Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/4Vq4739IWGezdbK5g9sJWBigEY8.roa
File: 4Vq4739IWGezdbK5g9sJWBigEY8.roa (raw, json)
Hash identifier: TlFnw1wQAUDnzNyqDMIwvCsk39xpfEPNYQ4mP2gvaBM=
Subject key identifier: E1:5A:B8:EF:7F:48:58:67:B3:75:B2:B9:83:DB:09:58:18:A0:11:8F
Certificate issuer: /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial: 018CA5E4664A03F8060BD11F641DC895A8B7
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/4Vq4739IWGezdbK5g9sJWBigEY8.roa
Signing time: Tue 26 Dec 2023 11:30:58 +0000
ROA not before: Tue 26 Dec 2023 11:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50596
IP address blocks: 185.235.64.0/22 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a5:e4:66:4a:03:f8:06:0b:d1:1f:64:1d:c8:95:a8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Validity
Not Before: Dec 26 11:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e15ab8ef7f485867b375b2b983db095818a0118f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:8c:a5:b5:8f:26:46:57:9e:c2:93:85:55:
53:f2:e6:71:ee:a0:8d:97:2e:50:50:c0:a2:2d:71:
2a:3a:74:76:0a:50:f3:3a:24:83:49:6a:1c:9f:ee:
a6:18:dd:82:cf:a8:ff:98:ef:17:ce:9b:83:dc:de:
30:e5:5b:0b:b0:8c:c6:47:8c:a4:b4:8e:47:62:90:
5d:a7:c8:c0:d0:e2:29:76:d7:14:89:2e:9b:e1:97:
80:3a:f2:be:ea:b0:e5:41:7a:84:23:8e:dd:94:c4:
aa:bd:94:d4:f6:b6:7f:9c:72:9c:ba:9c:90:73:62:
25:9e:c4:c9:34:65:e0:b2:aa:1f:27:3a:53:35:f7:
c3:ca:eb:18:e0:91:e8:df:47:75:10:36:1e:b1:13:
13:11:e0:a4:6c:48:52:59:ea:cc:fd:08:15:13:ee:
43:a4:49:b2:bb:6a:29:14:7c:e6:aa:b4:9d:05:68:
3a:6d:3e:87:2b:71:93:c3:5c:c4:2d:aa:a8:2f:1b:
ce:d5:0a:8a:4c:4e:1e:ec:0d:31:4b:8c:0d:84:39:
02:2d:00:6d:b7:f6:aa:d7:b7:21:71:a6:99:59:3e:
21:23:9b:a8:64:5c:24:e6:7d:55:bc:0c:29:a2:06:
e8:8f:13:a7:6f:26:e6:3c:ce:ef:99:47:bf:d3:92:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5A:B8:EF:7F:48:58:67:B3:75:B2:B9:83:DB:09:58:18:A0:11:8F
X509v3 Authority Key Identifier:
keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/4Vq4739IWGezdbK5g9sJWBigEY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.64.0/22
Signature Algorithm: sha256WithRSAEncryption
64:c7:ea:4c:79:fc:fb:5a:f3:7e:e6:93:34:82:03:46:a4:35:
82:2c:48:c8:a1:05:5d:d6:a6:0c:75:17:ac:fa:cf:9f:d7:51:
c1:3b:51:53:bd:98:9b:e3:e2:60:47:77:cf:7f:b9:40:d2:d6:
fa:78:28:4d:93:f5:2b:9f:6e:34:38:ef:8b:eb:08:ad:c1:8e:
a6:4c:41:c8:15:07:46:f9:7f:4c:54:8d:3c:1f:1f:1b:be:48:
db:cc:82:40:ff:a1:7a:de:74:fb:d4:3e:1e:84:32:c5:6b:9a:
c9:20:78:37:ab:40:3c:cb:86:e8:87:ee:00:9e:bc:ba:86:01:
2b:02:e1:ff:51:d2:ee:82:94:97:d6:9c:64:25:fd:02:f5:4d:
b4:3b:f0:a0:c1:5b:a3:4b:ab:61:b5:26:bb:2c:23:65:51:f1:
41:78:a8:72:03:d6:76:ca:4f:b1:09:15:ce:e8:03:65:6b:3e:
33:55:a2:82:3f:c0:97:1f:fa:df:3c:aa:9d:1d:a7:43:d0:02:
92:30:ef:f2:7d:cd:22:02:f2:5a:1c:78:13:39:72:ea:05:59:
c1:40:c3:c4:74:eb:a9:90:3f:7c:14:be:72:29:c2:04:80:7e:
aa:ff:ad:9f:d1:7c:40:c1:8c:94:d1:4c:2f:7f:57:bd:4e:e7:
06:0b:8b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:44 2024 by rpki-client on console-fra.rpki-client.org