Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/vtDd6C0SWTaWaBd6aGB8-xtQMEM.roa
File: vtDd6C0SWTaWaBd6aGB8-xtQMEM.roa (raw, json)
Hash identifier: 3ETe2bQeCurTCrZGGxzCus1j+8Ff7cOfyyvgTnGT29U=
Subject key identifier: BE:D0:DD:E8:2D:12:59:36:96:68:17:7A:68:60:7C:FB:1B:50:30:43
Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial: 01856F39088DED8F43704E036E042D8A410C
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/vtDd6C0SWTaWaBd6aGB8-xtQMEM.roa
Signing time: Sun 01 Jan 2023 21:24:46 +0000
ROA not before: Sun 01 Jan 2023 21:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9021
IP address blocks: 185.66.124.0/24 maxlen: 24
185.66.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:08:8d:ed:8f:43:70:4e:03:6e:04:2d:8a:41:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Validity
Not Before: Jan 1 21:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bed0dde82d1259369668177a68607cfb1b503043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:9f:8c:d0:d5:05:8c:61:ea:9f:83:bf:fd:
6c:c5:f0:30:ab:47:dc:9f:ab:25:79:2f:dd:41:21:
9a:27:0d:fd:59:ef:6d:18:5c:68:78:a6:b7:76:ad:
02:d6:2f:07:e7:60:aa:f4:83:a2:ae:64:ae:f8:72:
e1:b1:ca:67:36:e4:e9:39:08:26:b7:c1:48:00:a1:
78:b4:de:a9:34:5b:02:c7:0f:11:71:f8:6f:f6:d1:
90:a5:09:05:f0:a9:e6:72:05:d2:cc:ed:66:ba:c5:
1a:ec:89:4a:fc:2b:58:52:84:47:dd:b5:2b:93:43:
58:74:8e:46:97:62:52:48:07:f0:47:70:f6:a1:8e:
5e:4f:f9:ff:e8:04:19:d0:b7:52:58:b4:54:36:e8:
c0:c4:61:5c:cd:74:cd:9c:f1:63:49:91:6c:0a:fe:
fb:ac:55:02:73:ff:c8:0c:05:cd:40:5c:04:7c:cd:
ba:1e:81:71:26:55:af:ff:90:33:1f:bb:08:59:dd:
14:b1:bc:8c:03:50:34:16:1b:eb:49:92:8a:2e:c1:
69:2b:58:10:9c:28:fa:d7:7d:f6:41:99:22:c7:d2:
46:23:36:81:60:4b:ba:16:ff:1a:76:e5:a1:69:bf:
12:19:53:3b:1d:82:87:72:a9:e1:b7:b3:8e:87:fc:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D0:DD:E8:2D:12:59:36:96:68:17:7A:68:60:7C:FB:1B:50:30:43
X509v3 Authority Key Identifier:
keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/vtDd6C0SWTaWaBd6aGB8-xtQMEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.124.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:5f:2d:2d:c9:b0:23:bf:d3:ab:e2:27:82:3b:20:07:ae:5d:
c3:ad:e8:b4:72:fc:7a:e9:ab:36:f6:54:e4:d0:3f:f5:78:40:
ba:39:94:3d:1e:bc:dd:73:00:df:9e:24:c8:05:f4:5a:1d:a5:
f2:25:c7:a1:5e:34:e7:e1:e5:13:11:68:f5:62:a9:9b:84:9b:
08:ee:13:41:b8:d7:7a:a9:19:82:55:2d:11:54:1d:39:48:f3:
98:7f:6c:06:eb:19:1b:24:ea:20:b0:f8:a1:f8:f4:86:98:ed:
ba:27:a0:b4:86:63:f5:ec:88:61:1f:71:3f:14:eb:f1:67:1f:
8a:36:27:bf:c2:c8:3b:58:04:a6:53:79:98:f0:ab:34:e5:63:
b7:a9:8f:57:20:04:44:21:45:29:30:7c:95:58:87:8f:bb:15:
67:34:8d:59:9d:6a:84:e3:61:bb:9d:37:07:67:f8:c1:39:9a:
75:bc:56:06:e7:e1:31:0e:42:5f:48:21:db:13:1f:26:da:e6:
10:33:f2:a9:8d:78:ed:7d:9e:c0:9a:73:d1:90:cc:57:74:c4:
e7:74:25:e0:84:01:1c:ae:63:49:ac:79:f0:2e:d7:e6:93:fa:
8e:d7:e4:94:84:07:4c:6f:bb:d8:97:e1:39:94:c3:b6:56:aa:
06:a7:ed:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:27 2024 by rpki-client on console-ams.rpki-client.org