Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/vl01yvzf9TANN2Zup6hN9fXMf4o.roa
File: vl01yvzf9TANN2Zup6hN9fXMf4o.roa (raw, json)
Hash identifier: SeD3q7+lyXNk0NO11FNkmJ1UIHI9IYhR906LsD67Pz8=
Subject key identifier: BE:5D:35:CA:FC:DF:F5:30:0D:37:66:6E:A7:A8:4D:F5:F5:CC:7F:8A
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018D135F11E182B1C46655A883303570FB91
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/vl01yvzf9TANN2Zup6hN9fXMf4o.roa
Signing time: Tue 16 Jan 2024 17:43:33 +0000
ROA not before: Tue 16 Jan 2024 17:43:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.227.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 21:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:5f:11:e1:82:b1:c4:66:55:a8:83:30:35:70:fb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 16 17:43:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be5d35cafcdff5300d37666ea7a84df5f5cc7f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:10:b0:c5:2d:1b:fb:66:7f:53:87:c6:78:56:
04:f4:4c:ae:05:be:e1:e3:34:96:6f:00:c2:92:ef:
74:10:3a:1d:9c:d7:31:78:20:e2:31:24:7d:80:f1:
4e:95:08:b1:9e:00:56:0a:b8:bd:5c:b6:38:b5:3d:
7f:5b:b8:ec:73:3e:91:9f:e0:d3:9a:87:4d:c3:07:
3a:27:2f:50:e4:66:64:de:67:df:cc:d1:40:94:1f:
e8:cf:f2:7a:e4:cb:a7:49:a7:3f:be:00:98:4b:31:
91:8f:7f:4b:52:33:d6:9e:a4:32:ae:92:d0:71:b8:
fc:1b:ac:30:8f:22:37:ee:b1:7b:4f:e7:d1:78:48:
fb:94:07:94:03:95:60:84:ba:07:63:9f:1f:3b:1b:
2d:a7:c5:14:89:20:ef:4f:ff:70:98:31:15:b2:e7:
c1:20:53:27:b8:27:29:02:8d:af:e1:bd:0e:0f:54:
0e:07:84:6b:4d:85:de:1a:54:d0:f7:34:19:0b:b0:
71:67:42:a3:5c:55:e7:6b:f4:d5:99:bd:bd:75:d6:
89:9c:4c:fb:14:8d:80:a8:4c:d5:69:d6:ff:a3:f2:
1b:a7:d4:17:d6:8c:66:bf:eb:c5:42:a2:37:7c:04:
cf:87:91:da:b3:2b:db:59:1d:16:e8:3b:2b:37:33:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5D:35:CA:FC:DF:F5:30:0D:37:66:6E:A7:A8:4D:F5:F5:CC:7F:8A
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/vl01yvzf9TANN2Zup6hN9fXMf4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:cf:e4:c9:bb:fb:84:79:0a:fc:ee:ca:aa:9f:a8:57:f7:ab:
5e:7d:aa:a9:47:ae:ac:f0:d9:46:bf:4d:96:f3:75:67:e7:49:
04:d8:08:1f:69:b2:f2:34:ce:b9:19:77:db:64:02:bb:64:f1:
f4:b6:1e:6e:65:69:53:49:55:b4:ba:a3:9e:91:3b:2f:f9:a0:
e3:f3:59:a3:b3:f3:dd:08:2e:60:90:d6:3d:6b:36:7d:fe:f7:
b0:14:bd:c4:d3:32:87:ac:36:ee:3f:8a:74:40:3b:3a:4c:e7:
95:73:53:f6:73:eb:86:1c:82:b3:f7:9e:f2:bc:4a:d8:e8:db:
5f:dd:12:58:c7:d2:ef:e9:05:a5:9b:1a:f7:a6:f6:a7:fa:57:
44:b4:3f:12:24:8c:5b:df:a6:f3:b0:0a:98:a4:bc:e9:ce:52:
d5:57:93:2d:60:86:48:2b:75:91:6b:d6:ce:5b:f9:06:b0:68:
4e:05:77:41:ce:22:84:9f:31:4c:6f:f2:4d:67:4e:36:fe:93:
dd:c0:36:53:3c:b4:7f:83:3b:f1:65:2d:4c:be:12:12:96:4e:
fc:41:88:17:76:14:59:01:12:e0:f6:97:5b:0c:3e:b9:6b:6a:
0a:18:6d:64:77:a8:19:ea:52:20:b1:7d:b1:9c:e0:fe:67:54:
6f:95:df:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 17 00:17:21 2024 by rpki-client on console-fra.rpki-client.org