Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/VsWW2FrUYdX_2zXExQxL77wCotM.roa
File: VsWW2FrUYdX_2zXExQxL77wCotM.roa (raw, json)
Hash identifier: RAG0otHLDwL+5xuxVIGDnGQ7Yn4elBEs8JLQ0mlrkPg=
Subject key identifier: 56:C5:96:D8:5A:D4:61:D5:FF:DB:35:C4:C5:0C:4B:EF:BC:02:A2:D3
Certificate issuer: /CN=969326562af70e79f3d512488e290e92432d5a01
Certificate serial: 018CC26D1CB2180EE31F97037EF1421D688F
Authority key identifier: 96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/VsWW2FrUYdX_2zXExQxL77wCotM.roa
Signing time: Mon 01 Jan 2024 00:29:39 +0000
ROA not before: Mon 01 Jan 2024 00:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212484
IP address blocks: 185.205.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1c:b2:18:0e:e3:1f:97:03:7e:f1:42:1d:68:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969326562af70e79f3d512488e290e92432d5a01
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56c596d85ad461d5ffdb35c4c50c4befbc02a2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:fc:61:cd:d7:60:26:df:6a:d1:9b:94:fb:
69:88:bd:c5:98:89:eb:10:1d:d5:11:5e:f5:43:3b:
b2:c9:a0:13:cd:37:64:42:28:cd:bf:79:aa:d7:3c:
f7:7f:b9:c2:04:a9:4b:1b:07:1e:33:b7:c3:f1:21:
d8:2c:66:6b:83:dc:0a:95:37:ff:3c:59:2d:44:ec:
5b:b3:43:0e:3a:69:32:5b:40:3a:2f:bd:8f:4b:ad:
e7:c4:a2:e1:2b:a6:9c:de:f7:06:7c:df:d6:e7:7a:
c8:e8:53:d7:44:40:b4:34:5d:80:77:e5:33:c5:42:
01:3a:75:b5:5d:1b:ca:d2:80:5f:d8:ca:e0:d2:8e:
c5:69:6b:81:e7:1c:55:5a:99:c2:0c:63:6b:c2:f7:
9d:eb:6e:10:9e:c1:0c:92:5f:b2:83:a4:9e:37:7b:
ec:8e:5e:15:62:1e:a2:e1:5a:b7:42:51:f6:47:88:
40:49:88:4b:28:1a:bb:fc:87:07:77:5d:08:3f:5b:
ec:e7:12:94:60:11:6b:d2:de:3a:80:bb:dd:5f:f9:
99:1e:ee:00:4e:00:18:84:dd:a0:1b:f7:1c:0d:44:
93:b1:60:3b:65:d4:8d:68:a9:2b:9e:ef:73:5d:2d:
12:80:81:25:03:be:6e:20:ea:39:20:47:a2:a1:34:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C5:96:D8:5A:D4:61:D5:FF:DB:35:C4:C5:0C:4B:EF:BC:02:A2:D3
X509v3 Authority Key Identifier:
keyid:96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/VsWW2FrUYdX_2zXExQxL77wCotM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.202.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3a:8d:a7:6b:43:1a:81:77:ad:ef:9e:c7:cf:6f:1c:6b:f9:
8f:04:ef:2b:38:af:27:b3:be:24:7a:48:1d:1f:26:56:63:86:
34:21:d1:8a:f1:62:24:ba:4d:10:9c:39:21:ae:67:11:5d:c8:
ac:e5:55:a3:09:37:38:7b:07:c4:cc:c2:00:7e:42:ce:91:b4:
dc:d5:8f:91:9a:b9:cc:a4:99:52:ec:48:78:94:62:38:c9:fe:
ad:1a:04:df:d1:2a:34:9b:fc:71:c2:7d:37:6d:11:f8:50:a4:
2c:8c:eb:1d:18:02:9b:80:a7:69:39:a9:10:68:e5:07:36:0b:
62:18:eb:cb:3b:22:c1:c0:ce:fc:74:44:03:7f:0b:8a:53:ed:
7f:08:5f:91:9b:fd:00:72:8e:93:dd:9b:d0:c3:2c:ca:f3:83:
16:70:ad:e4:79:cc:8b:38:56:f1:45:f2:c7:16:3a:3e:c9:6d:
be:e8:19:3b:bc:13:42:46:24:d3:41:13:26:7e:9e:ad:ad:9a:
68:f3:93:70:cf:9c:8b:29:8b:20:8c:df:77:f0:b2:f4:2d:69:
d4:ab:26:eb:9b:60:03:95:f4:24:6e:43:05:90:a7:d1:65:d9:
18:3a:1b:57:d3:c4:e8:02:19:e6:df:94:2b:ed:df:71:be:e2:
1b:77:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:19 2025 by rpki-client