Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/vsCrFdMRLkLRl7tG153R66yx5VI.roa
File: vsCrFdMRLkLRl7tG153R66yx5VI.roa (raw, json)
Hash identifier: iycdeRGMc0kHheYymdQIps6K2Rfu3KdChen+zAmOX4U=
Subject key identifier: BE:C0:AB:15:D3:11:2E:42:D1:97:BB:46:D7:9D:D1:EB:AC:B1:E5:52
Certificate issuer: /CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
Certificate serial: 018C3EA917E9C8C0FCF1C55A4D6AF0C50A17
Authority key identifier: 07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/vsCrFdMRLkLRl7tG153R66yx5VI.roa
Signing time: Wed 06 Dec 2023 10:25:18 +0000
ROA not before: Wed 06 Dec 2023 10:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39405
IP address blocks: 185.246.25.0/24 maxlen: 24
185.224.35.0/24 maxlen: 24
185.224.34.0/24 maxlen: 24
185.224.33.0/24 maxlen: 24
185.224.32.0/24 maxlen: 24
185.246.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:a9:17:e9:c8:c0:fc:f1:c5:5a:4d:6a:f0:c5:0a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
Validity
Not Before: Dec 6 10:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bec0ab15d3112e42d197bb46d79dd1ebacb1e552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:65:03:ae:17:13:56:97:31:89:c9:70:89:b5:
d9:d0:0d:d0:22:29:e1:4c:09:a5:ef:e2:60:f4:b0:
1f:ec:02:cc:de:00:68:65:20:18:4b:24:21:af:48:
d8:ff:94:e7:be:69:bf:65:c3:ca:7e:3a:e5:87:ea:
a3:7c:74:eb:1c:47:22:16:9c:4d:4c:9c:9d:11:48:
f3:ec:9e:4f:35:4f:cd:d4:34:c6:85:e1:0f:25:8e:
b5:41:9e:18:37:33:c9:ff:30:ed:d5:44:1d:4a:b2:
0e:1f:91:c2:25:03:79:83:64:ec:a9:62:3d:09:b2:
19:26:56:6a:6b:af:d8:0c:96:11:b9:37:5f:06:4b:
f1:7b:1c:85:cf:81:d2:83:9b:50:c5:e2:30:48:ed:
72:f0:bb:6f:11:a1:a6:88:31:69:7e:ae:57:c6:b9:
eb:82:80:eb:21:d8:ba:91:4a:b3:b2:2d:7b:cb:72:
da:2d:e7:de:c4:d0:7d:bf:97:a6:ba:5d:02:8b:10:
d4:00:fd:19:d2:1e:3e:5f:f2:46:8d:29:0f:e7:92:
c0:54:22:d0:cd:52:f2:dc:89:ff:4c:de:24:58:a7:
df:70:3a:7f:ac:1c:23:e4:24:19:c9:7b:47:a9:22:
ba:76:76:9f:a5:79:53:aa:ec:31:51:63:5c:47:a4:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C0:AB:15:D3:11:2E:42:D1:97:BB:46:D7:9D:D1:EB:AC:B1:E5:52
X509v3 Authority Key Identifier:
keyid:07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/vsCrFdMRLkLRl7tG153R66yx5VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.32.0/22
185.246.24.0/23
Signature Algorithm: sha256WithRSAEncryption
67:48:23:53:49:c5:67:26:97:b2:5c:5d:9d:b7:74:65:91:ce:
b8:ec:37:64:25:8c:d5:72:10:40:dc:bc:02:25:10:a4:e1:72:
8a:6f:8d:d0:09:03:32:7f:e7:e0:a4:54:38:0c:27:5c:95:64:
92:f1:76:d1:16:05:58:29:99:53:b0:9b:bb:9b:5e:11:c3:11:
4e:79:5b:db:16:58:4c:fd:6a:8b:4b:a5:b2:ae:bb:91:61:e2:
7b:82:f1:b6:71:11:37:b1:b6:b9:e8:9d:b0:35:da:1d:0e:7f:
a5:33:31:97:cb:7e:d4:03:d6:e2:56:95:e9:8f:30:96:c1:2c:
da:39:84:15:6d:34:3b:8e:04:0e:59:71:c6:87:18:03:82:9e:
b0:dd:5d:4c:51:a0:2d:95:e4:44:d6:b0:8d:76:14:a4:f7:73:
e5:ed:81:71:56:eb:1d:a0:4c:05:f2:9f:6d:50:31:b7:8d:37:
74:9b:e7:78:f1:d9:82:37:b1:2d:ca:5c:fd:2a:f7:5c:fb:2e:
01:d3:b7:35:a8:22:96:42:f6:f2:08:da:5c:f8:be:cb:b1:ef:
ba:c8:44:36:67:13:15:82:48:dd:41:5f:66:7f:bf:83:50:5b:
d7:20:0a:45:5a:66:9c:7f:2c:57:fc:4a:99:53:e0:8f:e8:66:
f5:14:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:33 2024 by rpki-client on console-fra.rpki-client.org