Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/VpwvD1W3CVpA8bRR5XGOqH6ZVnA.roa
File: VpwvD1W3CVpA8bRR5XGOqH6ZVnA.roa (raw, json)
Hash identifier: mG0bbn19r50iur6z0xvdPTP7Nw1XiyboJfTrFNTM2Jo=
Subject key identifier: 56:9C:2F:0F:55:B7:09:5A:40:F1:B4:51:E5:71:8E:A8:7E:99:56:70
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 01856E542A9AEF091D0D29BAA11F7524078F
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/VpwvD1W3CVpA8bRR5XGOqH6ZVnA.roa
Signing time: Sun 01 Jan 2023 17:14:47 +0000
ROA not before: Sun 01 Jan 2023 17:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59962
IP address blocks: 185.24.252.0/24 maxlen: 24
185.24.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:54:2a:9a:ef:09:1d:0d:29:ba:a1:1f:75:24:07:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Jan 1 17:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=569c2f0f55b7095a40f1b451e5718ea87e995670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:e6:1e:5a:23:5d:15:b6:f7:5e:1c:a0:25:
49:90:6e:4a:a7:d9:2d:ad:f3:a1:4f:90:00:40:8b:
aa:5c:71:6e:b9:6b:27:4a:47:f5:66:9e:7d:20:97:
65:f7:d0:8d:1c:bb:44:82:00:9b:cc:55:65:45:cc:
74:26:88:3e:6e:ed:fc:8f:ed:d7:9d:5c:1c:f6:7d:
b8:bf:55:02:10:74:17:73:34:84:a7:1d:e0:75:69:
77:e9:9f:35:44:cc:9e:a7:84:72:f0:b0:ed:7b:0f:
6f:d9:cc:a3:2b:94:5c:3b:b2:af:de:59:82:7f:0e:
a1:4a:61:b1:3a:2a:c0:b3:d7:0a:3c:4e:ed:3d:4a:
b3:b2:36:57:94:86:23:15:a1:2d:63:d3:4b:e0:fb:
ee:ae:df:06:76:97:8e:2f:80:07:46:ac:97:48:85:
5e:c1:17:cf:ff:24:81:a7:e9:62:e5:9f:e3:f9:13:
20:a6:99:fa:e7:f3:eb:d2:4e:a8:e1:7b:e5:e7:ee:
60:28:e8:71:1d:1d:c3:cb:69:0e:65:c8:e1:5f:e6:
0a:1e:ad:4b:10:dc:1a:25:fc:0b:17:17:9c:67:4c:
a8:34:89:42:c0:7c:c5:ec:fe:3a:36:ee:0c:93:9b:
59:29:6b:45:b6:92:dd:5b:f2:99:8b:cb:96:2a:2c:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9C:2F:0F:55:B7:09:5A:40:F1:B4:51:E5:71:8E:A8:7E:99:56:70
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/VpwvD1W3CVpA8bRR5XGOqH6ZVnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.252.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:99:68:f0:3e:82:75:16:da:53:c4:8e:61:1d:e2:88:b6:67:
d1:8e:87:07:66:67:a4:a5:be:20:f5:85:32:bf:3f:2e:6b:14:
4b:ff:20:c6:53:5c:72:83:a2:2a:28:0a:e3:10:d5:09:dd:55:
56:69:06:73:35:08:37:de:b5:62:14:4c:26:4f:60:81:b3:a7:
b1:26:2d:a8:e4:ef:79:e1:c5:7e:f6:b5:d7:13:c9:1c:6c:2a:
54:7f:b9:de:76:3b:ad:35:7f:a2:f3:4a:d5:c0:96:56:7e:d5:
2e:44:91:a2:8d:f8:df:05:e2:4a:78:66:53:81:d0:16:42:c3:
b4:af:68:aa:27:3e:ce:0a:08:c6:52:04:86:2d:93:de:97:a7:
88:76:b8:63:46:ac:07:e4:60:09:ab:bd:bd:88:10:dd:4d:16:
26:00:57:f6:56:21:ba:83:dc:ac:a1:b6:2a:a1:0a:97:a7:d0:
23:25:67:b3:e5:5a:6d:4e:ea:7f:5e:94:04:01:24:9c:58:3a:
26:cb:f5:ab:47:3b:ba:73:16:37:87:b6:9b:7c:fe:02:a2:d1:
db:5e:dc:20:33:ac:98:49:6e:10:e0:9f:c8:5c:7a:8b:5d:5e:
73:fa:1d:4d:87:30:04:c1:c0:94:2a:bd:63:b2:9f:69:19:3b:
de:43:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:46 2024 by rpki-client on console-ams.rpki-client.org