Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/vvGXc5Hkg-2ewPkahDXlIiuT6DU.roa
File: vvGXc5Hkg-2ewPkahDXlIiuT6DU.roa (raw, json)
Hash identifier: QP/EO9vjOzplPYFOe6g2FV3dG3IoEAcDzEa2I+tkRiM=
Subject key identifier: BE:F1:97:73:91:E4:83:ED:9E:C0:F9:1A:84:35:E5:22:2B:93:E8:35
Certificate issuer: /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial: 018570B075B780BA743902AEED0790F6E22D
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/vvGXc5Hkg-2ewPkahDXlIiuT6DU.roa
Signing time: Mon 02 Jan 2023 04:14:50 +0000
ROA not before: Mon 02 Jan 2023 04:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59992
IP address blocks: 185.62.133.0/24 maxlen: 24
185.62.132.0/24 maxlen: 24
2a03:3e0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:75:b7:80:ba:74:39:02:ae:ed:07:90:f6:e2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Validity
Not Before: Jan 2 04:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bef1977391e483ed9ec0f91a8435e5222b93e835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:98:ad:ae:76:26:c8:a0:4b:e3:62:f6:55:
7d:9d:61:61:2a:2b:c7:c5:64:fd:39:68:9a:96:94:
07:49:94:bb:db:f9:4f:22:7e:df:a7:3e:ae:fc:a1:
20:08:5b:5f:71:7b:a1:d2:bf:cd:1b:9c:72:4e:16:
de:35:9a:5c:23:13:84:2e:a0:06:16:da:7f:31:00:
2c:5a:a6:35:10:fd:2f:af:5b:45:59:10:c0:dc:54:
18:5f:62:73:71:81:87:ee:12:89:5c:d4:ec:44:88:
31:6c:ca:e4:ce:f0:55:6c:bc:2f:f7:b4:69:d8:14:
cc:f4:72:9f:7b:95:9f:a9:a8:3d:a2:a5:5a:18:48:
00:f2:6f:56:22:78:5e:f2:15:32:50:ca:fa:66:7b:
66:b5:b5:b5:2a:12:7d:d4:e0:0b:19:d7:99:1d:a6:
84:ee:46:af:38:9a:2f:4b:61:fc:f3:0f:12:5d:90:
db:3b:cc:37:52:b5:00:40:90:46:0b:d5:4f:71:d3:
6a:34:1a:8a:51:c9:56:61:6c:e2:f2:9e:4a:20:a4:
6a:da:52:e7:15:d9:2f:2b:65:c5:91:73:5c:cc:19:
c8:6a:61:35:6c:b0:9b:90:42:9e:d4:ad:dd:de:9e:
15:e8:dd:92:7e:35:df:4f:a3:db:82:65:87:2f:fb:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F1:97:73:91:E4:83:ED:9E:C0:F9:1A:84:35:E5:22:2B:93:E8:35
X509v3 Authority Key Identifier:
keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/vvGXc5Hkg-2ewPkahDXlIiuT6DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.132.0/23
IPv6:
2a03:3e0::/32
Signature Algorithm: sha256WithRSAEncryption
60:24:a2:09:46:a7:71:f9:5a:da:db:e7:67:df:e2:11:b0:8f:
52:f8:25:1d:f8:83:24:ea:86:19:9b:3f:ae:11:a2:81:49:7a:
3d:70:e6:43:a3:5f:4f:4e:ec:74:13:3c:7a:4e:b1:c8:bc:77:
3d:43:fd:b6:d6:d6:1f:32:e3:40:60:fc:a1:c8:b7:45:78:e9:
db:8f:84:2b:02:5b:29:28:b4:53:03:67:72:78:6d:fc:f4:39:
63:9c:a8:b4:a0:20:08:44:a0:78:99:51:80:af:42:ee:f5:b1:
16:03:30:cb:3b:84:37:8d:da:bf:46:9a:ca:6b:cb:12:63:3c:
f3:be:e6:94:9f:87:dd:a8:30:70:ef:6e:d9:14:8e:c0:79:f9:
fb:23:02:86:cf:88:7b:8b:ff:4a:76:d8:33:5a:1b:b6:ec:4f:
90:7a:eb:70:e7:6d:4e:b4:ab:3a:70:82:5f:00:a8:0d:e3:30:
7a:18:93:a6:49:89:48:57:c0:59:56:47:55:d0:ff:72:ff:f6:
83:4d:f7:de:b2:b4:b8:72:20:dc:ea:7e:cf:80:c2:ee:04:5b:
77:c1:24:77:5a:3d:7e:34:56:19:5c:3b:a6:8b:64:4e:e4:47:
8b:bc:97:aa:f1:99:ba:dd:a5:f6:03:84:dd:49:b0:0a:ed:6c:
18:1f:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:41 2024 by rpki-client on console-fra.rpki-client.org