Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/vLS9MA1yP-AHwgwZKjBxCrMJGhc.roa
File: vLS9MA1yP-AHwgwZKjBxCrMJGhc.roa (raw, json)
Hash identifier: Z+L0qOYijHlqO01aRsyP3tmPpZGiaigor8WysvncI3I=
Subject key identifier: BC:B4:BD:30:0D:72:3F:E0:07:C2:0C:19:2A:30:71:0A:B3:09:1A:17
Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial: 0185735623C402834C6714BA7AC233EBE909
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/vLS9MA1yP-AHwgwZKjBxCrMJGhc.roa
Signing time: Mon 02 Jan 2023 16:35:02 +0000
ROA not before: Mon 02 Jan 2023 16:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206775
IP address blocks: 185.124.243.0/24 maxlen: 24
45.132.68.0/22 maxlen: 24
2a10:1340::/29 maxlen: 64
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:23:c4:02:83:4c:67:14:ba:7a:c2:33:eb:e9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Validity
Not Before: Jan 2 16:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcb4bd300d723fe007c20c192a30710ab3091a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:03:bc:b3:4d:92:e8:42:e4:02:20:e8:73:12:
b6:28:6a:c6:e0:7a:00:2c:a4:e7:8b:76:54:2b:08:
3f:e8:e6:0c:d6:46:20:fb:07:0e:25:c8:25:ce:c9:
02:d9:cc:36:9e:fd:84:63:eb:61:fa:65:6d:e9:63:
dc:ec:28:49:49:35:95:98:b3:de:7a:19:e3:62:79:
7e:16:35:2f:18:f6:7e:69:e0:20:1b:30:1f:03:08:
99:52:bc:46:f2:b0:07:1f:b3:40:7d:d7:48:af:15:
01:ea:b3:fb:a7:46:2e:3c:0d:0e:40:6d:b2:a6:82:
6f:f9:af:3c:da:c0:03:3b:5f:0b:bc:4e:53:e3:60:
30:e1:54:75:4c:8f:3e:b1:f6:6a:b2:c0:cd:c6:69:
cc:15:ee:1e:4b:96:08:c6:18:29:ee:0d:52:f3:77:
6f:9d:72:61:07:4b:52:b9:21:f1:52:a4:45:bb:b1:
a1:46:27:7b:7f:c8:0f:7b:c3:d2:de:9a:c3:ab:59:
05:db:a9:9d:9f:a4:a2:45:b2:e9:f1:10:99:20:10:
0e:87:e9:80:5d:2a:c9:67:93:5c:91:08:f6:2a:8d:
7c:b6:9e:82:2f:6a:9a:c8:47:79:5f:0f:39:f6:94:
e8:0e:06:cf:2e:ab:d6:b7:2b:3a:76:b2:bb:7a:46:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B4:BD:30:0D:72:3F:E0:07:C2:0C:19:2A:30:71:0A:B3:09:1A:17
X509v3 Authority Key Identifier:
keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/vLS9MA1yP-AHwgwZKjBxCrMJGhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.68.0/22
185.124.243.0/24
IPv6:
2a10:1340::/29
Signature Algorithm: sha256WithRSAEncryption
62:51:fd:9d:01:22:7f:26:9e:b1:b0:d0:58:d9:b1:81:4f:76:
e7:ca:5b:da:2c:ae:74:eb:d7:fa:fb:98:ce:8e:d9:33:fb:2d:
46:64:04:39:b6:0c:42:56:a4:4f:4a:57:d6:f5:64:9e:fb:9d:
4e:eb:04:31:7c:cd:a4:de:49:c8:3f:af:db:d8:b6:03:2d:c5:
72:03:51:eb:52:fa:ab:17:66:a0:84:95:2a:8c:74:bf:ed:1a:
f8:99:97:02:44:5e:3c:9e:ca:c4:4b:0a:da:18:d6:3d:52:d0:
ce:00:c2:e1:ba:75:b6:87:9e:79:c8:c7:ce:a9:94:43:66:4b:
85:c8:84:57:1a:da:67:bc:d3:95:52:0a:aa:b3:61:23:29:b7:
6e:60:3e:0c:a1:20:45:8c:a6:02:02:89:0c:d4:86:a4:f0:65:
8c:cb:54:e6:c3:2d:34:b5:ac:b5:c2:91:56:fa:b3:99:a6:b9:
4b:d9:e3:48:6d:48:d0:37:bd:e1:24:3e:c5:5e:23:40:99:17:
77:c1:14:76:67:45:be:19:73:75:d6:2a:bc:96:bd:39:0c:ca:
50:0a:d4:b4:d1:0b:6b:4b:68:00:bf:64:61:b6:f1:3d:21:31:
cd:e2:27:6c:aa:f7:7b:94:b9:35:e5:4c:be:be:61:d2:80:d8:
98:c8:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:37 2024 by rpki-client on console-ams.rpki-client.org