Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/pVNxv0JvWGa2Na5Tz9HqwzagvOU.roa
File: pVNxv0JvWGa2Na5Tz9HqwzagvOU.roa (raw, json)
Hash identifier: KVf81qE3Wn+zPYZCwaonA5NU2fldw6P3e849oCB8EAg=
Subject key identifier: A5:53:71:BF:42:6F:58:66:B6:35:AE:53:CF:D1:EA:C3:36:A0:BC:E5
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 018573718FA7FB71251C11568C2C7AEE87EF
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/pVNxv0JvWGa2Na5Tz9HqwzagvOU.roa
Signing time: Mon 02 Jan 2023 17:05:00 +0000
ROA not before: Mon 02 Jan 2023 17:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50631
IP address blocks: 185.159.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:8f:a7:fb:71:25:1c:11:56:8c:2c:7a:ee:87:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Jan 2 17:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a55371bf426f5866b635ae53cfd1eac336a0bce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:b8:9f:e6:e3:f2:39:32:17:e0:3d:75:6e:
e2:60:4c:04:f1:3e:3d:01:f9:89:a2:4e:ba:3b:b3:
b7:54:55:b0:bf:67:b3:a3:c0:9c:1e:5c:2b:f4:fe:
de:b6:2a:e0:77:8e:b8:f2:04:a8:b3:57:65:4b:7c:
4e:26:68:3d:2f:40:1a:f6:3d:7f:92:74:11:9b:3f:
5f:96:05:80:c2:a3:d0:68:49:60:a4:1f:9c:19:e2:
34:3d:93:a2:07:a7:18:9d:e5:32:db:83:84:0b:c2:
d6:31:f4:22:04:94:b5:52:c8:8d:57:16:62:34:c2:
fd:9d:7f:44:9e:23:9e:9d:18:4e:b0:79:61:6d:d3:
0b:6d:9e:26:cd:40:9e:10:7c:1d:98:ff:24:b2:df:
e0:ba:0b:a8:0b:f5:f9:50:3d:bd:a9:6a:0b:d0:3a:
c4:b1:57:fe:20:44:71:20:d4:2f:d7:95:a0:5a:56:
15:e8:9d:c0:91:96:bf:b1:e7:7d:c2:af:d1:ea:00:
b9:1d:9d:b4:08:97:7e:cd:0e:e0:b9:ff:25:2d:af:
9a:ec:e9:f5:2c:38:e3:9d:89:84:2d:1f:3f:02:d3:
53:a3:f5:36:08:bc:79:4a:b6:a4:e0:bf:1c:c6:ac:
20:3e:d3:bb:7a:74:a9:7e:00:20:9c:aa:82:71:ef:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:53:71:BF:42:6F:58:66:B6:35:AE:53:CF:D1:EA:C3:36:A0:BC:E5
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/pVNxv0JvWGa2Na5Tz9HqwzagvOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:51:1c:0c:1a:0e:e1:20:bd:d9:d2:a0:b5:ec:0b:34:ed:0b:
c6:85:2f:4a:ab:f7:dd:d0:19:c7:99:5a:b4:e1:3d:1f:6e:00:
50:35:65:84:a3:ea:a5:14:f0:30:46:de:69:0d:d3:fa:71:d7:
53:3d:82:b4:ed:25:ce:49:2c:3e:e1:74:80:6c:bc:c3:7c:af:
9f:c0:9a:fd:cc:fe:3f:56:6e:ae:a5:aa:54:68:b9:0d:74:51:
ef:97:07:f5:9d:3c:86:ce:66:70:30:38:b5:51:ed:7f:ac:45:
aa:15:0d:98:2d:b7:88:ab:43:0a:66:0c:06:3a:fe:28:5f:cb:
0e:d3:73:da:3e:01:96:30:a3:8d:61:36:7c:dd:46:c1:eb:a4:
b9:bb:f7:65:58:01:b9:f1:cb:7b:da:87:e8:70:b6:ba:e0:13:
51:17:22:3d:d2:7c:20:1d:e2:1e:ab:f4:6d:e5:5b:55:db:54:
9a:4a:3d:c1:a2:c1:83:69:85:fd:01:0a:dd:f0:75:39:b2:68:
1e:03:65:89:6a:6f:da:60:31:f0:3f:6b:e7:99:fe:4d:64:6c:
85:86:08:87:8d:ec:a1:25:80:cf:c6:c8:b0:72:8f:bc:2a:4e:
fb:58:db:c2:f1:6e:e7:c7:3e:e2:ee:26:cc:f2:95:94:c6:96:
7c:01:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:52 2024 by rpki-client on console-ams.rpki-client.org