Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/vhefelrz32IzZ28oUm5yS2CG_Ek.roa
File: vhefelrz32IzZ28oUm5yS2CG_Ek.roa (raw, json)
Hash identifier: S0GG8oTo+MAd7sLIbRE52qb8V2qypZCihRwTiFVigPY=
Subject key identifier: BE:17:9F:7A:5A:F3:DF:62:33:67:6F:28:52:6E:72:4B:60:86:FC:49
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 0191FEBCC1464DE0364A86ECD35A8D21D108
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/vhefelrz32IzZ28oUm5yS2CG_Ek.roa
Signing time: Tue 17 Sep 2024 06:47:48 +0000
ROA not before: Tue 17 Sep 2024 06:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5483
IP address blocks: 185.224.44.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 17 Oct 2024 08:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fe:bc:c1:46:4d:e0:36:4a:86:ec:d3:5a:8d:21:d1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Sep 17 06:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be179f7a5af3df6233676f28526e724b6086fc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:82:02:5f:a0:87:6f:95:cd:d0:a9:55:4d:
3c:e4:02:7b:5e:aa:14:06:c7:f5:18:c3:2e:6e:ca:
33:79:80:50:91:4b:4a:48:7d:cb:8d:de:29:af:15:
d0:15:f2:00:eb:d1:72:5d:47:f5:64:30:5d:a1:a8:
42:ca:8b:b2:f5:05:59:62:64:64:b5:4b:5a:0d:f2:
5b:68:a6:45:70:f9:5a:5a:25:c0:2c:ba:9a:5c:72:
ed:75:f7:f4:94:98:0e:87:77:53:8d:a7:3f:96:81:
a3:81:6d:cb:ba:1a:fd:38:f2:8c:26:88:3a:0b:4b:
eb:37:95:88:2c:d6:ef:0d:d0:7a:c0:e1:bd:c0:a4:
90:35:96:6b:6e:6b:67:6f:57:2e:d4:34:3f:10:9e:
cf:e2:bb:51:65:0e:c0:4f:ac:d9:78:2a:80:6f:35:
4c:c0:1c:69:41:cd:04:d3:23:07:a1:b6:c9:75:96:
11:70:ea:cc:e0:4d:a8:8a:21:a9:04:b5:7b:e8:b3:
67:eb:33:c2:aa:97:e0:83:0d:5a:25:59:7c:22:6d:
27:1c:49:f6:9b:a9:c8:d9:3f:c7:ed:fb:06:80:97:
12:94:34:08:e4:9d:0c:c9:ce:08:2a:ae:7b:6f:14:
a0:aa:2c:93:82:66:d3:8f:c8:02:f1:46:66:59:c8:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:17:9F:7A:5A:F3:DF:62:33:67:6F:28:52:6E:72:4B:60:86:FC:49
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/vhefelrz32IzZ28oUm5yS2CG_Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.44.0/23
Signature Algorithm: sha256WithRSAEncryption
40:95:43:65:8b:ee:10:1f:f8:e5:49:0c:41:f0:0f:45:76:50:
3a:5c:c5:02:0f:1e:ee:37:d6:fd:3e:a2:7d:a4:66:c2:2b:cf:
54:9d:2c:b4:fc:1b:cc:55:c4:2b:a9:4b:fe:a2:a6:d8:f5:14:
c6:bf:b2:46:45:ce:3d:d8:b1:f0:eb:29:4e:03:2b:28:2a:93:
dd:be:6f:d5:15:ff:6b:2e:5a:53:1d:09:ed:16:ac:3c:bb:1f:
0f:4b:30:a9:fc:a5:2f:01:e4:88:f7:fe:5e:1c:e5:c5:46:fb:
9e:43:ef:18:30:ee:f6:95:33:02:e2:83:c2:b6:d3:3c:44:ef:
ce:27:b3:e8:3a:d7:0a:1e:d4:5d:ff:1e:b7:a2:54:38:2a:d0:
40:70:b9:b6:da:8b:e8:e7:b9:26:75:0c:71:ad:81:be:42:08:
6d:c3:35:f4:b6:0c:19:6f:e1:4f:ae:c5:ba:55:0e:9f:51:ba:
a2:56:53:ea:8d:e7:2e:95:04:3b:f0:ae:4a:88:73:f2:b4:e3:
79:ee:f6:d6:05:7b:c7:25:9f:6f:90:d3:f5:94:99:0d:79:f1:
a1:f0:75:e9:30:17:1d:4f:28:86:5a:c3:57:95:51:c9:5b:4f:
8b:b7:cd:5d:57:32:cc:83:bf:1a:91:c7:dd:fc:19:20:ff:cb:
12:58:9c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 10:42:10 2024 by rpki-client on console-fra.rpki-client.org