Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/VTwyHVYr5LsSEZEgpxNzxQW5tLk.roa
File: VTwyHVYr5LsSEZEgpxNzxQW5tLk.roa (raw, json)
Hash identifier: CJq5HLYUAkboawX2euDmsnjwEdeBReuEbgSoWI3SPAw=
Subject key identifier: 55:3C:32:1D:56:2B:E4:BB:12:11:91:20:A7:13:73:C5:05:B9:B4:B9
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 018D876C90B4B3978A7774EC88CE7AE1E76D
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/VTwyHVYr5LsSEZEgpxNzxQW5tLk.roa
Signing time: Thu 08 Feb 2024 06:34:15 +0000
ROA not before: Thu 08 Feb 2024 06:34:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.113.66.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 17:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:6c:90:b4:b3:97:8a:77:74:ec:88:ce:7a:e1:e7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Feb 8 06:34:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=553c321d562be4bb12119120a71373c505b9b4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:47:16:f6:13:fd:ef:cf:06:26:17:59:4c:
98:82:f2:7a:e8:65:ed:9a:5b:46:c2:a2:1f:7b:f8:
8d:66:a1:1c:45:c8:6d:a2:f2:f8:fa:15:91:cc:c0:
6e:7a:91:d9:60:d2:4a:55:5c:d0:c3:61:5a:31:b6:
06:72:6a:f5:ff:ab:a8:17:5b:34:ba:fd:3d:53:e2:
14:48:d8:39:c8:55:67:72:8f:b9:e3:a5:89:e5:24:
b9:27:4b:36:f1:ef:7f:dd:1a:11:a3:62:7b:18:4d:
09:f3:6e:8d:cb:ee:f1:ea:20:83:dd:ac:c2:19:76:
39:3b:3a:c0:ce:67:d1:5c:05:4c:9e:dd:64:11:6b:
ac:e1:ac:82:ce:d4:02:00:4e:28:b7:ca:81:b6:db:
30:54:54:49:25:03:5d:f3:40:a9:0d:f7:7c:f2:97:
1c:74:5d:7a:62:61:19:ee:10:fe:5c:ee:ea:18:84:
45:8d:e5:b4:95:85:f1:77:fe:bf:8e:40:ad:a1:eb:
e7:3c:6c:c7:b4:64:71:3e:19:c2:fe:da:68:42:b9:
fd:d3:2c:77:16:96:8e:9a:ed:aa:01:85:78:d3:b4:
3a:4e:da:a1:ac:0a:c0:bf:89:6d:f6:79:d4:3b:35:
24:68:de:1f:98:56:ce:d2:a3:08:98:92:64:4d:0b:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3C:32:1D:56:2B:E4:BB:12:11:91:20:A7:13:73:C5:05:B9:B4:B9
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/VTwyHVYr5LsSEZEgpxNzxQW5tLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.66.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:69:52:05:3a:08:f5:0a:c1:bd:cf:83:86:0c:c6:2b:52:9d:
10:76:af:03:c8:25:5d:2b:31:46:d4:26:5c:55:0b:41:59:49:
9f:7b:8f:05:a4:f5:9c:d2:9d:fc:e1:cc:0d:8b:31:c6:dc:c1:
0b:c0:ee:0e:27:d8:ab:13:9f:60:33:96:4d:86:c1:72:ed:bf:
8d:c1:14:71:0e:1f:95:04:7a:33:2a:0e:06:9c:ba:47:05:0d:
71:b5:db:7b:5b:05:5d:68:65:a4:e0:10:2d:3a:96:d7:e6:aa:
b0:52:24:a6:05:19:9f:f8:d5:5d:aa:54:08:8f:3d:ce:32:6d:
87:ab:c9:d9:b4:3b:c9:d6:fa:9e:19:04:74:76:69:e3:04:57:
b6:3f:ed:06:8a:43:3e:46:61:60:9e:66:f5:d7:11:41:93:9c:
d3:1a:54:a5:7e:b1:75:30:20:b8:45:f5:b3:e8:e6:03:08:5d:
e8:c0:32:91:4d:b5:ae:88:cc:79:ff:32:8c:7c:cc:47:93:60:
07:e4:36:8c:f1:6a:8a:73:fd:7c:3f:4d:99:ac:9f:dc:fb:54:
b5:dc:26:22:70:16:12:d7:15:d5:2b:11:67:3c:93:da:2c:8e:
c4:61:49:f1:80:df:e3:56:d3:97:72:0b:9e:55:22:ee:d6:f4:
23:92:50:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:48 2025 by rpki-client