Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/VeJOXTWgPkCMG6Batg9ljPW1Uyw.roa
File: VeJOXTWgPkCMG6Batg9ljPW1Uyw.roa (raw, json)
Hash identifier: MgVERZrtokKpamKCJXIuef6VtJgwwDEldJjs3toqdH0=
Subject key identifier: 55:E2:4E:5D:35:A0:3E:40:8C:1B:A0:5A:B6:0F:65:8C:F5:B5:53:2C
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 018571FA1FB4DC5CF418CEAE02EF35803E5C
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/VeJOXTWgPkCMG6Batg9ljPW1Uyw.roa
Signing time: Mon 02 Jan 2023 10:14:55 +0000
ROA not before: Mon 02 Jan 2023 10:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210539
IP address blocks: 185.162.90.0/24 maxlen: 24
185.170.128.0/24 maxlen: 24
185.170.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:1f:b4:dc:5c:f4:18:ce:ae:02:ef:35:80:3e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 2 10:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55e24e5d35a03e408c1ba05ab60f658cf5b5532c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:24:79:0e:73:16:19:99:13:d0:eb:55:09:
f5:f6:ec:7f:f6:1a:c0:5b:17:64:63:c3:a3:77:4a:
9f:c9:f7:34:4f:78:f7:e8:dd:16:67:d7:17:ff:ad:
7c:cb:b5:7b:0c:e4:b7:dc:30:03:5a:52:32:13:18:
27:8c:2e:15:dd:5f:2d:11:ed:dd:94:18:45:86:64:
12:90:e1:31:f8:a5:e4:c1:f6:ca:8d:5f:79:f2:b4:
5a:96:9b:2e:06:16:8f:f5:2e:88:5a:9b:62:14:71:
95:3c:fb:85:d2:78:ff:ec:63:f0:76:8f:1f:01:76:
ad:1a:08:8b:7d:f4:a3:26:eb:f3:5b:ed:a5:ad:58:
3f:97:71:ac:15:6b:f1:e2:f7:8c:a0:64:cd:91:b1:
5f:ac:3f:bf:e0:87:14:c8:e9:3d:26:a8:bb:69:b7:
83:50:a8:a6:24:00:92:c3:d4:ba:13:cd:f5:d2:37:
3b:6f:73:ad:cc:b9:01:58:c2:e1:71:f4:15:17:43:
af:30:31:45:1b:6a:41:da:f4:79:e5:a6:37:56:c1:
97:f1:de:95:3e:52:26:74:e6:53:a1:c7:2b:d8:57:
84:e1:38:27:4e:ef:6e:0e:20:0b:07:cb:a8:7c:69:
7d:d8:9e:5c:8b:65:49:60:3f:2a:f1:7c:8f:2b:59:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E2:4E:5D:35:A0:3E:40:8C:1B:A0:5A:B6:0F:65:8C:F5:B5:53:2C
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/VeJOXTWgPkCMG6Batg9ljPW1Uyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.90.0/24
185.170.128.0/24
185.170.130.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2e:fb:40:ff:88:83:95:20:2c:8b:8e:3d:de:bc:eb:d8:32:
cc:85:d6:6a:37:61:97:6f:9a:ee:12:2f:8f:8d:a9:42:3a:11:
10:2e:a0:97:e5:77:38:ed:7d:6f:65:75:f1:c5:27:dc:33:c6:
9d:7e:4d:ac:a6:47:a1:80:00:d6:93:66:70:87:dd:64:ac:d8:
94:d8:41:eb:4d:0b:f4:e0:6f:4d:5e:2f:93:1c:46:41:2b:cd:
1e:14:5b:3e:9a:0c:04:ea:9a:1a:1d:ad:e5:37:6d:05:48:4f:
3d:bd:84:90:c4:92:5a:8c:6f:ea:45:19:f6:4b:d7:83:9f:c7:
24:35:77:ac:e9:7e:fe:94:e6:f6:2b:96:ec:8a:58:0f:94:1e:
b5:c2:7b:ae:15:d7:58:51:bf:06:b2:b3:11:6c:e4:25:0d:4d:
03:eb:23:82:42:00:93:17:43:50:e0:0f:d0:c4:f7:6f:7a:03:
4d:b3:04:78:a1:88:51:91:f7:33:6b:01:28:f1:7c:44:54:3d:
75:3a:88:08:3a:28:b2:1d:7e:9d:78:b0:4f:ef:27:bb:17:f3:
d4:64:50:b7:d9:6d:e0:b7:ce:33:c4:b0:59:35:97:77:6f:a5:
1b:29:3a:e2:91:a4:7d:f3:21:fa:2f:29:da:82:d4:0a:78:6c:
02:ae:27:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 07:43:41 2023 by rpki-client on console-ams.rpki-client.org