Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/vxph1lSi7FD1565V-jBj8_3dRWo.roa
File: vxph1lSi7FD1565V-jBj8_3dRWo.roa (raw, json)
Hash identifier: 0hsqVCn265YNncREBfIsgoMiFhoxCulNgYtfdKPlZwU=
Subject key identifier: BF:1A:61:D6:54:A2:EC:50:F5:E7:AE:55:FA:30:63:F3:FD:DD:45:6A
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 018A5EDDBC4BB5EB3F8EB04E8C8D2623DB4A
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/vxph1lSi7FD1565V-jBj8_3dRWo.roa
Signing time: Mon 04 Sep 2023 06:25:04 +0000
ROA not before: Mon 04 Sep 2023 06:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.63.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 08:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:dd:bc:4b:b5:eb:3f:8e:b0:4e:8c:8d:26:23:db:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Sep 4 06:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf1a61d654a2ec50f5e7ae55fa3063f3fddd456a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e9:7c:5a:63:34:ce:16:d7:cb:66:79:65:5c:
85:ee:bb:a2:33:3b:22:61:50:74:9b:ce:be:0e:48:
9c:64:77:3b:b3:ae:68:6a:70:37:9f:ec:63:da:d0:
84:94:3e:77:12:b5:f3:94:43:cb:f5:2c:76:51:67:
68:c9:73:93:0b:2c:e5:21:ac:28:6f:27:23:30:5e:
da:4d:9b:21:0d:2c:30:41:8c:8c:eb:4e:c8:4b:27:
8a:6e:e9:c9:cc:8b:0a:9e:54:cd:86:50:42:f0:0a:
5c:95:81:85:2e:5c:90:57:23:57:d5:8b:11:5b:08:
f5:79:1c:9f:0e:b3:36:4b:ed:bd:df:5c:3d:03:a5:
c7:91:98:72:60:b6:d1:35:33:bf:54:4b:97:6f:8d:
07:68:bf:cf:07:03:5f:2d:71:bd:db:53:b1:e3:d0:
ec:f5:e0:4f:86:b4:4b:53:47:a2:69:ec:9c:53:27:
27:f0:99:7c:06:5a:a2:22:70:2b:b7:41:18:89:40:
21:68:43:93:ec:78:de:a3:36:dd:9a:45:0e:13:ef:
2e:a1:f9:c6:b4:55:2f:4b:13:f4:60:7b:c4:83:b0:
d3:c9:6e:71:e4:44:60:7f:38:d2:64:76:b5:d3:02:
f3:c9:4d:38:0d:0f:bc:7b:f2:47:49:f7:32:49:2e:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1A:61:D6:54:A2:EC:50:F5:E7:AE:55:FA:30:63:F3:FD:DD:45:6A
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/vxph1lSi7FD1565V-jBj8_3dRWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.34.0/24
Signature Algorithm: sha256WithRSAEncryption
56:45:c6:1c:2f:22:ed:3a:29:cf:4c:1c:c7:f3:f4:48:8c:bf:
c1:e3:94:f9:bf:79:c5:51:31:24:6f:dd:b2:f0:7a:eb:c5:85:
a4:90:67:07:81:e6:f9:5b:41:84:21:b3:57:d0:9d:61:d7:59:
5f:b7:1b:26:ee:82:71:ca:92:39:d2:52:f6:aa:bf:61:7c:b0:
b0:78:5c:50:dc:c3:7f:f2:45:69:13:4a:04:24:fa:46:93:32:
8a:3d:52:fb:72:ff:85:ed:da:49:30:9a:51:62:10:e6:dc:64:
cc:85:cd:90:1d:8a:dc:a0:24:54:14:30:de:83:de:bd:20:d2:
10:ff:dc:8c:d5:88:de:78:93:19:4b:3d:08:28:e7:7a:8d:63:
1e:c6:53:32:33:35:11:54:1c:4b:11:b6:b2:6f:9b:58:14:45:
f1:ef:d6:d9:2d:20:1b:30:22:60:6c:81:16:d8:79:8e:5c:f9:
40:69:76:94:5b:73:c2:ec:f7:89:48:8f:33:a2:b2:31:6d:64:
d3:5d:d7:b7:c4:24:f4:25:68:ce:ee:63:2b:91:3b:e9:f4:35:
df:39:19:c3:8c:8a:7a:09:c8:92:29:36:03:09:c2:04:4b:68:
5f:f4:95:fa:c4:f5:05:eb:8b:db:c0:ba:02:ae:c8:97:9c:88:
88:7b:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:48 2024 by rpki-client on console-fra.rpki-client.org