Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/0pnCSocpW0J2YpZDvLMCfOigIVQ.roa
File: 0pnCSocpW0J2YpZDvLMCfOigIVQ.roa (raw, json)
Hash identifier: 24vVtYMK7js+Ad4GoPGO3f1tqM4qymvhRjXHvGJZ778=
Subject key identifier: D2:99:C2:4A:87:29:5B:42:76:62:96:43:BC:B3:02:7C:E8:A0:21:54
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01860C7D212F30EB085E7A99C0ED423B4841
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/0pnCSocpW0J2YpZDvLMCfOigIVQ.roa
Signing time: Wed 01 Feb 2023 10:19:32 +0000
ROA not before: Wed 01 Feb 2023 10:19:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202758
IP address blocks: 185.155.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Feb 2023 07:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:7d:21:2f:30:eb:08:5e:7a:99:c0:ed:42:3b:48:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Feb 1 10:19:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d299c24a87295b4276629643bcb3027ce8a02154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:40:87:6f:03:61:7e:7b:73:21:a7:6e:89:
b2:4e:f2:ec:e0:8b:1b:ca:ae:45:b7:ed:7d:70:b8:
8d:ad:9f:88:8e:62:c0:4a:c7:f2:31:0c:40:8c:18:
a0:8c:9c:b6:07:66:34:3c:85:3c:b6:47:94:a6:a4:
5e:f0:90:17:18:66:d8:b9:40:29:2d:f4:11:a5:9b:
b2:40:5b:1c:0b:8e:53:9e:c4:ea:f8:b3:ec:75:77:
f6:fc:28:42:98:4d:f0:86:de:c6:bc:99:23:59:ee:
d3:e6:2c:05:3a:1e:60:15:04:4f:5c:d7:e6:29:53:
76:7b:36:27:48:49:a1:dd:8f:ee:bb:7d:5c:8e:0d:
bd:f2:bd:c3:9e:db:7c:15:c6:ca:fb:0a:1a:09:8e:
a6:5c:94:69:e8:af:4b:35:2f:37:0d:93:68:4e:61:
8e:b7:2b:4b:7a:4b:98:26:9f:dc:e8:cb:a0:8c:98:
f1:9c:d3:90:1f:4b:8f:1c:04:a8:b2:5a:0c:34:cf:
51:95:dd:9a:c7:f3:9b:bb:6d:a5:b6:cf:f4:4f:ca:
0e:e7:b6:b6:ed:67:bf:4f:6a:16:ca:7c:74:ba:28:
ae:17:a8:3e:c2:08:c8:57:ae:cb:cd:70:40:54:68:
e3:9c:48:cf:0d:50:d2:cc:68:38:c9:85:99:c5:06:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:99:C2:4A:87:29:5B:42:76:62:96:43:BC:B3:02:7C:E8:A0:21:54
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/0pnCSocpW0J2YpZDvLMCfOigIVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.112.0/22
Signature Algorithm: sha256WithRSAEncryption
59:cb:7e:0f:17:87:86:16:34:74:4c:c3:3e:2b:3a:a4:f1:45:
08:ee:b9:06:51:07:56:68:fc:51:7f:83:7f:f4:7d:10:11:67:
5c:5d:bc:15:0f:eb:8d:75:ab:c1:f3:cb:3b:d4:2d:1f:8d:f9:
33:9c:18:06:8b:e5:3e:35:a3:c1:01:4c:6c:5d:4a:de:96:bd:
26:58:66:a8:f5:01:8a:69:38:1c:a7:5d:d5:91:cc:6f:52:e1:
ba:e8:7c:c5:aa:ec:b4:f8:53:02:15:bc:0b:2a:79:c6:c4:bf:
4f:d3:f4:11:97:30:51:af:4d:6b:db:fa:70:e5:6b:16:2b:a8:
f7:be:14:a4:9e:8a:94:1d:48:c6:f6:66:26:b2:2b:37:a1:a9:
32:3f:ed:ec:4a:80:ac:a6:76:31:a2:8d:b8:25:40:f7:79:4f:
29:5f:c4:b9:a0:a2:a6:f7:61:ec:31:02:85:bd:bb:d8:02:eb:
55:67:d9:f6:5f:90:e8:40:28:2f:0b:c0:a9:8c:4f:72:5d:39:
cb:b7:18:f6:ed:b7:bf:b8:de:76:83:97:e4:61:d2:a9:8c:41:
e6:f3:32:1a:59:46:ca:43:05:ac:65:10:cd:5d:09:be:03:49:
e6:ae:64:9a:8a:c5:31:81:31:03:5b:90:33:3c:18:cd:1a:c9:
b0:57:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:06 2024 by rpki-client on console-fra.rpki-client.org