Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/VOxVvty3YuO9S09xtIfBBtoZ9Xk.roa
File: VOxVvty3YuO9S09xtIfBBtoZ9Xk.roa (raw, json)
Hash identifier: G3eCCmcuSwE2zZKBkQy7imVszcxbsNIujyX69hYTyxg=
Subject key identifier: 54:EC:55:BE:DC:B7:62:E3:BD:4B:4F:71:B4:87:C1:06:DA:19:F5:79
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 018A9863C615893C77E7D38BD61176C054FC
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/VOxVvty3YuO9S09xtIfBBtoZ9Xk.roa
Signing time: Fri 15 Sep 2023 10:29:50 +0000
ROA not before: Fri 15 Sep 2023 10:29:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61079
IP address blocks: 185.19.164.0/23 maxlen: 24
185.19.166.0/23 maxlen: 24
2a04:1240::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:63:c6:15:89:3c:77:e7:d3:8b:d6:11:76:c0:54:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Sep 15 10:29:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54ec55bedcb762e3bd4b4f71b487c106da19f579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:a3:5f:1d:ee:a0:69:5b:69:58:1e:da:88:
4c:73:98:f8:d9:3f:74:a5:50:f6:26:ef:b0:6a:0d:
80:8d:c1:b6:9e:0d:16:f7:75:45:a4:5b:b1:aa:16:
05:01:34:31:88:c3:b7:b7:2f:5b:fe:c8:de:0a:73:
67:1e:c4:56:9b:68:aa:08:a9:a1:bd:4b:95:e2:91:
04:fa:27:a9:65:dd:63:2b:a3:c7:fc:2c:4c:1f:d6:
06:d5:82:91:50:b1:34:c1:5a:8f:35:0f:6d:4e:3b:
c9:02:11:4b:db:c7:10:9d:49:3b:46:83:9d:73:f4:
d5:d7:08:68:27:16:d1:96:03:b8:45:cd:8d:56:c2:
fe:61:c8:2f:aa:1e:8e:0d:84:25:ff:45:cc:cc:c7:
88:67:af:e5:e7:a5:7f:c0:ef:d8:8e:c7:67:72:32:
bc:57:d8:b1:a5:23:2f:a8:a5:5c:d5:cd:14:cc:27:
07:16:87:14:71:7d:18:98:18:30:5c:f2:e3:90:4f:
c4:de:62:4d:a1:95:9b:20:b2:fe:76:27:5c:43:00:
eb:84:0b:46:5b:11:28:43:69:bd:a9:08:a9:85:bc:
e4:8a:cc:5b:b0:12:af:76:ff:14:63:8f:df:3f:94:
bc:c6:2e:00:6d:38:d3:e5:54:78:f9:91:f8:49:44:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EC:55:BE:DC:B7:62:E3:BD:4B:4F:71:B4:87:C1:06:DA:19:F5:79
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/VOxVvty3YuO9S09xtIfBBtoZ9Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.164.0/22
IPv6:
2a04:1240::/29
Signature Algorithm: sha256WithRSAEncryption
ca:4a:97:3a:b3:5a:ac:93:21:cd:c9:6d:70:78:f5:9d:41:4d:
d0:62:86:29:76:b7:97:bb:15:80:08:d9:6a:bb:4e:8b:45:ed:
99:78:a7:af:72:d7:22:7b:3e:1b:ae:92:27:d5:6c:e5:f4:5d:
20:6c:10:b1:3a:ab:b5:69:8a:6f:81:ab:48:89:2e:3f:51:d8:
1b:2e:f8:41:4b:b4:ad:85:20:4e:c4:4a:4e:57:7a:02:ad:d2:
a5:bc:ec:13:f2:2a:65:0f:ad:06:0e:ae:15:77:0f:78:60:03:
6d:22:fb:cb:8d:90:ef:56:9f:b8:ec:83:fa:49:af:38:2f:e7:
7e:bc:87:63:04:4c:26:a8:27:7f:8c:98:a4:7d:c1:04:d4:58:
d1:b6:af:26:92:a0:b1:3e:2f:c4:d9:ff:f0:79:34:35:b5:18:
b1:89:a9:6d:62:00:69:4f:88:44:1c:e0:c2:6b:c1:63:ef:1b:
c3:f8:0b:1a:ab:06:f3:5e:3e:b7:85:56:90:09:2c:c9:ed:18:
1f:b3:55:cd:a2:ff:bd:99:51:96:39:9f:2a:73:25:9e:15:15:
ec:e0:3f:c1:f1:b7:2d:76:a3:79:84:30:05:f5:f2:6d:e0:10:
a3:b2:3f:be:85:10:e8:19:7a:be:e3:f2:d6:80:ec:b3:2f:d6:
0a:a3:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:21 2024 by rpki-client on console-fra.rpki-client.org