Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/vCCAVTaVPvEQrHg_lGq9_YemdzU.roa
File: vCCAVTaVPvEQrHg_lGq9_YemdzU.roa (raw, json)
Hash identifier: S5OlHoZe+pEjxN85ElFZk4AXB4q6/xcSGV+u2DfD9m0=
Subject key identifier: BC:20:80:55:36:95:3E:F1:10:AC:78:3F:94:6A:BD:FD:87:A6:77:35
Certificate issuer: /CN=151e6c3dc5d6754fe4f60a82b1cc551ab780df8b
Certificate serial: 01856C0A491A23F78784FADECB75A84D1A74
Authority key identifier: 15:1E:6C:3D:C5:D6:75:4F:E4:F6:0A:82:B1:CC:55:1A:B7:80:DF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/vCCAVTaVPvEQrHg_lGq9_YemdzU.roa
Signing time: Sun 01 Jan 2023 06:34:51 +0000
ROA not before: Sun 01 Jan 2023 06:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207097
IP address blocks: 185.166.26.0/24 maxlen: 24
185.166.27.0/24 maxlen: 24
185.166.25.0/24 maxlen: 24
185.166.24.0/24 maxlen: 24
2a0a:6a02::/32 maxlen: 32
2a0a:6a00::/32 maxlen: 32
2a0a:6a01::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:49:1a:23:f7:87:84:fa:de:cb:75:a8:4d:1a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151e6c3dc5d6754fe4f60a82b1cc551ab780df8b
Validity
Not Before: Jan 1 06:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc20805536953ef110ac783f946abdfd87a67735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:56:77:0d:c3:49:87:a7:7c:7d:35:d5:10:42:
e8:e9:50:27:ee:7f:6c:c6:13:d4:0b:f3:5e:75:30:
d9:ef:ca:78:d6:c3:b7:ba:9d:74:9b:46:e9:da:8e:
eb:bd:6b:87:d8:b8:c4:67:cd:ee:69:4c:48:e0:39:
8b:42:73:2c:9f:21:37:dc:bf:2a:fb:31:35:3c:6e:
45:2e:24:8f:30:1c:33:ad:e0:bf:94:67:0a:bf:02:
fa:35:57:8b:2d:62:12:76:a5:b3:13:bf:44:4c:da:
6d:d2:c6:5f:23:12:53:32:23:7b:08:96:17:22:fe:
93:40:dd:68:75:06:7c:fd:2a:4d:f6:f4:af:4a:4e:
ac:9b:05:be:ff:ca:3e:ed:ff:c4:25:50:c3:bb:12:
e2:b0:82:49:8a:22:42:50:1b:ae:06:ba:47:bd:59:
d2:17:77:d7:8a:fd:f6:61:00:c1:1f:eb:52:16:37:
de:b0:ec:af:43:a2:a8:9d:94:51:5d:d0:14:0a:bb:
0e:77:3c:88:16:3d:3a:9b:79:bb:a8:eb:46:cc:0d:
39:81:d4:fd:c6:eb:88:0f:f4:3a:c0:f5:d9:f2:67:
c5:c8:e2:a3:4a:84:a4:a4:99:da:62:40:0f:73:b4:
40:2c:72:ea:35:54:25:d5:85:e1:74:4d:8c:a9:61:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:20:80:55:36:95:3E:F1:10:AC:78:3F:94:6A:BD:FD:87:A6:77:35
X509v3 Authority Key Identifier:
keyid:15:1E:6C:3D:C5:D6:75:4F:E4:F6:0A:82:B1:CC:55:1A:B7:80:DF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/vCCAVTaVPvEQrHg_lGq9_YemdzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.24.0/22
IPv6:
2a0a:6a00::-2a0a:6a02:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
18:60:2e:f5:d6:1a:e3:0a:17:42:c0:69:c4:17:22:53:21:51:
27:76:60:18:28:20:69:83:6e:d3:ed:7f:8c:b8:39:3d:1d:c8:
a7:32:cd:bc:fd:18:36:14:99:a4:a6:fc:ca:27:d6:d6:9c:2a:
91:b7:c3:7e:37:2b:06:0e:ab:b4:04:c9:0a:68:bd:40:85:cc:
1f:ce:03:54:a8:60:db:28:be:f7:d8:7d:6e:66:bf:4f:e8:db:
3c:bd:23:9a:2d:66:68:78:49:c7:6a:9c:97:61:50:83:4e:2b:
b2:f2:00:47:e3:bb:e0:96:8a:c0:1d:4c:0f:1d:3a:3d:0d:df:
aa:4b:07:9d:64:82:62:19:6d:7a:87:62:28:a3:94:6b:2a:08:
71:cb:94:32:b1:a0:b6:c5:1b:53:cc:cb:fb:26:19:04:54:75:
3e:9b:67:59:4a:93:91:8e:57:46:5e:72:40:02:55:4e:21:9d:
5e:a4:ca:a1:3b:a4:f8:5f:4b:2d:7a:05:25:46:e9:99:2e:bd:
c5:2b:9e:13:9f:c2:93:06:80:81:88:ae:1d:52:6b:89:7a:c6:
18:6b:2e:43:14:ac:38:9f:5f:0c:4a:a0:1a:cc:d3:8d:3b:46:
aa:6f:ed:71:01:ff:59:4b:c5:4f:bf:6c:02:53:12:85:a8:d0:
5d:22:76:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:17 2024 by rpki-client on console-ams.rpki-client.org