Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/Vo1ETWYpf6pM1oehDVHJJsgIf6s.roa
File: Vo1ETWYpf6pM1oehDVHJJsgIf6s.roa (raw, json)
Hash identifier: v3EzRJlA43+fM6pqHOBhhs/kmLu6nr/0IBcxbydFXL8=
Subject key identifier: 56:8D:44:4D:66:29:7F:AA:4C:D6:87:A1:0D:51:C9:26:C8:08:7F:AB
Certificate issuer: /CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Certificate serial: 01856ED4ADD7189EBCC122DCAD7A7A5BA9BB
Authority key identifier: E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/Vo1ETWYpf6pM1oehDVHJJsgIf6s.roa
Signing time: Sun 01 Jan 2023 19:35:09 +0000
ROA not before: Sun 01 Jan 2023 19:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205090
IP address blocks: 94.142.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ad:d7:18:9e:bc:c1:22:dc:ad:7a:7a:5b:a9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Validity
Not Before: Jan 1 19:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=568d444d66297faa4cd687a10d51c926c8087fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:17:13:bc:58:ad:79:63:66:ba:42:48:45:
61:03:ed:14:a8:b2:05:e6:d0:c2:51:7e:68:97:22:
a9:89:95:c5:7c:94:51:48:37:74:05:ea:23:f0:aa:
30:c2:76:8b:ad:ba:d0:52:9e:8f:06:f6:bf:0b:3d:
4a:fc:95:33:92:60:bb:ab:4b:fe:3a:e2:ff:87:bf:
89:49:ce:f2:90:62:7a:4a:f0:f8:5f:e6:73:e1:92:
a7:15:3f:03:60:2f:1b:0b:21:df:3f:1a:e9:ca:2e:
89:ae:97:cc:d4:42:c8:48:2a:18:82:53:c2:9a:c6:
d9:dc:23:43:15:d7:40:ac:f6:df:80:36:5f:ef:47:
f9:d3:16:5e:84:c1:0e:66:2a:aa:7f:88:20:f4:87:
91:84:d2:35:45:4f:32:81:99:80:dc:f2:84:73:3a:
aa:43:51:de:02:e6:c9:31:1f:4d:a4:2c:21:26:0a:
ad:03:d5:6e:67:80:9d:e6:41:07:8a:dd:34:38:43:
b3:12:1e:ed:36:a1:48:01:fa:dd:e7:fa:fa:64:ca:
98:92:85:f9:be:1c:fd:8f:88:82:7d:d4:74:21:a3:
b2:d2:37:b9:24:b1:e6:6e:c8:39:61:6a:4b:80:b1:
e3:86:6d:f4:33:8c:fc:81:62:3a:d3:92:d1:92:53:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8D:44:4D:66:29:7F:AA:4C:D6:87:A1:0D:51:C9:26:C8:08:7F:AB
X509v3 Authority Key Identifier:
keyid:E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/Vo1ETWYpf6pM1oehDVHJJsgIf6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.250.0/24
Signature Algorithm: sha256WithRSAEncryption
13:67:48:45:33:7b:a2:e0:d3:dc:3d:77:42:9e:fc:a5:67:1c:
31:b3:4f:71:fb:12:2e:2d:9e:fe:4f:d8:70:96:d4:9e:49:4f:
f3:d2:bf:92:70:ac:56:fb:c8:c6:07:a7:a7:27:4a:53:e3:25:
99:de:52:3a:9a:36:a8:34:62:4d:6c:e8:19:b5:15:10:b4:59:
ca:23:b9:42:33:2c:57:68:4a:69:2f:ff:b3:02:f3:2b:63:64:
b7:65:4c:31:70:da:4e:a8:83:65:75:f8:98:0e:f3:aa:67:69:
bd:26:8d:9d:fb:05:b6:a0:e6:1e:f0:74:53:57:5d:88:e4:78:
81:f2:8b:54:3c:26:4b:59:53:00:fb:72:6e:87:87:1d:22:8b:
6c:f5:21:d8:2c:dd:c2:24:f2:ee:c0:58:7e:5f:69:c2:68:66:
9c:0a:5e:37:77:a8:52:cf:b1:88:63:47:7b:5f:f5:13:cc:4a:
a1:8a:e9:ce:85:9a:4d:3d:c0:23:c2:8c:c6:9c:eb:9b:51:e2:
0f:e4:2f:6c:67:36:1e:55:e5:45:56:26:3a:72:04:2b:c5:34:
70:87:e4:43:01:7e:0d:b0:f1:be:53:dd:95:b2:3c:7e:60:69:
4f:58:27:28:b9:bb:ed:25:70:8a:75:64:86:69:d4:0d:ef:aa:
a1:c6:fb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:22 2024 by rpki-client on console-ams.rpki-client.org