Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/V_5y3bLn0eKJvxNSlGy_5h4q0YE.roa
File: V_5y3bLn0eKJvxNSlGy_5h4q0YE.roa (raw, json)
Hash identifier: KbnCtGnx0GaSQpa0dnnCR/d1fcVCNpk90T5INhWcVfQ=
Subject key identifier: 57:FE:72:DD:B2:E7:D1:E2:89:BF:13:52:94:6C:BF:E6:1E:2A:D1:81
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 01856CC1480D5AC3D8534DE32DE43C2987BA
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/V_5y3bLn0eKJvxNSlGy_5h4q0YE.roa
Signing time: Sun 01 Jan 2023 09:54:44 +0000
ROA not before: Sun 01 Jan 2023 09:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8455
IP address blocks: 185.158.164.0/22 maxlen: 24
2a07:ae80::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:48:0d:5a:c3:d8:53:4d:e3:2d:e4:3c:29:87:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Jan 1 09:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57fe72ddb2e7d1e289bf1352946cbfe61e2ad181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d3:ea:03:df:af:a0:a4:0d:f4:14:a0:c0:23:
2f:63:ce:b8:ea:5a:e9:6c:79:ca:9c:3b:49:02:26:
64:44:5d:d0:2d:36:c5:7a:0f:b0:c3:aa:c8:1b:b9:
91:a4:c1:28:94:5e:c1:b1:15:7c:fa:77:1d:70:67:
36:b0:8f:4d:1b:47:d1:ec:5c:fd:f2:a4:c2:42:2a:
34:3b:95:12:4f:43:0d:8b:72:39:60:fd:e2:c0:da:
67:dc:4a:9b:0b:fc:1f:dc:1e:e0:ba:87:d2:3b:91:
6e:15:4d:c3:b8:af:f7:59:4e:56:5f:af:55:7c:7f:
ba:8c:88:43:9c:02:a1:2b:ef:88:78:4e:a3:a2:a1:
4e:48:fe:58:5a:cc:b2:b7:a3:ad:f3:64:40:28:9f:
6f:77:37:02:7a:c0:79:a3:47:aa:bc:24:52:43:d4:
09:1a:f7:14:c9:59:20:90:b7:68:fb:45:45:21:b2:
53:be:a0:0e:79:8e:8f:fa:04:54:d9:a9:05:34:23:
c9:93:de:02:b7:50:8f:78:71:8d:1d:73:ed:d5:b9:
d0:fb:6c:b4:c1:f6:7a:6a:5e:e4:88:b5:20:00:7c:
1f:73:d5:29:b3:9f:c1:9f:c4:d5:7e:fb:b0:ab:11:
5a:d7:fd:2f:96:1c:40:2f:88:14:05:7e:66:2e:96:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FE:72:DD:B2:E7:D1:E2:89:BF:13:52:94:6C:BF:E6:1E:2A:D1:81
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/V_5y3bLn0eKJvxNSlGy_5h4q0YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.164.0/22
IPv6:
2a07:ae80::/29
Signature Algorithm: sha256WithRSAEncryption
8a:0c:3b:3a:99:24:6a:a4:85:65:05:c2:01:26:4c:ab:94:b9:
e4:6c:6d:58:d5:d9:7d:03:ad:ce:1b:c4:ba:4b:48:79:67:96:
fe:12:f4:56:87:75:92:ad:b2:1a:0a:54:d4:b1:5f:01:82:30:
6b:15:8a:06:ed:22:be:ad:02:06:b0:d3:4a:7c:cb:10:65:4e:
61:33:b3:aa:9b:f5:24:25:ee:6d:17:48:42:9c:ff:47:0b:87:
64:4a:8d:eb:3b:cc:ae:d6:fe:0d:8c:94:3f:6c:f6:c3:5d:d5:
e6:3f:28:1d:c6:35:de:f3:12:c2:45:56:2c:2e:07:af:77:41:
c9:1d:40:3b:11:ed:0f:89:64:95:48:9e:2c:ca:6a:5d:14:05:
68:23:ca:21:e5:64:57:83:04:2d:f2:d3:d1:9c:5c:ab:21:43:
45:b6:bd:e9:5f:e1:cb:e0:35:dd:26:b0:b5:e5:12:97:93:2b:
a9:7c:56:ad:77:df:b6:f1:9d:4c:b9:d7:a5:f8:e3:d5:5d:09:
11:ec:1d:90:ba:05:74:4b:19:f4:7f:48:f0:b3:42:1b:fa:d9:
c2:b7:b1:7a:19:5e:6a:de:5a:0a:ea:b6:fd:eb:dd:4e:4c:3c:
d8:db:40:f6:49:cb:39:e0:93:f0:20:73:b5:9f:bf:d5:1f:9e:
73:80:0b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:58 2024 by rpki-client on console-fra.rpki-client.org