Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/vXN3L4OYV0zqjrA8Y5oXBzUtY70.roa
File: vXN3L4OYV0zqjrA8Y5oXBzUtY70.roa (raw, json)
Hash identifier: F/N5qrQPvJEtU5YTA2aP8K1bxrCZmQUPBbz3crFDCwg=
Subject key identifier: BD:73:77:2F:83:98:57:4C:EA:8E:B0:3C:63:9A:17:07:35:2D:63:BD
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 01856C1C9AD99AFC463D32D26416D10B1826
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/vXN3L4OYV0zqjrA8Y5oXBzUtY70.roa
Signing time: Sun 01 Jan 2023 06:54:51 +0000
ROA not before: Sun 01 Jan 2023 06:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204567
IP address blocks: 185.175.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:9a:d9:9a:fc:46:3d:32:d2:64:16:d1:0b:18:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Jan 1 06:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd73772f8398574cea8eb03c639a1707352d63bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:46:ab:5e:49:da:3e:fe:c2:e5:95:db:aa:c5:
ee:fd:eb:60:51:a5:33:bc:a9:22:bb:ae:dc:15:a1:
c7:7e:f0:cc:00:b6:c2:e0:12:dd:b5:f1:18:a1:ca:
21:f1:10:25:3f:5c:56:43:05:1e:de:c3:4f:f5:82:
31:82:66:7b:73:a7:76:11:05:17:c7:e4:9f:a8:67:
58:86:f5:5d:ca:66:f8:73:5a:7b:fb:88:46:f3:3c:
cf:4a:5a:e6:7d:29:bf:69:73:d8:ba:ee:0d:60:33:
23:e0:26:2f:dc:e8:11:da:de:f4:96:d6:eb:79:1d:
41:07:13:80:ab:c5:a2:1f:cc:e2:53:ed:bf:02:9b:
e5:79:22:cf:58:c5:ce:ae:60:87:e1:cd:75:74:69:
06:d2:a2:73:2d:60:d3:25:f9:b2:8c:27:54:17:81:
72:80:9a:78:e2:89:2c:db:1a:ae:0a:45:6f:8b:3b:
3f:27:ce:52:95:5f:13:d6:fc:f0:8b:b0:15:7e:d4:
02:fc:a2:09:45:bb:d3:77:7e:70:9c:d4:34:f5:c5:
05:72:11:af:08:5f:34:7e:52:2c:02:9e:fa:9e:49:
c6:3e:f9:85:1c:68:ed:ab:78:f9:ca:78:9f:16:73:
08:c2:f6:61:6d:76:f9:7f:fb:07:5e:64:0e:c6:80:
8e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:73:77:2F:83:98:57:4C:EA:8E:B0:3C:63:9A:17:07:35:2D:63:BD
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/vXN3L4OYV0zqjrA8Y5oXBzUtY70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.220.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:03:5e:bb:4e:c3:9e:c0:5e:70:e5:76:d6:4e:90:89:b1:23:
49:68:e9:99:c4:2c:fb:c6:6f:2f:0a:a6:b6:25:d1:73:d0:0d:
06:fb:6a:2c:72:78:04:a0:24:8d:b7:ef:d5:bc:69:dc:39:16:
ac:c7:7d:8f:10:73:94:5f:e2:d8:7d:fe:5a:f1:83:65:2c:a6:
9a:cf:93:7e:af:10:d0:fc:ea:55:d8:4a:e0:16:0b:cb:90:f3:
91:91:8d:74:04:6e:48:c0:d4:9b:10:1d:97:3a:8c:68:01:be:
ae:2d:40:00:61:d6:d8:da:be:f3:d9:16:86:cf:02:12:be:f3:
5e:e3:71:39:1c:7b:a2:68:6d:66:77:93:fa:68:b5:b7:fa:71:
2a:95:e2:4f:47:ae:f8:5e:ff:32:07:0d:7a:eb:17:14:24:0f:
9d:52:8b:bb:bf:44:e2:e2:db:81:4d:39:12:dc:d4:08:76:7d:
f7:0c:63:74:e8:13:27:6b:9e:85:84:ed:37:41:97:b9:17:b1:
9c:c1:fc:fa:d4:24:95:2e:cd:29:35:39:40:f5:ad:6f:6c:8d:
2f:2f:77:49:77:30:8b:d7:ad:02:cb:3c:da:8a:00:2d:33:f9:
99:6f:cc:5e:3f:a4:2a:1d:4d:98:7d:17:14:cc:13:9a:b1:6c:
bb:91:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:34 2024 by rpki-client on console-fra.rpki-client.org