Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/vPcLKNLCAJNNpbXZUwnkUTv1IRE.roa
File: vPcLKNLCAJNNpbXZUwnkUTv1IRE.roa (raw, json)
Hash identifier: YnWguzE3QKZNsZuqLFgVC6rsDxBVszI4V71f1N1jtyY=
Subject key identifier: BC:F7:0B:28:D2:C2:00:93:4D:A5:B5:D9:53:09:E4:51:3B:F5:21:11
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 01856DC1AF357A391EBAECF5A0F9137BB517
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/vPcLKNLCAJNNpbXZUwnkUTv1IRE.roa
Signing time: Sun 01 Jan 2023 14:34:47 +0000
ROA not before: Sun 01 Jan 2023 14:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62282
IP address blocks: 185.140.231.0/24 maxlen: 24
185.140.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:af:35:7a:39:1e:ba:ec:f5:a0:f9:13:7b:b5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Jan 1 14:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcf70b28d2c200934da5b5d95309e4513bf52111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e6:54:e6:46:36:ca:8d:85:ae:cc:16:19:25:
f6:5a:4c:a3:bd:84:4d:d7:d1:1c:8e:04:9f:d6:43:
21:ff:d4:c9:de:8e:fd:cd:6f:a2:68:a6:51:19:55:
25:97:dc:71:6f:6c:9c:ed:2c:80:ca:12:46:a9:f5:
6d:4a:d6:7c:b6:50:5b:01:9c:7f:3c:9e:e4:ea:a0:
20:66:7c:a6:c6:69:05:fb:b8:68:04:ac:23:51:34:
3c:32:ce:dd:63:5d:83:ac:68:20:71:9c:e1:f9:3a:
8e:20:42:bf:14:bd:a0:57:8f:d3:11:d6:99:aa:99:
c9:17:4c:1b:f8:31:28:c3:f9:ea:64:58:e9:a2:82:
3e:6a:93:71:67:fb:9f:c8:8a:2e:e1:c7:b8:61:42:
bc:92:be:d6:f1:33:0f:68:8e:33:b9:9a:a6:9b:cf:
81:81:d9:28:f3:6b:08:c7:8d:f0:d2:76:2a:0f:46:
c4:12:e5:47:97:49:f5:a6:93:52:ec:c4:87:4e:a4:
e4:25:b2:9a:9f:ab:5b:bc:a9:90:7c:4b:62:6d:5a:
67:3e:7c:3f:c9:a7:51:e9:cb:d1:bd:77:04:d6:e1:
ca:0e:10:27:c1:e0:98:3c:12:9d:e2:4e:68:8d:57:
85:c1:18:91:52:4a:28:b2:23:4d:a4:d3:7d:0f:fe:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F7:0B:28:D2:C2:00:93:4D:A5:B5:D9:53:09:E4:51:3B:F5:21:11
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/vPcLKNLCAJNNpbXZUwnkUTv1IRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.230.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:86:d4:c4:56:a3:b0:b8:c1:20:10:08:11:1f:f3:9e:45:61:
54:98:30:2a:cd:91:37:8f:00:0c:65:45:8c:ac:bd:bd:b7:6d:
6d:1b:d4:51:fe:3e:0e:e5:d6:2c:ff:14:a8:64:a7:ae:53:86:
e5:1b:d9:4f:64:dd:61:10:14:4e:57:47:5e:7c:cc:eb:0f:0a:
94:26:79:9f:c4:85:09:cf:bd:4d:26:ee:61:85:d2:43:26:cd:
4b:e8:ae:0c:aa:27:c6:1b:7c:a0:dc:f9:18:06:e1:ee:09:b8:
22:95:e2:e0:04:62:09:f2:0b:05:6c:e9:77:aa:33:bd:50:3c:
13:0b:b0:1b:dc:80:60:42:7f:5b:7e:ad:ba:a1:e9:23:c3:fe:
18:94:e6:54:12:d3:45:b2:6f:14:00:e3:a3:a1:48:fb:47:24:
0b:91:77:bc:2a:0e:fe:86:9d:cf:79:1f:18:5d:30:bb:01:c6:
35:16:a1:b3:6e:38:65:8d:7b:62:a2:96:69:c3:75:d4:92:83:
28:b9:79:72:9f:0e:2d:0e:a9:0b:bb:1a:f6:1c:65:96:fc:d1:
53:ee:15:93:74:e6:35:45:f3:0a:f8:f1:ff:bb:ad:d6:6c:21:
ac:b7:9d:fa:b9:02:a2:c6:d8:ac:71:b8:04:35:09:a4:17:9e:
43:38:b1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:54 2024 by rpki-client on console-fra.rpki-client.org