Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/THUlrt0YOAys15-FESqk5BTOn3I.roa
File: THUlrt0YOAys15-FESqk5BTOn3I.roa (raw, json)
Hash identifier: m3oRUP8o+PL/MMcOzP/z/nqP4F+PkCeSg8CvnEZkhfo=
Subject key identifier: 4C:75:25:AE:DD:18:38:0C:AC:D7:9F:85:11:2A:A4:E4:14:CE:9F:72
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 01856D2F358D8985E728472BED74C9A541C9
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/THUlrt0YOAys15-FESqk5BTOn3I.roa
Signing time: Sun 01 Jan 2023 11:54:48 +0000
ROA not before: Sun 01 Jan 2023 11:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201684
IP address blocks: 185.64.24.0/24 maxlen: 24
185.64.26.0/24 maxlen: 24
185.64.27.0/24 maxlen: 24
185.64.25.0/24 maxlen: 24
2a03:11a0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 13 Aug 2023 15:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:35:8d:89:85:e7:28:47:2b:ed:74:c9:a5:41:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Jan 1 11:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c7525aedd18380cacd79f85112aa4e414ce9f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:a3:7d:d3:6c:ab:48:11:b7:e4:d7:a5:a6:
89:4b:87:87:3f:b6:d7:bd:cc:8b:59:5e:3f:20:e9:
bb:67:da:fe:d5:61:1e:09:5a:46:b8:4a:bf:a1:69:
c4:fe:be:0c:fe:9c:67:8f:79:51:19:70:52:0e:b7:
6a:f8:94:3c:3d:01:1b:f9:b4:f3:49:af:a7:50:4b:
8d:2a:6b:fc:09:5c:0e:26:e9:de:f1:3d:5a:f5:68:
9f:55:9b:4d:4f:39:9a:6e:ba:a3:0f:33:43:7b:3f:
3f:91:eb:8b:a5:43:8b:a1:00:f2:b0:a7:7a:18:05:
34:e7:78:90:af:a6:cf:a0:90:48:c6:46:5b:b9:bf:
b0:b2:7f:b7:eb:2c:6a:ca:ea:a4:9e:f5:59:c6:ec:
6a:40:e4:ec:b0:0e:63:6e:e2:17:f5:9a:bc:5a:c5:
e6:f9:81:b9:82:f8:6b:0f:d7:cf:3d:ba:98:a4:e1:
28:81:6d:f7:44:88:95:7c:37:5a:5a:43:ff:1e:93:
df:34:79:2f:70:12:ce:9b:e8:bc:aa:4a:8d:95:13:
3f:65:21:a8:33:d6:f5:69:74:16:a1:0e:e3:b1:d6:
c4:0a:6c:9e:c8:9c:12:79:98:84:39:0f:a1:52:7a:
5a:49:bc:7f:12:d7:ef:e9:d8:9f:db:5f:73:cf:ba:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:75:25:AE:DD:18:38:0C:AC:D7:9F:85:11:2A:A4:E4:14:CE:9F:72
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/THUlrt0YOAys15-FESqk5BTOn3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.24.0/22
IPv6:
2a03:11a0:1::/48
Signature Algorithm: sha256WithRSAEncryption
25:08:d6:10:fb:57:f6:3c:72:41:21:35:94:6c:39:b7:ee:a0:
0a:50:71:a6:e2:60:f8:32:85:36:0d:d2:91:d6:80:f5:7b:ca:
f2:b0:30:55:6e:a6:b1:bf:f9:e1:de:56:63:fe:94:af:a3:ed:
8a:52:bb:08:bf:b0:e9:e1:54:5c:e7:df:33:0f:83:4c:c7:b6:
46:ab:ca:89:9a:6e:25:fe:87:d3:0c:2f:d6:bc:a9:14:ee:b9:
d9:5d:76:2b:8f:a1:60:7c:0c:72:d7:64:46:3f:bb:b9:23:16:
8b:9d:74:c8:5e:bc:a7:2d:b7:fe:05:0d:06:c8:d7:96:93:aa:
50:d2:c6:ee:84:ed:65:34:ee:25:c3:ee:c8:36:fc:b4:c9:dc:
0b:3a:3b:3c:22:70:00:a2:f7:54:f9:87:55:70:10:08:10:9b:
4d:38:ff:c4:3c:98:82:25:2a:6b:67:c0:ca:39:13:92:31:06:
27:4f:e7:f5:96:8e:40:f8:9a:1b:7d:ef:3a:00:92:16:40:29:
56:8f:81:a9:16:bc:f6:a0:28:8a:6c:8f:b4:75:f7:cb:fc:f6:
44:31:0b:ba:5f:71:65:b6:10:27:4c:6d:95:37:cf:af:dd:ac:
e5:b0:f6:e2:90:47:48:a4:af:9b:09:82:0c:d2:88:78:1d:94:
6d:4c:f8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-fra.rpki-client.org