Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vmijADK4xX6UMm-EYEBr0IdPTIk.roa
File: vmijADK4xX6UMm-EYEBr0IdPTIk.roa (raw, json)
Hash identifier: mgjSHmLKNWnU3Ft6jd8im53zdTI296BFa66DK8HxYQI=
Subject key identifier: BE:68:A3:00:32:B8:C5:7E:94:32:6F:84:60:40:6B:D0:87:4F:4C:89
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B1E1E2C926DE53230A2B2CC0336B426A6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vmijADK4xX6UMm-EYEBr0IdPTIk.roa
Signing time: Wed 11 Oct 2023 09:42:55 +0000
ROA not before: Wed 11 Oct 2023 09:42:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208949
IP address blocks: 185.222.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Dec 2023 09:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:1e:2c:92:6d:e5:32:30:a2:b2:cc:03:36:b4:26:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 11 09:42:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be68a30032b8c57e94326f8460406bd0874f4c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:7f:f3:c0:cf:39:b3:6f:b8:aa:5b:d3:40:
f3:6e:da:50:bb:31:c9:c6:0f:af:21:ad:04:89:2b:
9e:06:eb:ba:8b:5e:5f:bf:04:5b:10:8d:66:66:94:
47:67:a4:8e:26:9c:76:a7:c7:23:79:bb:e8:73:e8:
f9:f2:3f:2f:58:ba:97:80:c4:84:12:d6:6e:62:5e:
7e:4c:16:03:b2:81:aa:18:c3:60:99:cb:28:05:b2:
cf:9e:af:15:49:55:ae:04:18:4f:d1:ea:e7:f2:13:
d5:ec:3c:39:14:48:8a:49:a8:a6:ef:d2:be:77:d9:
6a:6e:98:cd:42:72:9f:3c:11:6c:88:bb:02:4b:e0:
de:53:51:86:cc:6c:e6:b5:e9:06:1b:d7:81:0e:10:
bc:68:7a:26:bb:71:c3:cd:dd:75:6f:38:5b:19:51:
79:86:05:10:76:b2:a1:64:af:e2:b9:04:fd:2a:f6:
b2:b9:d9:a3:77:13:5e:f0:23:bd:c6:0c:9e:9e:39:
d6:8f:d7:70:fd:29:0d:72:ee:c0:e9:c0:f3:69:d3:
7a:f1:c6:5e:22:72:49:a1:74:d1:f4:23:d8:0c:f4:
51:ef:df:24:1d:de:64:2b:14:a2:99:88:62:50:75:
82:c4:c4:52:8d:76:64:47:2a:4c:8d:0c:73:73:35:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:68:A3:00:32:B8:C5:7E:94:32:6F:84:60:40:6B:D0:87:4F:4C:89
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vmijADK4xX6UMm-EYEBr0IdPTIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:13:79:d7:3f:1b:ab:78:d6:70:89:07:96:ed:35:41:1f:d9:
a2:3d:6e:19:37:ed:94:88:32:d9:d7:a2:e7:96:af:69:25:76:
17:3f:6d:36:6f:69:6b:b0:9c:de:4a:09:82:00:4a:3e:84:70:
ea:13:bf:84:66:25:a0:b3:f1:96:4d:d1:2f:94:0f:06:01:c8:
5f:a1:31:57:0d:4d:51:0b:b1:08:46:e7:5b:54:66:9f:7b:4d:
e0:ca:02:24:ce:e1:d4:08:82:e9:e0:5b:0f:3a:35:fd:7a:ef:
66:96:f2:0c:74:99:54:2a:91:26:53:e4:17:47:4a:b2:fe:fd:
ee:57:18:7c:2d:55:49:e0:0c:b9:a8:5c:0d:c3:16:d4:e5:39:
6c:1c:91:10:f6:0d:a2:16:2e:81:58:79:61:30:bc:ef:05:79:
e7:29:03:41:df:67:13:a2:a7:05:73:24:f3:dd:04:c7:f5:e7:
88:ff:30:cc:cf:29:c8:be:5e:88:e8:74:ad:7a:e4:27:46:68:
e7:97:32:12:72:6d:c1:fa:76:f1:ee:86:04:a9:11:1e:df:d7:
7f:b5:d2:a3:d3:2f:e4:e9:83:6a:d8:77:77:e7:8c:c6:fc:50:
c7:8f:30:da:7d:75:e9:61:5b:f7:f8:77:5a:79:71:f2:78:0d:
fb:af:f0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org