Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/vgFVzbOjA6XbJpf3mXp3A4HNSBA.roa
File: vgFVzbOjA6XbJpf3mXp3A4HNSBA.roa (raw, json)
Hash identifier: Vo5OLPR85kL68kW2Jz/osboqApOM01HpDoEP5rBJ8H8=
Subject key identifier: BE:01:55:CD:B3:A3:03:A5:DB:26:97:F7:99:7A:77:03:81:CD:48:10
Certificate issuer: /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial: 01856D41738CAD48605579D2FD959D3FDF41
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/vgFVzbOjA6XbJpf3mXp3A4HNSBA.roa
Signing time: Sun 01 Jan 2023 12:14:44 +0000
ROA not before: Sun 01 Jan 2023 12:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209635
IP address blocks: 185.185.78.0/23 maxlen: 23
185.185.79.0/24 maxlen: 24
2a0f:a0c0:fffe::/47 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:73:8c:ad:48:60:55:79:d2:fd:95:9d:3f:df:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Validity
Not Before: Jan 1 12:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be0155cdb3a303a5db2697f7997a770381cd4810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:b4:13:a8:b2:ff:51:02:b4:23:09:fb:ad:
41:59:56:eb:5a:a7:b0:56:2c:aa:1d:51:2c:80:f9:
be:d4:7c:7d:28:10:77:b3:81:6f:06:6a:0f:fe:cc:
c9:3c:93:7d:1b:e9:5b:e0:a4:f3:b1:05:fb:2c:2b:
a8:ab:65:f4:c9:8c:7c:63:ed:97:a7:7f:bc:82:f7:
1f:24:19:c0:a7:01:5e:8d:e3:6d:a2:9c:2c:81:af:
df:83:d6:ae:0a:78:95:68:a0:b4:54:ba:ae:02:e1:
48:62:04:ca:09:bf:48:be:06:c5:86:5e:10:6f:fb:
f2:86:61:ca:11:95:e1:f7:75:70:53:9a:fc:6a:2d:
8c:66:d7:4e:4e:37:72:13:0a:67:e4:12:1b:98:dc:
45:45:31:b8:d2:7d:49:7d:3e:ec:1f:a0:b9:6b:06:
af:ce:4b:d2:b1:b3:bb:31:6d:4c:82:e3:d4:cb:72:
24:df:46:45:a8:3d:f1:22:ad:6e:e5:07:e0:be:1c:
78:f8:0c:43:46:bc:69:c2:84:ba:07:a8:30:9e:b6:
c3:a8:e5:96:dc:32:f5:ff:6b:66:0b:95:d8:f7:0e:
03:2b:55:db:7e:7b:6f:7d:5e:3f:84:c9:84:d4:b8:
c7:36:31:5b:c5:2f:e4:c8:8b:a0:80:78:7b:4f:24:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:55:CD:B3:A3:03:A5:DB:26:97:F7:99:7A:77:03:81:CD:48:10
X509v3 Authority Key Identifier:
keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/vgFVzbOjA6XbJpf3mXp3A4HNSBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.78.0/23
IPv6:
2a0f:a0c0:fffe::/47
Signature Algorithm: sha256WithRSAEncryption
26:1b:0f:77:fc:12:e7:66:a1:b2:22:0f:ce:d4:e5:6b:f4:61:
83:ab:63:f3:6a:61:db:b2:e9:34:f6:5c:e1:27:8d:22:77:39:
e2:81:62:99:a9:18:c3:2c:f6:6b:59:2b:c1:3f:f0:af:bd:ce:
85:8e:58:ee:6e:3c:d0:30:b0:16:65:cf:ce:b0:2b:f4:8a:fc:
88:87:6e:f0:7d:ef:70:9d:ae:e5:f3:4c:6d:46:02:0b:ae:da:
de:07:cc:0e:0c:32:30:e5:7d:6f:df:bf:3e:23:6c:2c:f8:dd:
b1:8a:e2:e3:f6:46:56:c6:26:69:92:e7:3e:a0:b5:c2:18:a9:
ea:57:63:6e:fd:a8:a0:50:40:26:a4:97:4b:6d:55:43:78:57:
dc:4b:f3:b6:fa:a7:66:1d:94:4b:25:ff:f3:fc:0e:b5:04:e5:
08:10:e0:40:da:d1:fd:10:d1:77:f9:ee:da:15:9c:2a:24:12:
17:d6:c0:4f:77:6e:09:67:28:06:e6:b1:d9:54:33:b8:b7:c6:
d6:f3:a3:ad:d9:75:1a:9a:4c:c9:ea:a6:b9:ae:df:5c:a3:e9:
41:c8:30:67:47:46:66:53:5e:8e:28:52:17:37:4d:ae:1b:08:
d8:be:54:2e:46:be:6a:62:87:cf:5e:22:08:88:98:eb:d7:84:
5e:84:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:44 2024 by rpki-client on console-fra.rpki-client.org