Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/vZjOpGyTAEJzo6FlyQPUMjDCRk8.roa
File: vZjOpGyTAEJzo6FlyQPUMjDCRk8.roa (raw, json)
Hash identifier: NEY7DdrtJFisnWkJerrCzZ0iTGNY/NmuphQqQqyfmoQ=
Subject key identifier: BD:98:CE:A4:6C:93:00:42:73:A3:A1:65:C9:03:D4:32:30:C2:46:4F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018C0A694A736783D8D830699B07BC87D3F3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/vZjOpGyTAEJzo6FlyQPUMjDCRk8.roa
Signing time: Sun 26 Nov 2023 06:55:21 +0000
ROA not before: Sun 26 Nov 2023 06:55:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 131477
IP address blocks: 185.188.5.0/24 maxlen: 32
185.255.152.0/23 maxlen: 32
185.255.153.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:69:4a:73:67:83:d8:d8:30:69:9b:07:bc:87:d3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Nov 26 06:55:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd98cea46c93004273a3a165c903d43230c2464f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:35:5a:e6:07:c0:8d:bf:e3:6e:43:94:69:
63:8e:5e:0f:91:29:f8:85:28:33:e5:a2:69:ea:bd:
9d:ac:58:58:2d:01:7a:6a:dd:3f:97:9b:d6:a1:77:
1f:f3:6b:01:89:52:c4:a0:70:b1:ba:7c:84:48:cc:
1e:e4:ab:8a:fe:2d:c4:5e:fa:87:d9:7b:27:d7:f7:
5d:0a:6e:d4:e3:ba:fb:08:b9:47:92:7a:66:41:f8:
f4:a2:01:87:a8:1b:c8:7e:f7:ac:cf:a2:dd:51:18:
e4:85:12:7d:f7:61:65:c2:ea:2b:f8:f2:f3:e1:16:
b9:3c:3c:b6:5d:9d:57:c5:5a:0b:7b:80:78:9d:56:
b5:2a:7d:4e:4d:fa:d0:5a:0e:8d:88:93:95:a4:93:
f3:ea:9f:97:48:b0:da:c1:79:23:3b:b5:25:70:13:
97:ba:73:97:ba:6d:28:4a:d2:08:0f:34:3d:d2:74:
17:70:6d:2a:80:84:ed:27:c5:0d:b7:8d:53:9e:2f:
7f:b4:15:2f:19:8b:2b:7b:d4:2b:e9:5b:90:1b:69:
6a:65:cf:56:4c:cf:91:b2:d5:72:48:b1:4d:1f:58:
dd:1f:f1:b0:a6:a4:aa:62:bc:9c:a7:29:e0:1e:57:
a0:80:14:e6:34:9b:37:03:68:de:fb:69:a5:69:b4:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:98:CE:A4:6C:93:00:42:73:A3:A1:65:C9:03:D4:32:30:C2:46:4F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/vZjOpGyTAEJzo6FlyQPUMjDCRk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.5.0/24
185.255.152.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:ed:6f:40:85:8b:d4:9c:6b:dd:7c:eb:ae:e4:9a:f0:6f:cc:
8c:cd:39:30:65:e1:02:ce:73:04:1d:16:98:fc:4c:b2:aa:c9:
cd:0c:de:eb:2f:67:1c:e0:5a:10:61:52:46:14:b3:61:ff:f8:
82:b1:68:7f:24:7c:b6:90:ba:c2:5b:c4:d9:41:f8:40:86:28:
91:42:15:f8:b7:af:85:07:b2:b1:49:fc:90:70:e9:1e:a0:ee:
cc:a4:0d:58:3a:75:e4:10:bf:1e:93:b1:8c:5a:7c:c8:17:1a:
50:06:be:15:54:d3:69:41:7d:79:ca:08:cd:67:1f:34:12:03:
c4:ee:d6:3d:6a:41:53:9c:b3:3d:06:b8:bb:0a:fa:7f:d4:d3:
43:cc:28:e4:8b:1b:64:1d:69:58:33:d9:78:8b:20:72:54:17:
9a:72:c8:c2:64:64:e4:32:51:bf:44:39:02:c7:a4:97:b1:af:
30:d0:37:22:c2:72:87:3d:8b:c0:3b:44:64:c5:be:4a:a0:25:
8b:e9:a9:36:9e:44:c8:04:a6:73:b3:ad:a7:99:39:db:48:38:
66:82:ef:b6:e0:62:15:0f:4e:c9:f1:65:9a:5a:69:20:1b:15:
ec:51:da:bf:fb:e1:ac:e7:a6:1c:f2:41:eb:15:95:75:58:29:
d4:27:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org