Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/rVVUFo8kwlEdtFoBLhgB5YzjVks.roa
File: rVVUFo8kwlEdtFoBLhgB5YzjVks.roa (raw, json)
Hash identifier: U9L8HRLWlHnUmaSCLwUJgAvyNR19MpmarX+n6JR4cZU=
Subject key identifier: AD:55:54:16:8F:24:C2:51:1D:B4:5A:01:2E:18:01:E5:8C:E3:56:4B
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01856C812B0606685A0A123C6FA0BA7CE8C2
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/rVVUFo8kwlEdtFoBLhgB5YzjVks.roa
Signing time: Sun 01 Jan 2023 08:44:42 +0000
ROA not before: Sun 01 Jan 2023 08:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39122
IP address blocks: 185.94.44.0/24 maxlen: 24
185.94.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:2b:06:06:68:5a:0a:12:3c:6f:a0:ba:7c:e8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Jan 1 08:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad5554168f24c2511db45a012e1801e58ce3564b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:79:25:d2:37:fd:8a:c2:41:7c:70:da:4e:
64:e0:ef:88:18:23:6b:19:da:1e:4d:67:64:7f:d8:
8b:e3:81:9b:9a:4b:40:7a:8e:6b:a0:80:b0:87:da:
fe:f7:c6:7e:25:3f:81:0f:ba:c6:11:f7:b1:c0:03:
d9:c3:e6:35:04:7f:88:ea:52:d4:a3:39:7a:98:6a:
a9:c6:48:0c:3c:a3:02:a6:73:3d:db:59:27:68:ac:
bf:7b:8f:3b:9d:c7:d7:d7:2f:0b:e8:0d:59:47:4c:
2e:fe:55:fc:78:66:ee:8d:30:cb:32:ec:99:e7:90:
8f:c1:61:92:f0:45:97:18:a9:9f:b7:a5:a3:6f:9e:
8e:c9:30:64:24:da:d4:26:5d:64:b8:2a:39:7c:43:
4f:bf:9c:c8:84:78:c0:1b:9d:d5:d1:d7:58:06:e7:
e6:44:bf:39:49:3e:43:d9:44:06:84:34:b3:0d:cd:
4c:6a:06:5a:8c:3d:b7:22:3b:00:34:24:f7:3a:47:
91:b4:b0:ce:3a:06:bb:bd:b9:58:ac:b2:1d:4f:6d:
5c:17:13:dd:37:c2:b3:0e:a4:da:6d:2f:7a:f2:40:
d6:8a:b5:6e:c2:66:58:bc:a2:fe:cc:56:2c:55:55:
68:98:32:31:80:fa:9e:5b:e6:db:d7:60:de:7a:cb:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:54:16:8F:24:C2:51:1D:B4:5A:01:2E:18:01:E5:8C:E3:56:4B
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/rVVUFo8kwlEdtFoBLhgB5YzjVks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.44.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:fa:0a:3f:1a:2b:f5:c4:a0:0d:30:77:19:27:4a:1b:02:62:
47:30:1e:c8:4a:1f:4e:c7:b6:a0:1f:11:d1:e8:fb:0e:c7:d4:
23:41:87:4f:68:c5:19:35:8a:87:9b:0c:a0:4f:c0:b2:c7:cd:
4c:65:65:3f:61:08:d5:54:ee:50:aa:9a:98:b7:29:18:d0:ae:
ee:b2:fb:6f:61:26:1e:46:c5:d4:ba:96:ab:34:9f:f1:94:74:
28:c2:c0:27:5c:44:97:e7:62:4b:81:0d:aa:3d:01:91:ce:c8:
9a:4a:c2:5a:93:41:ab:44:77:b3:71:be:91:ed:f4:b4:7b:ce:
19:aa:7c:50:26:20:2c:96:24:a5:30:76:0c:15:33:ac:81:50:
74:b5:82:be:e0:9e:61:eb:62:34:ff:c8:c9:ce:71:20:0e:09:
cb:7b:28:70:97:68:e1:b8:7d:9b:13:26:d0:06:dd:6c:9c:94:
8d:7f:ac:8d:3e:67:26:9a:6f:4e:1c:20:05:f8:33:c5:3c:4c:
57:b2:61:5d:17:fe:b5:c2:c5:ff:20:12:6b:c6:87:b5:9c:fa:
e7:76:46:a2:47:cd:bd:d7:e4:1a:50:9e:53:fa:c6:f2:62:f3:
93:7c:c2:3c:a7:51:2a:bd:33:bf:f7:00:14:49:6c:92:e7:a0:
08:ff:6f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:47 2024 by rpki-client on console-fra.rpki-client.org