Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VtUYUmFEj4oHJMUnjRFZvbUH5Fg.roa
File: VtUYUmFEj4oHJMUnjRFZvbUH5Fg.roa (raw, json)
Hash identifier: jaGgynmf9kbCfPA2DnYAB9QeIaTawBNcoQF2zQ7igV8=
Subject key identifier: 56:D5:18:52:61:44:8F:8A:07:24:C5:27:8D:11:59:BD:B5:07:E4:58
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018AF8C4D4DD97873DD733C283C22D104B7D
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VtUYUmFEj4oHJMUnjRFZvbUH5Fg.roa
Signing time: Wed 04 Oct 2023 03:39:23 +0000
ROA not before: Wed 04 Oct 2023 03:39:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 85.92.112.0/24 maxlen: 24
185.235.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Oct 2023 12:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:c4:d4:dd:97:87:3d:d7:33:c2:83:c2:2d:10:4b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 4 03:39:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56d5185261448f8a0724c5278d1159bdb507e458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:00:5d:6c:9f:e5:08:ad:4f:79:b9:84:6b:
5e:1b:53:d9:ea:ca:9e:a1:66:62:cc:cb:75:4d:ae:
3d:f4:f8:ce:c3:80:42:57:18:c6:40:19:01:93:2a:
57:30:be:55:c5:7a:0b:12:13:6c:58:8b:ec:fe:81:
fe:7a:fc:36:57:fc:5f:b1:b0:e6:b7:3a:d4:89:b0:
78:b4:28:e4:56:fe:b0:97:5f:f6:bb:85:17:cf:14:
dc:a3:4d:d5:fd:88:b4:7d:63:17:27:19:43:f6:03:
a5:b2:22:af:6d:32:fa:d1:a7:1a:f5:c4:13:aa:9f:
de:86:41:40:87:46:ef:28:0f:d8:8d:bb:7e:0e:30:
9c:48:c9:7c:1b:55:50:88:38:5e:a1:6f:52:33:53:
78:82:52:fd:ba:60:55:2b:a0:b2:9c:d2:8f:77:05:
0c:9a:e7:98:04:40:fe:f3:53:7d:50:1f:1a:eb:f7:
81:b7:15:f0:a4:f7:c3:ce:1f:aa:e1:7c:f5:ea:b9:
4b:b1:0a:af:f7:b7:3a:67:2e:ec:bc:31:cc:b0:9f:
49:3c:4b:25:8d:b6:ca:36:8c:ba:bb:c3:f4:89:a6:
5a:67:a1:71:79:cd:50:bb:ea:3e:b0:70:a3:8d:98:
1f:4e:11:42:43:12:68:45:e8:ff:5b:46:ea:ce:87:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D5:18:52:61:44:8F:8A:07:24:C5:27:8D:11:59:BD:B5:07:E4:58
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VtUYUmFEj4oHJMUnjRFZvbUH5Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.112.0/24
185.235.164.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1b:37:4e:51:68:b5:84:dd:43:6c:f7:2e:06:d9:51:a7:87:
df:79:2e:f8:fa:2c:b7:c5:8b:70:3f:03:2a:c0:e3:d7:96:04:
d8:21:dd:7c:a4:62:da:88:27:7d:6d:35:db:a5:95:d7:cf:4c:
a8:37:5c:6e:f6:96:89:16:8d:39:24:7b:b5:55:96:3c:82:b0:
33:d4:58:d7:a6:b8:c1:7c:61:5e:4f:27:12:df:04:a1:2e:da:
83:98:2d:27:f8:7a:d4:ed:e3:3f:5b:8a:85:5f:c9:a0:96:0e:
88:75:70:10:b2:e8:8d:97:23:c3:f9:e1:e5:80:4f:94:b2:ec:
67:b7:0a:75:c9:20:62:9f:be:48:43:49:4a:98:85:94:a7:92:
fe:a1:7a:6e:ae:eb:6e:f1:d0:6a:f5:5e:20:00:bd:6e:04:68:
f0:fc:78:38:34:9f:34:e8:c3:ea:24:f8:42:8a:23:0f:48:a0:
9e:97:98:c0:6a:a0:fd:27:1d:aa:17:75:43:f8:9d:2c:5f:0b:
7b:c4:22:fa:1b:1c:c5:36:a6:ae:db:80:77:fb:7f:f5:5a:10:
59:8e:49:88:72:79:24:35:24:44:d2:fd:08:60:7d:9e:71:48:
d4:b0:a5:ce:0c:d1:39:96:7f:48:3f:93:03:39:58:2c:c1:e6:
67:d9:58:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org