Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/VJ6wbdHSRZgn5Qdo9FGtoBuCpHI.roa
File: VJ6wbdHSRZgn5Qdo9FGtoBuCpHI.roa (raw, json)
Hash identifier: Rwc4P3fjP6siWqGnIq3u2VdJbpHVXQY6MAZFIbFRWek=
Subject key identifier: 54:9E:B0:6D:D1:D2:45:98:27:E5:07:68:F4:51:AD:A0:1B:82:A4:72
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 01857094F4007DDBA43B0016C0CF8E25F1FA
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/VJ6wbdHSRZgn5Qdo9FGtoBuCpHI.roa
Signing time: Mon 02 Jan 2023 03:44:47 +0000
ROA not before: Mon 02 Jan 2023 03:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205660
IP address blocks: 185.39.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f4:00:7d:db:a4:3b:00:16:c0:cf:8e:25:f1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Jan 2 03:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=549eb06dd1d2459827e50768f451ada01b82a472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b1:58:f0:4c:60:b4:70:d8:b2:19:45:9f:3b:
b5:7c:13:ab:a0:5d:61:1f:5a:81:89:58:25:82:c9:
4d:5c:1d:73:ec:78:0b:64:19:e8:92:32:be:57:09:
a2:cb:16:5f:66:ae:48:d3:41:cb:cf:b6:3c:27:d4:
1b:b2:f4:c2:33:c6:f5:72:77:1e:e2:e3:8c:a4:db:
d7:9c:f6:f6:48:35:49:c5:5f:bd:6d:10:6d:94:b4:
ab:c6:62:6a:43:09:a0:44:67:35:4e:77:e1:74:9e:
06:49:09:12:69:ad:cf:e3:fb:43:50:de:e9:db:7e:
e5:07:59:e0:0f:09:fe:99:73:1d:bc:87:ae:d1:11:
3b:9c:68:98:d2:a8:af:69:7c:0f:bf:55:b4:f2:d8:
07:84:b0:d9:a7:7d:5a:ad:7f:ee:4b:9e:49:b2:fe:
e0:02:38:29:48:42:ec:80:57:e3:52:59:92:5d:1a:
39:84:5f:53:10:7f:15:c8:1e:46:89:40:aa:21:36:
5c:09:39:57:f8:c5:51:c8:f7:81:25:fb:cc:3a:a9:
33:0f:83:f9:62:65:03:1c:4a:5f:94:7a:c8:40:01:
72:2f:85:f9:dc:a5:76:c1:3b:45:ff:81:e0:a8:58:
34:66:37:49:32:f1:c4:d2:04:e6:3a:b8:63:1c:53:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9E:B0:6D:D1:D2:45:98:27:E5:07:68:F4:51:AD:A0:1B:82:A4:72
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/VJ6wbdHSRZgn5Qdo9FGtoBuCpHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.253.0/24
Signature Algorithm: sha256WithRSAEncryption
04:68:21:a9:75:c7:49:38:32:cf:5b:0f:6b:c5:18:a3:cd:4d:
84:23:4b:f9:50:e2:95:c4:04:b9:09:17:c5:62:00:0e:30:98:
2a:c0:ae:f2:ef:6e:ed:97:d8:cd:1e:49:b4:e6:10:f4:ec:d7:
bf:5e:b2:f5:e5:71:da:ab:7d:b4:1c:e8:1e:eb:b2:83:6b:c5:
4a:d4:af:61:6a:7d:d2:84:67:09:7e:1a:01:61:ae:77:7a:51:
22:c3:9a:70:d4:31:ed:f2:06:fe:cd:fa:78:d3:c1:26:a8:04:
89:77:59:48:ed:da:5f:87:e8:a8:d8:00:42:6d:e7:de:2c:64:
96:21:a1:83:77:c5:7b:e7:81:fc:d5:e5:4d:05:e4:01:7e:31:
a9:00:e6:58:94:e8:2a:88:5b:9a:68:b5:2d:36:56:56:72:2f:
2d:82:30:d3:0e:9d:cc:b7:4f:a8:de:b2:36:9f:02:06:30:29:
a1:a0:5d:16:a8:14:f1:33:08:a5:13:f7:57:57:c0:4f:a8:bd:
88:56:cf:22:ad:2b:9a:48:5d:d6:4b:c2:d3:5b:65:33:f0:af:
42:d6:25:fa:16:89:2a:67:e6:27:8e:a7:2d:be:da:06:6b:2b:
ac:2f:fe:25:88:31:f7:f1:4b:24:f4:e4:07:a3:40:61:58:77:
1b:6e:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:21 2024 by rpki-client on console-fra.rpki-client.org