Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/VHttdEcrZrSxM3IhxM9on5jS5Fw.roa
File: VHttdEcrZrSxM3IhxM9on5jS5Fw.roa (raw, json)
Hash identifier: w7JwpgTtEwXIzrMIg1JFR2MID0kGinKGXu5m5bDuA+w=
Subject key identifier: 54:7B:6D:74:47:2B:66:B4:B1:33:72:21:C4:CF:68:9F:98:D2:E4:5C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 01856BF7EA473A4157CD3F048F8A5AE1052B
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/VHttdEcrZrSxM3IhxM9on5jS5Fw.roa
Signing time: Sun 01 Jan 2023 06:14:47 +0000
ROA not before: Sun 01 Jan 2023 06:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24634
IP address blocks: 185.44.152.0/22 maxlen: 24
2a04:9cc0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:ea:47:3a:41:57:cd:3f:04:8f:8a:5a:e1:05:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Jan 1 06:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=547b6d74472b66b4b1337221c4cf689f98d2e45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:5a:8f:bb:b1:3d:47:da:d7:f4:b6:18:d9:
a8:e9:48:aa:af:43:7d:57:08:06:e4:52:41:fb:25:
85:ce:84:cf:09:ed:52:68:32:58:f2:b3:a7:bc:3d:
5a:54:1c:64:07:fd:c9:dc:3c:8a:68:4e:72:99:6b:
9a:b4:89:9d:ce:ff:a4:61:81:c0:5d:a6:16:54:eb:
cb:e7:6a:63:60:1c:67:31:28:f0:fb:3c:63:9d:e1:
eb:1c:8d:21:0c:6e:50:8c:d0:45:b1:4c:8f:ce:cb:
05:19:f0:a8:fe:ab:32:10:3e:b3:1e:e8:36:50:cc:
d9:df:d7:4c:8f:27:1f:d0:0b:a3:fb:1a:5f:f0:c4:
3f:d8:a2:b1:d4:ba:06:4c:ca:a6:3a:c7:44:15:3d:
5d:23:8a:05:0b:8e:b8:f4:48:aa:64:34:e0:3a:2f:
83:53:af:86:ab:82:32:10:fb:69:69:a3:d8:0d:35:
c7:3b:c2:b4:ff:49:51:02:d1:bc:52:7b:b7:58:45:
b0:cf:09:b6:61:0d:16:f8:f0:c8:85:04:51:30:94:
d3:a0:8f:3c:15:05:86:0a:11:d6:75:fb:f8:c3:01:
9e:16:d0:64:8b:3a:d1:56:4d:3a:3b:fb:e7:63:4a:
d0:23:5a:45:80:74:c2:bc:20:56:bb:1d:eb:2f:cc:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7B:6D:74:47:2B:66:B4:B1:33:72:21:C4:CF:68:9F:98:D2:E4:5C
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/VHttdEcrZrSxM3IhxM9on5jS5Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.152.0/22
IPv6:
2a04:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:9f:b8:96:bf:d1:b3:16:e1:11:b0:07:c5:84:b5:25:35:13:
fa:3c:1d:be:98:52:9f:72:f4:df:cd:e1:03:63:9f:c4:03:2d:
ba:cb:f0:19:04:81:75:5c:6c:c7:d6:20:33:d6:d7:54:15:52:
92:a5:26:1b:14:51:4f:44:45:44:89:f5:7c:4b:02:09:93:1b:
c3:1a:6d:a8:c4:59:1f:94:10:e4:ef:32:53:79:01:f9:0f:a5:
bc:e3:45:9e:20:1d:df:17:14:05:58:b5:6a:9b:a2:e6:d0:ba:
c7:f3:cb:02:05:eb:6d:56:75:3d:08:62:eb:00:8f:99:63:12:
3b:06:b8:9d:61:6d:57:c4:f2:c6:22:45:50:9d:40:ba:b2:63:
52:c4:87:99:20:57:88:12:10:22:51:12:ed:d6:8f:f2:f7:7a:
3f:d9:ab:b4:84:c3:35:bb:ad:79:46:15:28:a2:fd:bb:43:70:
12:a6:02:97:ca:34:49:99:e7:bd:a6:e0:47:b9:95:43:5e:33:
d8:65:32:89:25:53:b9:64:f3:59:f9:ad:2f:8b:e0:bc:7c:70:
73:46:7e:3d:51:bb:ed:df:a6:2d:3e:fe:04:ff:22:4f:0d:21:
1c:d5:c3:2f:46:b5:40:f6:37:bb:cb:79:47:2a:30:59:a8:70:
16:b4:61:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-fra.rpki-client.org