Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/VebYBXVGj3iF2ZK_kdR1832VgPw.roa
File: VebYBXVGj3iF2ZK_kdR1832VgPw.roa (raw, json)
Hash identifier: aiqELOBngecH/SPEEzt6l2AgVIa7z50hEydOmMedG0I=
Subject key identifier: 55:E6:D8:05:75:46:8F:78:85:D9:92:BF:91:D4:75:F3:7D:95:80:FC
Certificate issuer: /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial: 01856EC211E335F6E083ACF8B33E6CA3DD32
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/VebYBXVGj3iF2ZK_kdR1832VgPw.roa
Signing time: Sun 01 Jan 2023 19:14:50 +0000
ROA not before: Sun 01 Jan 2023 19:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.57.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:11:e3:35:f6:e0:83:ac:f8:b3:3e:6c:a3:dd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
Validity
Not Before: Jan 1 19:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55e6d80575468f7885d992bf91d475f37d9580fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:b9:8c:c8:82:c0:c0:60:d0:30:ce:7a:05:
be:e2:a6:47:64:13:75:4b:85:44:b7:31:32:df:7a:
46:af:49:c4:54:07:5b:b2:14:29:52:1d:a6:67:30:
91:46:ed:ab:65:e6:5f:00:7c:58:28:2e:4e:ba:73:
1e:63:fa:98:6f:24:38:76:cb:2e:57:4e:8c:c3:95:
1d:f9:a2:80:35:25:c4:4b:00:60:79:91:e6:a2:bd:
14:83:b8:c8:2d:52:14:e4:0e:d0:d0:a3:96:4b:7c:
91:d1:df:4a:43:9c:1e:6d:1c:0f:65:03:54:62:e0:
ec:09:30:08:e9:1a:eb:d3:be:65:f5:cb:3b:bf:56:
79:ad:63:78:9f:21:00:68:f5:ef:e4:2a:a6:6f:f9:
b1:41:e0:41:16:a5:81:51:21:b9:58:fa:cc:25:77:
f6:3b:80:7e:e0:42:23:71:61:81:c5:35:fd:42:8b:
fa:56:ee:0b:06:b4:05:cd:00:37:8f:20:a2:8a:90:
19:5c:47:b5:5f:4d:8a:f2:40:d6:fa:fa:88:fc:e5:
dd:87:83:ad:d2:14:e3:55:0a:a1:58:90:c6:c3:50:
d5:6e:da:38:62:92:2a:bb:b5:bb:b9:da:05:34:6b:
30:ba:0e:b4:f5:83:df:54:ec:07:0f:cf:25:46:71:
16:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E6:D8:05:75:46:8F:78:85:D9:92:BF:91:D4:75:F3:7D:95:80:FC
X509v3 Authority Key Identifier:
keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/VebYBXVGj3iF2ZK_kdR1832VgPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.216.0/22
Signature Algorithm: sha256WithRSAEncryption
48:ea:9b:66:96:5c:1b:22:ec:33:0d:5e:8b:24:d5:96:53:ee:
3f:a8:e9:ec:9d:41:0a:5b:7c:ff:21:8a:46:2f:52:7f:82:ee:
0b:eb:64:09:85:14:d4:3c:ba:60:26:22:2a:5f:09:ef:d0:93:
98:6d:6d:34:2c:b7:75:67:e6:d3:0b:e3:62:c0:e8:60:83:4a:
55:c2:77:62:75:78:98:3a:28:93:28:78:2b:29:b8:0f:a8:f4:
b5:42:57:c7:47:08:31:4c:5b:c8:7d:7e:72:e5:f1:55:a5:f0:
73:35:f6:de:8e:29:57:c7:92:67:fd:9e:5b:00:23:7e:0c:18:
00:8e:77:46:41:cd:99:66:88:66:52:25:ed:70:5c:00:b0:19:
4a:dd:b9:67:14:cf:11:dd:c5:04:9b:3a:3e:ff:92:05:33:b3:
3e:3b:b3:da:b3:63:d9:96:44:a7:1f:c6:31:df:99:e1:d5:3c:
86:bb:8e:f0:49:eb:f1:8c:91:2d:da:08:f7:e5:e0:29:8e:95:
7b:cf:dd:82:c2:2a:31:c5:d0:36:ec:19:28:6a:a3:ba:c9:bf:
5b:ff:b1:9b:a4:9a:3b:9b:4b:b7:ef:08:14:cd:24:13:5f:a7:
c6:29:59:f1:55:be:eb:7e:03:e9:17:1f:65:4a:b4:e7:2d:db:
39:36:5c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:35 2024 by rpki-client on console-ams.rpki-client.org