Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/vFWtn6EX0yfi9jgAbMPwGrbJYAk.roa
File: vFWtn6EX0yfi9jgAbMPwGrbJYAk.roa (raw, json)
Hash identifier: 9eDLIWAWCLa5yvpC135MtKfKZAD4FFOK8kRCohorv+4=
Subject key identifier: BC:55:AD:9F:A1:17:D3:27:E2:F6:38:00:6C:C3:F0:1A:B6:C9:60:09
Certificate issuer: /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial: 018570399F9F5136F855FE0505A1F1F9BB2B
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/vFWtn6EX0yfi9jgAbMPwGrbJYAk.roa
Signing time: Mon 02 Jan 2023 02:05:02 +0000
ROA not before: Mon 02 Jan 2023 02:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58273
IP address blocks: 185.243.104.0/22 maxlen: 24
2a0d:f80::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:9f:9f:51:36:f8:55:fe:05:05:a1:f1:f9:bb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Validity
Not Before: Jan 2 02:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc55ad9fa117d327e2f638006cc3f01ab6c96009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:80:b7:49:9e:e9:4b:e1:eb:82:54:3f:1e:f4:
f8:a1:e3:07:75:86:9d:3b:bf:d8:12:b5:77:34:f7:
93:e4:a2:8e:f2:a9:c4:4d:dd:03:ea:33:0b:55:fe:
36:64:c9:78:13:f7:28:e0:69:a1:71:5e:cd:11:83:
54:ad:cc:f1:4b:d6:56:14:c6:e9:fd:19:88:ca:25:
2e:45:7f:be:10:b1:69:f1:cb:61:73:2c:24:82:57:
d4:b4:40:55:a6:3a:e3:00:f3:07:e3:5b:1a:c8:81:
a0:03:4b:04:0a:f9:15:f1:6d:95:d7:83:18:78:b8:
ab:81:45:9f:d4:c9:62:3b:d3:ed:d5:05:62:5e:f0:
7d:e3:35:27:b8:9b:f7:5d:0b:3b:13:c6:94:42:5d:
e1:a6:d0:c7:86:e7:b6:e0:5f:56:88:fd:f6:c1:55:
e7:e3:82:ee:f6:07:e8:cf:a3:95:25:46:0d:63:5d:
b9:61:92:5e:74:15:d0:cc:a3:f8:4c:61:e8:a1:2b:
f2:13:6e:c0:72:0d:a8:db:fa:5d:8e:2b:79:5d:e5:
f4:ca:0e:44:dd:58:c1:2c:a7:f8:3e:d1:5f:16:be:
50:ea:3e:64:98:c3:d4:7d:fd:a5:14:3e:fb:a2:69:
86:68:1a:9c:25:43:88:d9:f3:13:30:3c:a8:61:65:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:AD:9F:A1:17:D3:27:E2:F6:38:00:6C:C3:F0:1A:B6:C9:60:09
X509v3 Authority Key Identifier:
keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/vFWtn6EX0yfi9jgAbMPwGrbJYAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.104.0/22
IPv6:
2a0d:f80::/29
Signature Algorithm: sha256WithRSAEncryption
20:33:6b:4b:89:c6:3f:06:e9:5d:48:15:3e:51:2d:55:40:ed:
53:50:c6:c5:40:81:bc:48:38:b8:e4:93:2b:7e:0f:c1:51:ff:
f3:fc:f1:66:bc:c0:9d:04:cc:86:9c:2d:ae:ad:92:e5:71:0d:
7c:ca:43:57:0e:38:5e:ef:1a:24:f2:f3:1b:d8:38:8e:2d:a4:
1c:a8:06:17:3c:94:73:98:a3:a2:5c:b1:b1:81:1d:0c:6b:3b:
3d:e1:75:6b:fc:d7:16:75:52:f4:ba:20:84:26:f5:99:aa:35:
1c:76:85:74:c8:9b:c0:d5:b1:12:64:64:87:e9:b5:7a:d3:1c:
78:7b:7d:92:e7:4b:e2:9c:a7:1a:1a:93:76:43:27:de:18:52:
e8:9a:3e:8a:b4:6b:80:32:73:f0:25:fd:da:a2:a3:c1:f6:1c:
33:2d:c5:b5:e0:56:23:cf:41:31:75:cd:dc:4c:3e:45:fd:dd:
6d:1d:8b:bf:ba:21:3d:2e:a0:bd:4e:b8:38:5d:d8:1e:68:f7:
af:ab:66:84:f7:52:72:66:63:21:ac:28:70:68:37:eb:f0:dc:
42:a1:11:29:ad:44:0c:11:89:c0:d3:c4:5f:c9:0e:f4:6e:aa:
4f:a0:13:b8:8a:7e:f0:ca:fc:a5:84:8e:13:8d:ef:9f:5f:bf:
17:23:fc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:43 2024 by rpki-client on console-fra.rpki-client.org