Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/VRmGGuT5jkjpGcr6RDPt-dYpkc0.roa
File: VRmGGuT5jkjpGcr6RDPt-dYpkc0.roa (raw, json)
Hash identifier: wUPiDHulhNipyRZsJLXWAF/3HKMceau1dqkM6hyar2s=
Subject key identifier: 55:19:86:1A:E4:F9:8E:48:E9:19:CA:FA:44:33:ED:F9:D6:29:91:CD
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 018C7B49D928B4EB0BC399CAFC3E6CE61E9C
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/VRmGGuT5jkjpGcr6RDPt-dYpkc0.roa
Signing time: Mon 18 Dec 2023 04:58:06 +0000
ROA not before: Mon 18 Dec 2023 04:58:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203939
IP address blocks: 185.125.184.0/22 maxlen: 22
2a06:bc40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:49:d9:28:b4:eb:0b:c3:99:ca:fc:3e:6c:e6:1e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Dec 18 04:58:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5519861ae4f98e48e919cafa4433edf9d62991cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:ff:f3:de:e6:64:43:0f:85:22:c5:f1:30:
1d:77:2e:bd:7f:fa:f1:b1:3a:2f:02:89:51:f5:23:
fc:f9:3b:08:e7:93:b3:a8:4c:ab:47:d3:bc:aa:4b:
bb:f8:b6:fe:e4:ec:d1:57:65:da:2a:46:71:b2:9a:
27:66:7c:37:98:05:e1:e2:76:38:f3:eb:35:f2:93:
bd:35:c6:31:2b:ea:78:e7:26:c0:6e:05:44:b2:3c:
e8:cf:51:7e:bf:e6:e4:15:2a:7f:53:8e:5f:98:19:
57:e3:15:5b:d9:30:ce:c4:ed:da:15:03:16:fd:83:
a8:c7:9b:d2:e9:51:eb:1a:76:14:3e:99:39:f4:cf:
8e:ff:f3:21:29:da:ec:c6:de:22:d8:08:7b:e5:f0:
4f:12:16:e3:ff:2d:fe:1c:a0:f4:f5:7a:e8:5f:2b:
a1:8f:b6:6f:c0:90:4e:bc:16:33:81:f6:03:7b:fd:
48:75:9f:cf:ab:81:d7:60:cd:61:37:13:c0:d2:bf:
6e:e0:a2:3b:a3:f0:68:7d:99:4f:88:d3:60:4a:cf:
71:bd:55:1b:75:0b:96:bb:aa:ad:cc:84:b3:b7:f4:
a5:26:e1:03:6f:13:d9:b8:cd:ab:5b:cd:2c:ce:e3:
9a:95:d0:4e:f7:b6:21:a9:91:65:63:ff:14:e4:26:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:19:86:1A:E4:F9:8E:48:E9:19:CA:FA:44:33:ED:F9:D6:29:91:CD
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/VRmGGuT5jkjpGcr6RDPt-dYpkc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.184.0/22
IPv6:
2a06:bc40::/29
Signature Algorithm: sha256WithRSAEncryption
5c:3d:e7:a1:ea:ff:32:d8:ae:ec:86:70:ff:1d:0d:7e:af:7c:
c5:ac:f4:ea:89:b9:e7:b8:62:98:1c:81:80:8b:2c:13:e2:62:
14:0d:06:c4:2f:68:7a:ac:e2:52:d0:2d:49:97:21:88:9d:aa:
57:51:1d:37:e8:d2:12:b8:52:a4:b5:d1:0f:18:ce:dd:39:74:
ba:00:11:86:31:63:14:f3:45:a0:67:e7:99:e5:d0:ff:29:16:
86:24:ec:03:f0:06:3e:b2:c2:fc:58:79:78:be:f3:74:7d:95:
cc:6f:4a:23:f0:08:3e:c0:63:8b:4f:9e:a2:f3:8e:67:d2:5b:
81:5f:59:f4:72:de:0d:20:91:8c:54:69:dd:26:17:2f:ec:e5:
13:53:1f:c4:cf:65:41:02:cf:39:e5:87:c1:c9:7c:9f:f2:7e:
d7:4a:90:a3:15:6d:af:a4:04:59:fe:e0:b0:28:66:55:ed:64:
81:75:65:69:ad:7a:4d:12:93:a4:a8:e5:d9:82:42:d9:8a:d8:
c1:9e:13:ca:1b:53:41:95:c5:c0:57:fe:9e:08:cd:e3:e0:a6:
6b:9c:5d:00:5e:30:c5:74:26:cd:5d:f5:c8:7d:d8:35:ab:b0:
95:95:0b:55:85:72:e6:38:15:0e:cb:98:b6:9f:2a:25:2d:50:
9a:47:7b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:16 2024 by rpki-client on console-fra.rpki-client.org