Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/vcDfBpeZkGTDenoqWw_3dztw0XQ.roa
File: vcDfBpeZkGTDenoqWw_3dztw0XQ.roa (raw, json)
Hash identifier: ZIoMlEybMc+mpj5oH4r7r2G4UkyZPT/TMwkdCq24QFM=
Subject key identifier: BD:C0:DF:06:97:99:90:64:C3:7A:7A:2A:5B:0F:F7:77:3B:70:D1:74
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018F3EB53F1D0F25969B9002921D8981CDF5
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/vcDfBpeZkGTDenoqWw_3dztw0XQ.roa
Signing time: Fri 03 May 2024 13:46:56 +0000
ROA not before: Fri 03 May 2024 13:46:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 185.244.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 06:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:b5:3f:1d:0f:25:96:9b:90:02:92:1d:89:81:cd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: May 3 13:46:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdc0df0697999064c37a7a2a5b0ff7773b70d174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:0c:6a:7c:ff:b3:a0:4f:e5:d7:4c:12:1f:
02:bc:b2:2b:fb:8e:e5:77:78:e5:80:cd:c7:7e:5f:
29:ff:a8:36:a9:31:dc:c2:60:77:ce:91:90:f2:4b:
25:4c:99:f0:1c:5c:15:2a:0b:cf:72:18:ab:61:32:
5d:b1:f2:2b:a2:12:f8:1f:6f:54:fc:f3:25:87:b4:
fa:05:f8:8d:59:ff:8a:f7:5f:da:ba:be:03:57:87:
57:2c:32:c4:41:78:d5:35:14:09:f3:9a:5c:68:b0:
90:da:57:5d:39:3d:ef:e9:9a:64:97:9c:cc:0f:74:
d3:4d:0d:3c:63:9b:da:72:b8:c2:82:af:05:de:85:
9e:81:82:fe:d7:a0:d5:6b:63:1d:2d:d1:00:21:ae:
e1:8a:b7:3c:8d:d5:8d:a3:dd:de:04:d1:d9:4f:82:
86:d2:a1:32:c7:87:30:e2:0a:a6:97:6c:d3:94:11:
9a:8a:6e:14:e9:d1:09:65:44:3a:71:42:cb:e3:6f:
35:ac:08:7c:3c:85:00:27:56:83:47:7d:34:b1:a1:
1d:26:f0:b8:30:38:88:ed:06:d1:bc:79:03:5a:1e:
6d:cf:2b:50:eb:83:e2:ed:be:8b:8d:99:e7:a2:3e:
46:c9:fa:24:96:5d:09:6d:16:5a:06:7d:2c:d5:66:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C0:DF:06:97:99:90:64:C3:7A:7A:2A:5B:0F:F7:77:3B:70:D1:74
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/vcDfBpeZkGTDenoqWw_3dztw0XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.48.0/24
Signature Algorithm: sha256WithRSAEncryption
13:eb:8c:23:ba:da:96:27:0e:0b:0e:1d:d6:25:ab:63:52:ec:
9f:54:9c:66:c6:31:ae:b0:ed:3e:93:80:3e:c9:42:fb:42:a7:
86:bb:5c:f4:4f:81:c9:04:95:9a:a1:4b:24:57:28:ac:2f:54:
32:25:b0:66:3a:2e:24:ff:97:6d:42:40:0b:c4:35:40:d2:c2:
71:27:fd:b8:56:0b:2d:17:3f:7d:6f:70:3d:be:1f:d9:ee:09:
67:c5:db:a1:01:75:41:0e:34:90:1f:6d:12:11:6f:25:fa:c0:
5f:1c:cd:96:16:b5:f7:e9:93:60:3f:8d:df:32:e8:a2:32:d9:
16:dd:91:a4:d8:a8:28:3b:f5:66:5a:c5:b6:58:36:30:82:8e:
cc:02:cd:3c:11:3b:ba:9a:13:8f:44:05:84:12:17:2c:45:4a:
74:fa:b0:42:0f:21:09:a8:ff:2b:72:4b:91:ae:cf:b3:76:c6:
fe:e2:8b:ea:68:43:29:83:d5:06:22:60:b6:9a:b4:16:11:f3:
86:98:9a:0a:c1:9a:1d:c6:b1:f0:3d:2a:68:52:fa:42:3b:79:
d4:e1:70:d8:27:63:0b:05:92:19:d8:fd:81:87:b6:31:74:ff:
ee:a8:07:cb:d5:7c:c9:4b:a0:7f:00:e2:92:de:cc:66:5c:92:
fd:47:51:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:02 2024 by rpki-client on console-ams.rpki-client.org