Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/VGxVdO7QWlIVph71rYbudGg4zgE.roa
File: VGxVdO7QWlIVph71rYbudGg4zgE.roa (raw, json)
Hash identifier: EMRZS/kQnZRKKk2snjsC+NPl1Bq9bDUc2Nv/QqFVZxw=
Subject key identifier: 54:6C:55:74:EE:D0:5A:52:15:A6:1E:F5:AD:86:EE:74:68:38:CE:01
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 01867E4F62CA06CEC709E0B916612B50E000
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/VGxVdO7QWlIVph71rYbudGg4zgE.roa
Signing time: Thu 23 Feb 2023 12:46:17 +0000
ROA not before: Thu 23 Feb 2023 12:46:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62119
IP address blocks: 185.137.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:4f:62:ca:06:ce:c7:09:e0:b9:16:61:2b:50:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Feb 23 12:46:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=546c5574eed05a5215a61ef5ad86ee746838ce01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ed:16:1b:0a:90:dc:32:35:cc:67:0d:32:a8:
01:0c:d5:75:6f:6e:24:71:fc:04:b2:2c:c6:0d:29:
b4:9b:46:2c:62:02:3c:ef:50:68:35:5e:36:1d:c0:
c3:f3:e0:3a:30:dd:a9:cd:99:58:49:30:f9:32:2d:
91:9b:2d:34:00:7a:e1:2a:df:75:35:d5:4a:04:2a:
cc:c9:43:04:d4:df:22:73:70:f2:2b:db:a5:57:d6:
a0:e1:e3:31:40:87:70:d0:d1:85:9f:b7:41:06:df:
f1:cf:5e:8a:0f:8a:93:9e:1e:fe:91:07:05:b3:da:
70:f3:29:41:c9:e3:c6:4f:2a:66:3a:a0:6f:d0:6a:
0b:2b:0a:7d:cc:9a:74:09:e8:4d:36:7a:05:ea:18:
40:d1:13:ea:1d:63:1e:b4:84:9c:fa:8a:56:69:06:
09:4c:fe:1b:1c:6c:ac:48:b7:f1:d2:07:07:05:8e:
77:e0:aa:b8:e9:1a:69:6a:c4:d1:2f:3b:8c:c4:39:
3b:7a:91:01:aa:30:42:ac:b7:31:d7:6a:3e:dd:5a:
58:c5:c4:22:6a:5a:ac:98:83:66:be:31:85:23:f7:
f0:6e:cb:a2:7d:2e:67:d3:22:3d:90:da:2e:59:dc:
09:8c:cc:77:bb:1d:af:9d:a9:66:72:2f:ac:05:f8:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6C:55:74:EE:D0:5A:52:15:A6:1E:F5:AD:86:EE:74:68:38:CE:01
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/VGxVdO7QWlIVph71rYbudGg4zgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.96.0/24
Signature Algorithm: sha256WithRSAEncryption
78:4e:c9:57:0a:86:e0:31:53:5b:dc:b6:80:81:f8:98:51:d0:
27:6b:a3:09:88:1e:87:16:fa:f8:d2:ad:d9:88:80:7e:ae:3a:
0c:50:1c:f2:b7:5a:01:f7:d1:e6:ab:ee:96:f8:07:79:0c:db:
0c:c5:2a:e6:f3:2f:ef:84:de:d4:7c:ca:26:13:8d:f7:62:a5:
7b:ae:65:ae:e3:a9:e0:c2:ab:63:2a:c1:d2:6f:24:29:8a:17:
18:9c:21:91:dc:b3:16:35:11:19:e6:0b:4a:66:fa:77:20:a9:
08:60:77:f9:36:d4:fb:33:2f:93:84:92:dd:e8:15:83:40:bc:
c0:03:c5:30:5b:93:d9:88:b7:ec:c5:51:5c:0e:2f:2e:a0:90:
ea:df:81:b8:53:3b:d5:00:12:bd:25:17:20:17:74:30:66:c3:
57:20:d3:c1:cb:9d:e4:6e:cd:99:53:c8:c5:dc:bc:cc:8b:22:
94:8d:8b:f3:ab:b7:ea:fb:94:89:75:03:72:5e:26:f9:10:b1:
1e:21:85:15:ed:dc:22:25:9f:5e:c3:7e:ad:55:b5:e5:3b:b3:
1c:d4:31:0c:c5:44:89:89:65:a8:51:fc:c1:01:96:f5:0f:b4:
3e:c2:40:70:22:5e:ab:63:b9:c1:8a:98:e8:8a:99:0a:7f:ef:
01:5e:c5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:41 2024 by rpki-client on console-ams.rpki-client.org