Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/VbX635iro5QwAtlij-zL4_8uoUY.roa
File: VbX635iro5QwAtlij-zL4_8uoUY.roa (raw, json)
Hash identifier: HYz2/hcO2zM0joME2wmnrCVyI/qUVUikenDxQSbBjP4=
Subject key identifier: 55:B5:FA:DF:98:AB:A3:94:30:02:D9:62:8F:EC:CB:E3:FF:2E:A1:46
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 018959323CA71E9D4D3A9A402B7C54124B03
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/VbX635iro5QwAtlij-zL4_8uoUY.roa
Signing time: Sat 15 Jul 2023 10:56:51 +0000
ROA not before: Sat 15 Jul 2023 10:56:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 94.228.163.0/24 maxlen: 24
94.228.162.0/24 maxlen: 24
94.228.165.0/24 maxlen: 24
94.228.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:59:32:3c:a7:1e:9d:4d:3a:9a:40:2b:7c:54:12:4b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jul 15 10:56:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55b5fadf98aba3943002d9628feccbe3ff2ea146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:fb:39:e4:f3:90:98:e4:ab:c4:cf:12:c5:
6b:64:ba:f0:25:92:13:ae:d6:56:8f:05:b1:b8:ff:
f1:a9:41:e2:59:5a:cf:a9:15:81:d3:f6:f2:cc:d1:
7e:0d:9e:95:79:d9:96:e6:bf:2f:f3:b5:9d:d2:54:
a2:d7:22:12:db:ce:20:a4:96:a5:c5:1a:ef:db:6c:
9b:88:23:2f:be:86:59:62:06:d8:cc:73:1c:b2:c7:
1f:41:de:09:ce:bd:96:c5:32:45:2a:c3:5f:a8:d2:
0d:27:0f:62:ae:55:e9:d6:b1:ff:8e:a7:4e:d5:09:
81:b6:19:86:d2:99:d9:06:36:7f:cc:38:c4:9f:72:
ae:0f:ce:e6:e4:af:d1:e0:4b:5e:a9:50:3b:cd:05:
fc:de:91:7b:c7:65:9a:33:9a:41:14:5a:71:77:5a:
48:23:a1:84:b1:6b:7e:6c:d1:81:42:ab:a4:1b:0b:
7c:83:e0:3b:4e:22:13:93:fc:7e:2b:16:eb:f9:fa:
9b:2d:a9:aa:b7:50:30:0d:c2:af:5f:70:a3:1e:13:
91:64:76:b2:d4:d5:11:56:74:de:d8:5f:8d:9d:4e:
5d:3b:cd:48:ce:d0:0c:80:40:cb:19:98:28:a3:77:
f1:73:32:4e:6a:ad:e9:66:0b:29:83:ed:ce:e3:4c:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B5:FA:DF:98:AB:A3:94:30:02:D9:62:8F:EC:CB:E3:FF:2E:A1:46
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/VbX635iro5QwAtlij-zL4_8uoUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.162.0-94.228.165.255
Signature Algorithm: sha256WithRSAEncryption
86:24:43:b0:3f:a3:db:37:f6:b9:75:d8:07:f2:92:06:75:2c:
38:e2:50:9e:11:bc:b2:db:09:7e:26:df:42:86:a5:23:17:d5:
14:fd:45:31:0f:05:87:68:0a:d7:02:46:06:b1:4a:80:e2:33:
71:32:f4:ac:8f:72:cc:f9:ae:70:79:0b:23:64:49:12:d6:b6:
4f:45:75:25:e0:08:66:c9:3a:df:17:ac:79:b8:b3:a7:2c:dc:
e5:fb:00:fe:f8:93:77:29:c2:bb:76:40:22:a1:8c:8e:25:5b:
ff:e1:08:31:b1:0a:70:46:1c:83:02:c8:3e:23:94:66:49:70:
89:bb:f5:56:60:4c:dc:81:df:5c:b7:43:03:b5:de:13:96:e4:
43:3b:c6:ec:39:f1:76:1d:93:b4:dc:9e:48:16:68:88:73:00:
4f:26:a8:dc:5f:ac:9f:39:45:ca:ea:f2:e8:29:54:3c:6e:7f:
ba:91:6d:09:61:e6:eb:e7:e9:54:59:b2:4f:82:b9:fb:bf:1b:
6b:03:a3:8f:16:ba:53:dc:05:54:ff:f2:83:2f:0e:3c:cd:60:
eb:dc:9e:8f:c1:eb:f4:27:d2:db:28:db:7e:1e:c4:60:76:3e:
8e:da:63:7d:18:20:ea:68:5e:d0:a5:ad:10:a1:73:04:4d:a1:
e4:01:58:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:27 2024 by rpki-client on console-fra.rpki-client.org