Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VMrpuSfY0GBD2DFoFC3deKZ69Go.roa
File: VMrpuSfY0GBD2DFoFC3deKZ69Go.roa (raw, json)
Hash identifier: Fb5MAxo5SR9o3Vmq+2hgsdBbEv9a9Wg3gat7IPWgHmw=
Subject key identifier: 54:CA:E9:B9:27:D8:D0:60:43:D8:31:68:14:2D:DD:78:A6:7A:F4:6A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CF694443BE1F492A7487509F1FCB9D3AE
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VMrpuSfY0GBD2DFoFC3deKZ69Go.roa
Signing time: Thu 11 Jan 2024 03:32:41 +0000
ROA not before: Thu 11 Jan 2024 03:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 185.80.196.0/24 maxlen: 24
82.115.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 15:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f6:94:44:3b:e1:f4:92:a7:48:75:09:f1:fc:b9:d3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 11 03:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54cae9b927d8d06043d83168142ddd78a67af46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:87:3f:82:1b:07:f7:d6:f6:65:ac:1c:fa:07:
6c:1c:53:b4:fe:c3:4d:40:a4:91:b8:67:27:c2:ad:
17:66:22:3b:e0:a3:99:06:ed:1b:ea:3a:44:42:bd:
b9:38:d8:02:98:c2:90:f6:bc:8c:7b:dc:da:4a:4c:
08:fb:4a:70:18:37:71:e0:b6:c3:d6:b4:4c:48:51:
c8:d3:d0:7a:52:0c:39:a6:b3:a9:d7:12:12:3c:0f:
5e:cc:37:8e:09:25:2d:46:3b:ec:f4:70:cf:10:72:
62:7d:9d:52:e0:5e:7a:6e:5a:27:9e:40:92:e0:a7:
36:98:24:68:48:bd:86:8e:71:d3:02:05:a2:a7:46:
bf:61:7f:a1:38:61:b3:85:c7:27:56:22:a3:63:92:
b6:7c:92:f2:ff:41:f4:79:ac:ae:2f:07:26:b9:14:
3b:74:b2:ed:b2:dc:55:00:58:4c:66:54:80:b2:1e:
71:96:62:1e:7c:9b:d0:f6:b3:a9:1e:81:cf:9c:61:
ca:b8:14:4a:0f:0a:f7:13:98:c7:74:21:5a:47:91:
80:67:5e:31:5c:18:01:d1:b9:6c:19:95:1b:e0:f1:
40:fa:e1:6d:a2:3b:39:dc:31:d3:ea:b3:97:4b:4a:
fe:39:ed:d7:51:16:1d:c2:c7:e2:cd:52:c6:28:e8:
4b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CA:E9:B9:27:D8:D0:60:43:D8:31:68:14:2D:DD:78:A6:7A:F4:6A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VMrpuSfY0GBD2DFoFC3deKZ69Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.13.0/24
185.80.196.0/24
Signature Algorithm: sha256WithRSAEncryption
df:b1:51:3a:17:14:62:f8:a8:4b:e9:23:74:e3:31:b3:2f:85:
0a:16:b1:0f:19:ff:c2:0b:05:40:2e:a6:fe:05:c8:6e:e5:48:
06:fa:19:4f:dd:cc:8a:31:db:c4:ba:37:b3:24:d3:b8:48:20:
8b:7b:88:8f:48:ff:7e:50:83:be:eb:5e:e0:35:1f:99:d6:9d:
e8:36:bf:33:99:ae:1f:3f:cd:62:45:07:44:6e:19:f0:32:c0:
e2:32:16:74:ea:e3:e5:3a:5f:d8:76:13:3f:f0:30:bf:0e:35:
99:96:1d:0c:6d:85:df:ee:c0:61:5c:96:06:da:ae:eb:23:a9:
b5:16:48:c1:2e:a4:3a:32:e8:b2:93:85:f0:8d:48:36:5a:e0:
a3:95:32:ae:85:c5:3f:8d:ff:0e:a3:4b:11:58:5a:ab:fb:df:
66:99:a9:a7:16:cf:65:52:d4:d0:db:f9:74:59:5d:65:e9:c2:
3a:2e:b3:b5:4f:5e:59:61:44:70:d2:66:80:a7:2f:15:e0:7a:
06:9c:81:cd:2b:33:39:43:5e:9c:4f:46:54:18:5b:17:8b:0a:
b3:f7:60:99:30:a0:d1:0f:dd:8a:15:31:f9:74:28:2f:33:08:
2a:63:a4:1a:68:11:ed:b7:f7:c9:93:7f:ee:e2:6c:71:c8:21:
dd:90:ab:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 18:15:41 2024 by rpki-client on console-ams.rpki-client.org