Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/viPlqoizhVA_e-k17cK5eBGYE_8.roa
File: viPlqoizhVA_e-k17cK5eBGYE_8.roa (raw, json)
Hash identifier: HcHbcSFHlsylv0S7RPZ5tpFVvwJHgYK5uA4sOl3svJw=
Subject key identifier: BE:23:E5:AA:88:B3:85:50:3F:7B:E9:35:ED:C2:B9:78:11:98:13:FF
Certificate issuer: /CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Certificate serial: 018CC493749DFE7C4A04BD57413FFD890E8A
Authority key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/viPlqoizhVA_e-k17cK5eBGYE_8.roa
Signing time: Mon 01 Jan 2024 10:30:47 +0000
ROA not before: Mon 01 Jan 2024 10:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60111
IP address blocks: 185.255.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:74:9d:fe:7c:4a:04:bd:57:41:3f:fd:89:0e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be23e5aa88b385503f7be935edc2b978119813ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:f4:cd:2d:46:7a:38:db:74:a4:7f:ef:c3:
af:69:74:35:98:08:90:c6:2b:d8:59:e7:b6:89:f3:
ed:3d:29:2d:69:37:56:e6:10:8b:6c:84:e7:80:35:
83:18:31:1c:6f:d2:e7:33:35:2a:c3:9f:42:40:a9:
8f:05:f6:85:13:cb:db:7b:15:cf:3d:c5:45:3c:5e:
b3:1b:f8:2e:60:f3:fd:12:1f:b5:72:8f:c7:b8:1b:
59:c0:9c:22:31:cf:32:cd:f2:d6:6e:14:32:1b:09:
b8:bc:cc:bc:d8:82:d2:89:56:7c:70:26:66:f0:4a:
2d:4c:9f:9c:f8:34:8d:4a:14:b5:e0:29:87:65:39:
84:93:a3:c4:57:06:81:73:64:7b:86:d1:89:28:23:
48:89:4a:50:d5:fe:8a:a0:64:97:ea:a2:cb:66:ac:
ab:a5:b2:dd:90:68:b0:ac:cb:bd:36:8d:eb:52:18:
af:18:dd:6d:b2:c0:b3:55:99:ba:8f:85:dc:b9:52:
a7:c3:e5:04:dc:78:cf:47:ea:8d:62:57:f3:bb:4a:
d4:26:2a:5c:c5:e0:24:0a:45:da:3b:d7:96:72:95:
20:03:79:4e:d0:1f:f6:bb:32:36:93:6a:22:cc:42:
b4:50:dd:bc:f5:7a:37:07:7f:a0:f8:ee:fa:f3:56:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:23:E5:AA:88:B3:85:50:3F:7B:E9:35:ED:C2:B9:78:11:98:13:FF
X509v3 Authority Key Identifier:
keyid:E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/viPlqoizhVA_e-k17cK5eBGYE_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:6f:3c:bf:2f:c6:51:8e:15:ae:f2:f6:87:8c:b1:d3:4a:bb:
7a:8d:83:15:dc:09:9d:19:41:f0:8c:53:64:d1:1e:81:a2:8a:
fd:73:c5:41:3c:8d:af:17:dd:f9:3b:ac:93:45:a3:06:75:83:
14:c1:5e:cb:bf:f3:6a:1a:ad:9d:8e:f9:6b:36:2b:a0:fb:15:
27:5e:a0:fd:24:14:3d:58:a8:0e:05:e3:e0:29:fe:49:85:b7:
e5:e8:a6:10:1a:dd:70:1a:16:a2:e6:11:32:27:5a:cc:f9:b6:
63:d9:ce:c8:16:db:63:3c:86:e5:3f:22:8e:28:ff:e4:93:61:
75:d9:81:25:29:fe:32:4f:41:f2:2c:e7:09:aa:60:71:13:9e:
43:d5:5a:3f:1a:35:fc:64:4e:c6:29:e0:05:b4:2e:f8:fa:f2:
86:5e:d5:08:aa:1c:44:cf:77:83:c5:97:6a:e3:a2:e6:ba:6f:
dd:23:a1:da:5f:8a:1e:ba:07:20:a7:98:00:9b:20:15:75:ad:
59:09:c3:84:5d:fb:2b:93:d3:1d:c0:5b:33:69:4e:6c:ab:4a:
70:20:4c:ef:4a:df:82:0f:b5:06:6f:b2:8d:17:fc:27:ab:d1:
22:07:b8:72:0d:33:3f:21:89:01:15:72:bc:48:7e:b9:72:9b:
4f:d6:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:40 2025 by rpki-client