Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/vkzD4Qwms2B-iPdb0sRPg_IQdrM.roa
File: vkzD4Qwms2B-iPdb0sRPg_IQdrM.roa (raw, json)
Hash identifier: sN6ys6Ki0bphk9TrRWW/vZ9TYakmYD2u+wE9PvzoD4k=
Subject key identifier: BE:4C:C3:E1:0C:26:B3:60:7E:88:F7:5B:D2:C4:4F:83:F2:10:76:B3
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0189E30EFF92FB971445FAFCF55BF0F01701
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/vkzD4Qwms2B-iPdb0sRPg_IQdrM.roa
Signing time: Fri 11 Aug 2023 05:25:58 +0000
ROA not before: Fri 11 Aug 2023 05:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61418
IP address blocks: 85.153.172.0/24 maxlen: 24
85.153.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 12:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e3:0e:ff:92:fb:97:14:45:fa:fc:f5:5b:f0:f0:17:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Aug 11 05:25:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be4cc3e10c26b3607e88f75bd2c44f83f21076b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:75:5e:93:65:8e:03:e7:01:bd:79:d0:8a:
fe:01:fe:6b:51:e7:45:3e:3a:34:09:7c:eb:1f:1d:
1a:80:7a:f9:ca:91:fb:4a:2f:3e:17:d6:03:9c:e8:
55:ae:ab:5c:3a:4b:71:d4:e4:cb:ea:1d:52:a8:20:
e3:61:b1:57:69:0a:08:49:01:93:29:96:71:73:b3:
e8:f3:31:d8:b2:70:da:ec:78:04:d4:50:13:40:eb:
37:f3:a5:0a:9d:0f:3a:6d:a1:c6:d4:43:c4:0a:1a:
a5:19:eb:52:10:42:2a:5b:5a:f3:21:ea:59:92:0e:
b5:77:fb:17:38:2c:80:0a:f3:4c:01:81:a6:4c:3d:
b2:b3:10:bc:38:2c:ec:97:7c:c6:c9:0b:3a:ed:d9:
58:d4:bd:cf:a3:b5:9a:65:ca:c9:6d:0b:c5:7b:1f:
e6:da:ba:75:f8:bd:d1:b7:26:70:20:e7:02:fe:2b:
65:da:98:cd:1b:e4:84:0c:73:52:b0:ab:6e:7e:32:
54:1c:a1:99:74:a9:30:fe:2f:04:39:73:8a:c9:f5:
fb:d9:d8:5e:4a:21:e8:6a:7f:79:74:7d:5d:d3:6c:
a4:1c:f7:b3:af:d8:83:c4:e1:27:2c:ba:10:52:49:
6a:01:51:cc:55:d4:43:2f:a6:0c:f4:06:51:48:2f:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4C:C3:E1:0C:26:B3:60:7E:88:F7:5B:D2:C4:4F:83:F2:10:76:B3
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/vkzD4Qwms2B-iPdb0sRPg_IQdrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.172.0/24
85.153.181.0/24
Signature Algorithm: sha256WithRSAEncryption
02:fe:cf:91:00:d5:92:ae:cc:91:71:6f:77:74:c5:ad:cd:98:
8a:16:be:ad:fa:25:1a:88:df:3e:8d:c3:62:a9:7a:d1:da:db:
99:9c:5d:e1:28:f7:9b:88:1f:08:19:90:42:97:0d:e0:92:45:
c8:19:82:ee:6b:69:9a:21:94:6e:69:bb:98:0a:8d:17:f2:3e:
2b:9b:7c:f7:72:a7:61:db:fb:35:66:d3:fc:17:f8:f9:77:b6:
f1:7a:a3:35:6a:53:ac:6c:5b:e1:4a:b3:23:00:56:fa:2e:a7:
4d:65:47:94:39:c0:ee:29:8b:fe:7c:f3:de:ba:22:8b:e7:73:
ea:06:fc:55:7c:89:44:c4:f5:8c:9a:bf:f0:8f:df:64:89:c7:
e8:47:ba:8e:b6:07:b0:b5:77:65:ad:84:4c:d6:6f:82:06:28:
04:07:8b:bd:45:ab:8a:4a:b4:e0:39:ad:e0:a0:09:e2:fe:2b:
a2:f7:37:77:2e:e6:68:5d:ca:47:e1:87:52:ff:1b:4d:29:d1:
88:b1:d8:14:d4:18:58:59:35:70:d7:9c:85:04:18:b3:d1:2e:
a1:4a:fe:8c:3b:47:6a:01:53:2f:91:2d:13:0c:e5:95:5b:f8:
58:3e:46:dd:b5:6d:ca:49:d0:ab:e6:56:4f:09:5d:bf:53:71:
2e:22:18:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org