Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VHCiZHxNuNMxd1cSiBXUFPiYpx8.roa
File: VHCiZHxNuNMxd1cSiBXUFPiYpx8.roa (raw, json)
Hash identifier: 1mmaZyEeHBz0rPkvFk+TsUpIHkBpqkaPH8ovxYYL8Zk=
Subject key identifier: 54:70:A2:64:7C:4D:B8:D3:31:77:57:12:88:15:D4:14:F8:98:A7:1F
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AEF5B0C2E500083FAA629B2575FA5
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VHCiZHxNuNMxd1cSiBXUFPiYpx8.roa
Signing time: Sun 01 Jan 2023 11:15:11 +0000
ROA not before: Sun 01 Jan 2023 11:15:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60643
IP address blocks: 86.110.104.0/24 maxlen: 24
80.250.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:ef:5b:0c:2e:50:00:83:fa:a6:29:b2:57:5f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5470a2647c4db8d3317757128815d414f898a71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d0:35:a3:7d:89:40:cd:3b:87:01:7d:ef:f3:
1f:2d:2f:1b:07:23:c4:72:8f:68:34:8c:15:81:05:
73:33:68:68:3d:f6:f6:32:83:dc:e8:1a:e0:07:04:
b5:22:c5:b6:92:f7:33:50:c2:b2:1e:c7:d7:77:24:
be:f0:af:e5:bc:db:55:93:ee:cc:45:04:7c:a6:93:
16:95:32:8d:47:a3:89:5e:f7:56:99:47:57:8e:bb:
0f:ae:0d:ac:f4:cf:ad:d1:93:76:99:2a:57:e0:2c:
b1:54:75:cf:2c:22:f7:94:cc:b5:39:14:47:a8:fe:
1d:37:ad:d2:80:31:26:68:fa:4f:89:27:1c:b8:57:
4e:49:1e:a3:55:1e:56:6e:25:79:63:1f:5d:44:52:
57:21:87:f9:22:56:c7:90:d1:03:7d:17:a5:d7:fa:
73:2b:6c:e5:12:9f:79:66:d4:5c:94:31:c6:ae:98:
61:af:e1:6f:55:a5:e7:f0:d9:49:00:0e:ac:01:08:
bc:d7:a4:f6:81:9d:00:05:47:05:fe:1a:72:b0:90:
f8:dc:7d:cd:32:a5:e5:0d:21:b5:9e:cc:78:4d:3c:
ea:cd:40:2d:8b:5a:1c:c8:1a:65:03:ee:27:b5:8e:
f1:6d:00:19:cb:35:59:35:43:cc:68:aa:ee:09:5a:
5c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:70:A2:64:7C:4D:B8:D3:31:77:57:12:88:15:D4:14:F8:98:A7:1F
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VHCiZHxNuNMxd1cSiBXUFPiYpx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.167.0/24
86.110.104.0/24
Signature Algorithm: sha256WithRSAEncryption
82:18:eb:f9:a9:ef:0b:4d:5b:0a:59:20:34:b5:00:f8:c3:cd:
bf:b9:cb:76:4a:4a:f8:49:96:e2:54:23:8f:47:8d:d1:c0:0a:
f3:3b:49:f6:2e:78:86:25:0e:38:ec:cf:d7:b7:65:f0:ae:90:
e6:b5:88:48:67:3e:bf:84:18:04:cd:66:aa:03:e7:38:4f:62:
c3:93:f3:df:b9:01:c6:7d:1c:00:6a:cb:2f:e9:2d:63:e8:8a:
19:de:cb:19:1b:1f:6d:cc:90:70:10:d6:7e:32:da:1d:5d:ba:
f6:41:3a:d8:83:87:b9:7e:f3:67:31:9e:7d:11:01:41:65:11:
dd:87:0d:2c:6a:f0:c6:0b:fb:06:40:5a:88:47:d7:c3:90:79:
4a:80:6e:3f:cd:67:e3:07:03:eb:89:9a:30:17:91:e8:d2:26:
7d:bf:c8:1a:49:43:b4:14:40:20:c3:bd:2f:9e:46:1e:52:19:
e9:98:03:82:23:24:ab:1b:b6:1d:39:d3:54:da:2a:2e:c7:29:
07:db:a7:26:a8:2a:0a:e1:e7:29:79:53:7f:a7:e1:31:3b:ed:
a0:b1:50:7b:e1:5f:92:1b:89:21:31:3c:39:48:df:b7:f5:ca:
6b:6a:11:cc:4e:92:5c:b9:2f:1a:af:cd:c2:ea:34:c7:ca:16:
36:eb:f2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org