Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/vcqEuK6aMAb2KLbXK61hWJfrrS4.roa
File: vcqEuK6aMAb2KLbXK61hWJfrrS4.roa (raw, json)
Hash identifier: FMCZ0bB2M8XXUx9qYyFBB9hanBlBSbZYqL49MtUWb9w=
Subject key identifier: BD:CA:84:B8:AE:9A:30:06:F6:28:B6:D7:2B:AD:61:58:97:EB:AD:2E
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 018CB5577A68E18E01848736E7EBF12CE306
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/vcqEuK6aMAb2KLbXK61hWJfrrS4.roa
Signing time: Fri 29 Dec 2023 11:30:58 +0000
ROA not before: Fri 29 Dec 2023 11:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25211
IP address blocks: 85.11.163.0/24 maxlen: 24
85.11.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:57:7a:68:e1:8e:01:84:87:36:e7:eb:f1:2c:e3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Dec 29 11:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdca84b8ae9a3006f628b6d72bad615897ebad2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:d6:ca:5c:38:5f:a6:d7:a6:20:cb:b0:38:
29:ad:30:ea:0f:30:a3:67:e7:6d:99:28:8a:c9:0e:
57:be:c6:92:b4:39:1d:0b:a1:f5:5b:9d:95:70:e8:
ba:68:47:10:78:55:aa:b5:3b:ed:c4:fb:9f:da:2f:
99:2d:92:ad:29:e1:5b:22:f7:c7:17:95:4a:9c:86:
36:27:4e:2e:4a:1d:55:2c:0f:c6:df:68:6b:01:29:
a3:b8:e2:bc:e4:76:02:80:76:d9:de:39:2a:72:76:
6f:30:e2:32:b7:a7:70:6e:06:13:27:dd:0b:40:da:
18:4c:0f:1c:c0:6a:49:9f:13:7b:9e:5e:20:fa:51:
ae:d2:be:be:05:a9:60:80:b4:0a:d4:42:c6:11:6d:
7f:fd:cd:b7:1a:b8:18:c8:18:cc:ac:0d:28:0d:ed:
3d:fc:93:fa:1c:25:a8:d0:f2:ba:80:0c:b1:5f:65:
12:da:ff:4f:28:52:c8:52:6e:8d:6e:35:07:31:28:
c8:4e:cc:5d:72:9d:98:ff:08:32:4a:9b:a3:d4:fb:
67:10:8e:7a:96:a0:60:05:7d:b3:68:79:11:91:03:
2d:e1:ac:6f:55:76:18:e4:aa:16:e8:6d:03:0c:2f:
93:49:b5:99:74:c8:d2:53:f7:bd:f9:8a:20:50:5a:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CA:84:B8:AE:9A:30:06:F6:28:B6:D7:2B:AD:61:58:97:EB:AD:2E
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/vcqEuK6aMAb2KLbXK61hWJfrrS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.161.0/24
85.11.163.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:c3:d5:e2:9c:0a:a7:cf:e9:a8:64:13:d4:6a:d4:57:74:2f:
6f:78:33:f3:5d:ef:48:12:f3:c4:50:98:f1:6b:42:d1:76:8e:
f2:91:66:4a:cf:a7:17:9d:4b:25:87:c1:ad:10:9a:22:8d:3c:
e6:27:d3:6d:aa:c6:3a:54:bb:08:81:6a:99:fb:75:9a:b3:3f:
a7:97:ab:fa:89:0c:4f:ec:4c:c7:bb:97:df:0e:1d:fd:2b:99:
f9:b1:02:60:ba:93:e0:46:7b:53:a9:bc:78:98:98:f2:a8:d2:
88:a4:a1:26:53:9a:bc:15:42:5b:be:9c:b6:85:d0:02:6e:5d:
5a:c5:92:fd:eb:37:a5:da:eb:2b:71:f4:67:b4:02:2d:b8:35:
b9:e8:0e:7c:a2:4c:4a:18:8a:ad:05:c6:06:cf:45:7d:81:ea:
5b:a7:57:e1:8b:f1:f2:d6:84:89:1f:3c:e2:2c:1f:65:b2:5b:
d9:1d:46:ab:57:42:8e:02:7a:64:6a:a2:67:eb:b7:af:c3:55:
84:12:39:93:c8:a6:74:85:2c:19:ba:f4:d2:7c:d3:e0:4d:0c:
7e:6f:ba:2e:cb:76:c1:42:27:eb:d8:b5:dd:da:1a:14:c5:8c:
78:f1:b3:63:26:df:75:2c:d4:81:37:40:89:d0:78:7a:26:47:
f4:76:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:27 2024 by rpki-client on console-fra.rpki-client.org