:ae:
5b:77:d0:77:ec:92:53:96:79:22:a4:5c:c0:dc:57:
62:3e:17:e9:71:db:d9:7a:45:bb:c9:ba:9d:40:a2:
0a:64:1e:19:cb:bd:fe:d9:a6:3c:61:a9:52:1c:c6:
7e:17:de:95:43:a0:96:4a:03:54:0e:b6:71:91:69:
21:9a:c9:0a:22:3d:05:44:a5:13:f5:55:78:c6:51:
8e:40:76:53:84:ce:e1:ca:8a:6f:0f:bb:52:f9:3a:
92:36:04:4e:bf:c9:1d:b7:e9:bf:3e:05:19:4e:68:
01:1b:57:d2:43:4b:cf:ab:8b:7f:d3:f1:1a:66:37:
83:26:22:54:9d:cb:9e:14:71:e8:19:b8:bc:32:ce:
b7:d0:1b:29:5e:d4:fc:28:44:50:e9:42:84:6d:96:
0c:9e:20:ce:58:d4:ea:e7:e0:c8:23:76:b0:b0:35:
ae:b3:83:74:49:5f:7d:74:5a:2f:35:32:f4:6f:9f:
92:cb:bd:12:4e:1d:ad:df:cf:1c:e2:5e:ff:34:52:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:18:9C:B4:22:DF:E8:7A:EE:03:E5:A1:42:44:84:EE:CE:2E:39:4C
X509v3 Authority Key Identifier:
keyid:A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/VRictCLf6HruA-WhQkSE7s4uOUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.184.0/22
IPv6:
2a09:9c40::/29
Signature Algorithm: sha256WithRSAEncryption
56:79:8e:a0:a9:4b:a9:f8:bf:7d:cb:8d:b0:ed:f7:99:3c:59:
11:35:c3:7a:2e:c0:d3:f7:4a:e5:3d:d7:56:f6:ca:e3:64:7a:
91:95:0e:34:5b:cc:8a:02:cb:ce:fc:33:54:18:c1:fa:51:af:
04:c3:d7:c8:8b:10:7f:3a:8e:2a:56:da:b7:d8:e1:a1:9b:65:
b4:26:b9:5a:a3:5b:c0:3c:e7:87:1f:a6:5f:ff:42:b4:65:d0:
6f:a1:04:17:d8:d5:60:39:9f:9e:2c:1f:bb:8f:3d:49:c9:33:
e1:08:e4:ac:28:c0:1b:ed:b4:46:f9:80:94:ad:31:1c:94:d7:
01:76:16:fb:62:75:10:3d:e8:71:61:a8:92:e6:4a:57:7f:e2:
3b:b8:82:4c:65:30:c9:fa:d1:0d:d8:3f:7f:0e:ed:f7:f3:45:
b2:86:11:ce:29:8a:87:a4:3e:84:4e:c3:10:e1:75:03:89:4e:
e4:80:db:fc:7f:7d:77:0e:03:b1:1d:5d:88:f2:93:f2:d6:c5:
22:8d:3c:5c:63:b2:d9:83:36:31:7a:bd:c6:44:77:4c:46:4a:
5c:bb:69:46:1d:44:00:d5:3c:26:50:b4:4d:c0:af:5c:50:05:
8f:25:ea:3d:c0:c3:ad:51:95:bc:4a:83:03:51:4c:c2:c4:0b:
23:29:3c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:55 2024 by rpki-client on console-ams.rpki-client.org