Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/9FRbHOjRf770Q88LARDBCS8A9u4.roa
File: 9FRbHOjRf770Q88LARDBCS8A9u4.roa (raw, json)
Hash identifier: aeRpRt+htJ0u5K8eRZVi3geuBrLTLG0g4bvJIrYaDTA=
Subject key identifier: F4:54:5B:1C:E8:D1:7F:BE:F4:43:CF:0B:01:10:C1:09:2F:00:F6:EE
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 0189EF9A45E2A0DCB2839CF5C946E453B0F9
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/9FRbHOjRf770Q88LARDBCS8A9u4.roa
Signing time: Sun 13 Aug 2023 15:53:32 +0000
ROA not before: Sun 13 Aug 2023 15:53:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 193.203.254.0/24 maxlen: 24
185.64.24.0/24 maxlen: 24
185.64.25.0/24 maxlen: 24
185.64.26.0/24 maxlen: 24
185.64.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 17:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:9a:45:e2:a0:dc:b2:83:9c:f5:c9:46:e4:53:b0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Aug 13 15:53:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4545b1ce8d17fbef443cf0b0110c1092f00f6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ee:08:9e:b9:ac:58:83:17:f5:ef:db:ad:06:
42:4a:35:7e:e6:d9:a0:39:3f:88:cb:e6:4d:e9:df:
9e:8d:dc:b2:f0:87:2a:86:e5:3e:17:94:58:71:4a:
7b:db:39:3d:7c:ed:49:a3:b1:77:95:90:e2:30:d1:
3a:6f:96:d6:ad:8c:9a:66:17:20:58:17:d5:42:ae:
81:8f:10:1a:e2:e7:e6:3b:c0:c4:02:7a:40:12:55:
0f:0f:c9:54:ad:5b:37:c8:e1:a6:ff:73:a0:bf:83:
81:e7:59:95:48:28:40:ac:cc:50:ce:4f:b8:18:9e:
22:61:15:ca:3d:d3:f4:bc:d0:8b:6b:f4:44:f9:73:
03:df:bd:04:60:e9:cd:75:8a:69:9f:9d:87:91:83:
c8:dc:ef:4e:f1:08:23:05:bb:5c:6b:d6:87:5f:70:
0b:68:9e:a8:d8:8e:68:09:0e:ae:b7:b3:00:cd:97:
8a:ba:0c:22:c5:2c:47:3d:c3:08:40:26:a2:cb:2e:
0e:0b:c7:d0:85:4f:3d:10:11:e5:8a:56:8d:7d:b9:
b7:60:a3:4a:ce:84:72:5e:00:7a:08:ae:3a:52:5b:
18:44:70:68:90:b6:74:87:cb:4c:f6:4c:36:25:97:
fc:a8:b5:29:22:6c:9c:f7:78:93:3c:fa:cd:b4:d5:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:54:5B:1C:E8:D1:7F:BE:F4:43:CF:0B:01:10:C1:09:2F:00:F6:EE
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/9FRbHOjRf770Q88LARDBCS8A9u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.24.0/22
193.203.254.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e6:ce:f5:4f:08:09:0c:21:1e:59:7e:00:fe:a1:88:cf:91:
ec:5a:40:77:84:7a:4f:f4:1c:eb:bc:dc:f7:f1:99:63:f8:03:
20:e1:a5:02:c3:c1:1f:ad:3a:91:bd:03:2a:5b:61:17:48:b6:
d8:62:b2:c4:9d:98:d3:89:50:84:cc:1f:2e:59:38:41:69:43:
c0:7b:4e:6c:a8:6a:9f:52:62:a5:6d:62:99:d7:b3:19:fe:f2:
d5:5d:18:8e:13:53:fb:12:04:17:d3:7f:f8:52:45:85:11:71:
7e:94:8e:c5:e2:e6:d3:79:1b:bc:48:94:83:87:15:db:b2:6e:
d2:bf:57:b0:38:20:9f:10:5f:8a:67:13:54:e4:c1:46:06:d4:
9f:4e:e4:b2:21:b6:d7:24:4a:c2:e1:ae:21:85:3f:10:d0:1e:
f9:e4:14:80:e6:3f:73:4a:ea:dd:84:0b:1f:85:82:1a:b1:05:
a3:82:ee:35:c3:56:1f:56:e5:a7:d5:1e:b3:7f:a8:1a:1d:84:
a4:fb:a1:78:8f:90:d6:b0:21:66:ef:66:4c:12:5d:e6:14:3f:
87:af:44:98:8b:ce:7d:17:4a:11:1f:14:9e:97:60:10:e0:f5:
f6:e7:fd:12:4d:60:65:3f:1b:fb:bf:e0:27:4f:8a:e5:9c:ce:
52:26:4a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-fra.rpki-client.org