Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/VDpiSRyyadSm9jHKpBGyjUqEJus.roa
File: VDpiSRyyadSm9jHKpBGyjUqEJus.roa (raw, json)
Hash identifier: 2IrgXDEut+cC0u92tkE50Pei5SD3MJcT55l/c9VyIL4=
Subject key identifier: 54:3A:62:49:1C:B2:69:D4:A6:F6:31:CA:A4:11:B2:8D:4A:84:26:EB
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246D5D547A059B3E38E757ABF86595B
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/VDpiSRyyadSm9jHKpBGyjUqEJus.roa
Signing time: Mon 02 Jan 2023 11:38:42 +0000
ROA not before: Mon 02 Jan 2023 11:38:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45007
IP address blocks: 85.187.45.0/24 maxlen: 24
185.242.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d5:d5:47:a0:59:b3:e3:8e:75:7a:bf:86:59:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=543a62491cb269d4a6f631caa411b28d4a8426eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:b9:eb:87:aa:0e:d3:24:98:57:4e:d2:e1:
22:e6:0f:43:87:1c:6c:b7:c0:b0:49:64:19:45:07:
b8:67:f4:ed:79:7c:6d:a2:f2:18:1b:10:80:94:f0:
61:45:08:01:c3:7d:2d:a8:1f:84:2b:cf:4c:41:04:
3f:03:ac:8c:ae:f3:51:07:2f:1b:73:a9:a8:02:df:
a2:ac:dd:cd:39:8a:06:b9:cc:4b:be:5a:5e:b3:6b:
65:1b:9e:a5:3e:0a:c9:34:08:51:e2:fb:79:92:3c:
6f:2c:77:07:5e:01:1e:1b:3f:cd:58:4b:7c:2d:95:
0c:ed:9c:bb:e1:a9:cc:3d:2f:b5:47:ad:b3:ff:cd:
6a:64:c8:0c:4e:c2:4d:ef:e1:a6:a9:1b:2b:99:79:
7b:ac:09:64:b8:7b:65:ea:e1:a9:6a:1a:ed:ca:75:
d6:a2:4a:10:7d:f8:28:70:c5:25:22:e2:b6:f0:be:
e7:24:69:85:94:5e:ac:39:7e:43:00:69:0d:b8:64:
fd:9b:2f:01:50:26:cb:e2:29:7c:7c:2d:6b:c5:d9:
a2:ed:63:76:2b:2c:f3:1a:d1:2d:f0:42:46:a1:54:
42:c4:f7:ac:eb:26:60:47:f5:59:d8:ac:f9:14:8e:
01:c2:bd:d5:29:2e:24:2d:8e:4a:52:3e:6e:49:d2:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3A:62:49:1C:B2:69:D4:A6:F6:31:CA:A4:11:B2:8D:4A:84:26:EB
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/VDpiSRyyadSm9jHKpBGyjUqEJus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.45.0/24
185.242.171.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:1c:eb:93:ef:34:15:a6:31:2a:47:5b:e7:5d:78:80:6d:ed:
bc:fa:d2:07:58:5b:34:cd:44:d6:9c:b7:70:91:d1:39:25:0b:
e8:d3:d3:41:54:24:04:2b:91:ab:a5:1e:6f:80:a5:bb:4f:8e:
30:a4:16:12:0d:39:c7:98:d1:6e:de:73:92:fd:b9:22:21:fc:
78:6c:80:d3:41:7f:26:0c:40:c2:b8:0d:c4:2e:e9:07:dc:a5:
66:0a:6d:ca:6c:91:43:ce:37:48:97:fb:db:ab:6f:f0:09:db:
c8:16:15:75:57:49:65:b1:fc:f5:9c:85:0e:16:b9:1a:df:eb:
22:29:65:53:49:82:ee:47:56:25:ad:d8:a7:19:ed:d5:dc:7a:
00:83:cd:8c:7a:9c:25:87:4c:d7:5a:86:7d:57:45:12:41:ce:
e2:81:2f:43:f1:82:54:fa:45:9b:e7:e4:2a:2f:72:18:77:6e:
2a:35:3b:b4:43:b6:84:02:2b:7d:e0:7f:2d:b6:45:53:31:39:
f4:58:cb:70:c7:f4:fb:cf:82:23:e1:e3:4a:ed:f8:ed:a8:f1:
8e:a6:42:c6:67:1b:82:7b:a2:36:ad:11:99:7c:dd:58:d7:30:
c5:5d:ec:e1:ac:e5:97:01:9c:6b:9f:f7:c2:4e:c8:a2:ab:f9:
b7:97:da:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org