Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/VKTOf4gQXXJXYVdblswPvqhGZp0.roa
File: VKTOf4gQXXJXYVdblswPvqhGZp0.roa (raw, json)
Hash identifier: bQwn1tnmFxyPF17OCMv2DSS7441BpJioceglSRrHg2Y=
Subject key identifier: 54:A4:CE:7F:88:10:5D:72:57:61:57:5B:96:CC:0F:BE:A8:46:66:9D
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018935B919B50B6E65DDE5CD64778F0E8926
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/VKTOf4gQXXJXYVdblswPvqhGZp0.roa
Signing time: Sat 08 Jul 2023 13:37:50 +0000
ROA not before: Sat 08 Jul 2023 13:37:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.123.100.0/24 maxlen: 24
185.123.101.0/24 maxlen: 24
2a11:840:24::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 15 Aug 2023 00:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:35:b9:19:b5:0b:6e:65:dd:e5:cd:64:77:8f:0e:89:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jul 8 13:37:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54a4ce7f88105d725761575b96cc0fbea846669d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:30:63:3a:43:3e:41:c2:12:59:a3:dc:8c:38:
f8:b0:c3:36:f7:bc:4f:22:3b:ab:12:16:29:af:21:
91:2f:6d:97:68:c0:90:3c:27:3c:a2:ef:f6:7e:cf:
91:98:9f:5a:0d:16:d3:1b:0a:d1:7c:d1:48:9c:95:
dd:33:5d:38:48:ed:2f:57:c8:84:c8:56:19:be:4a:
60:db:9e:e1:28:b2:3c:34:e3:ef:46:4c:54:93:a5:
88:26:9f:09:d0:eb:27:cc:44:f8:8a:54:50:62:f5:
1f:63:7b:97:83:64:65:e3:dd:69:9e:34:23:41:ef:
53:59:88:b6:bc:86:ff:2b:94:b3:59:35:ff:ba:ea:
eb:70:0c:3e:3f:ec:24:70:bb:c2:c0:0e:c0:ee:0b:
8b:12:91:c2:9a:27:5e:9a:97:c2:68:a3:38:56:64:
01:82:e8:08:1d:75:3d:39:2b:07:cf:0c:63:99:d8:
34:60:7b:74:19:05:0b:0a:de:29:b7:34:89:2f:41:
75:a6:58:3c:00:84:d4:5a:13:ab:aa:19:3d:f5:8f:
1f:39:9e:83:7e:d3:3d:c5:84:19:6b:0c:dc:3e:04:
91:70:33:3f:96:0a:71:62:0e:c7:05:96:dc:44:6c:
05:2a:26:67:dc:9c:88:52:76:5a:f3:2e:17:85:3f:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A4:CE:7F:88:10:5D:72:57:61:57:5B:96:CC:0F:BE:A8:46:66:9D
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/VKTOf4gQXXJXYVdblswPvqhGZp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.100.0/23
IPv6:
2a11:840:24::/48
Signature Algorithm: sha256WithRSAEncryption
7d:14:2b:52:15:38:fd:ba:e2:c5:7f:87:51:d9:5a:9a:c3:96:
6b:91:6d:f0:6c:e4:d9:a7:be:04:c4:eb:b4:0f:be:48:08:c4:
a4:ec:58:57:4f:77:f6:2b:bc:a2:52:b6:77:05:c2:be:8a:c3:
0e:6d:c6:bb:4a:4c:f4:f4:15:0c:be:64:47:e2:0f:49:e2:05:
5f:b5:d4:3c:f3:46:48:10:16:fb:2a:3d:fe:42:37:d6:8e:0b:
a5:9d:5f:b3:58:7e:ed:1d:10:c2:13:fa:8c:9e:2c:fc:59:20:
85:53:de:38:72:e0:5b:dc:67:2d:f0:14:ea:7c:8e:65:26:00:
bb:03:2c:f2:1a:5a:62:72:dd:ca:e6:22:42:25:94:8a:af:9a:
03:9f:aa:5b:a0:89:86:68:ee:c7:91:0b:e6:2f:a0:a3:60:3d:
f0:a5:13:c5:c6:71:40:1e:8d:bb:70:7d:54:bb:6f:38:f7:5f:
06:8a:7b:82:94:06:dc:e6:7f:ec:b7:d2:39:8e:98:c3:d3:ef:
0a:8a:76:95:a9:39:2e:c0:a0:b8:50:df:ce:91:eb:7c:4b:c9:
07:53:80:7c:3b:54:37:de:03:b5:90:e6:c8:22:51:2a:7a:16:
78:89:75:ad:ff:3a:47:d3:86:5f:aa:26:63:70:a1:70:1c:20:
e6:46:21:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:20 2024 by rpki-client on console-fra.rpki-client.org