Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/vbv1znny0AZG_OxB4aLCvTOjiE0.roa
File: vbv1znny0AZG_OxB4aLCvTOjiE0.roa (raw, json)
Hash identifier: kSEkW83lAfbZlBG2BppzuZOH57aV63AAogt8wMbErHE=
Subject key identifier: BD:BB:F5:CE:79:F2:D0:06:46:FC:EC:41:E1:A2:C2:BD:33:A3:88:4D
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 0185720C7BE06544B6D87DB1ADB2025F0492
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/vbv1znny0AZG_OxB4aLCvTOjiE0.roa
Signing time: Mon 02 Jan 2023 10:34:58 +0000
ROA not before: Mon 02 Jan 2023 10:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47896
IP address blocks: 185.143.116.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:7b:e0:65:44:b6:d8:7d:b1:ad:b2:02:5f:04:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Jan 2 10:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdbbf5ce79f2d00646fcec41e1a2c2bd33a3884d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:6e:28:13:f8:da:c6:7f:1b:05:25:48:a9:
fd:6c:3c:b5:2b:fa:43:6c:35:67:de:5a:56:76:7d:
b5:01:09:90:96:b0:84:55:47:3d:73:85:97:40:fe:
70:f6:66:65:73:fa:ae:5c:50:8a:11:04:2b:64:fe:
51:bd:7d:da:12:8b:46:77:51:44:cd:3f:91:03:33:
74:23:2e:62:73:36:a6:72:6c:e9:a1:81:89:6d:54:
7f:ef:83:74:a1:5c:a9:d9:63:45:59:0d:ce:e2:02:
cd:02:f3:d9:7e:b6:0e:bd:b8:97:5f:ba:2f:e3:57:
21:3d:27:f7:75:24:5d:76:de:ed:74:bf:12:d1:ab:
c0:16:3b:41:2d:a9:d5:28:16:2c:80:24:70:87:39:
06:66:00:d9:c2:f9:ca:ef:fa:7a:b4:fb:1a:ca:16:
2b:96:42:6e:51:53:1e:de:2f:37:4d:2e:8a:7d:92:
51:22:d3:3d:6c:89:56:2f:71:c9:8b:93:66:5c:32:
11:b4:1e:74:b4:36:b5:86:6d:9c:12:67:79:77:b4:
35:5f:58:75:41:26:8f:84:f6:eb:c0:80:1b:a0:8f:
c5:e1:f3:7e:41:0b:da:66:4d:34:d5:f1:65:7f:ae:
9f:24:08:a3:b2:ed:f4:37:01:cf:61:3d:51:70:5b:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BB:F5:CE:79:F2:D0:06:46:FC:EC:41:E1:A2:C2:BD:33:A3:88:4D
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/vbv1znny0AZG_OxB4aLCvTOjiE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.116.0/22
Signature Algorithm: sha256WithRSAEncryption
04:b2:7b:3f:81:37:c1:12:25:f0:5f:90:5d:7b:80:af:e3:af:
27:c1:7b:46:ff:02:dc:38:cc:d5:3d:e8:a1:2c:23:6f:9c:46:
2f:94:16:27:84:3d:57:17:ef:57:d9:9d:8b:3d:f1:44:23:f9:
29:ea:90:1f:82:1f:3a:be:8a:14:87:15:4c:65:59:3e:3a:e7:
e5:ce:66:05:0e:f0:82:64:08:2f:35:fb:38:bc:42:40:d2:09:
a2:f6:e7:63:d0:0f:18:70:da:88:f6:68:9a:d2:4f:7a:8f:ad:
00:02:8b:2c:3d:57:5b:ff:62:f6:fa:43:91:49:22:c5:aa:ff:
38:f9:f7:79:bc:46:ea:d8:8a:84:c1:6a:f3:91:86:e1:c5:20:
54:be:ba:26:c2:50:b1:12:a5:08:5b:0c:0f:cd:1f:7a:75:97:
5f:4d:ee:e6:5d:78:a8:c2:47:c6:71:d4:a8:1b:bc:1d:82:f5:
bb:23:5e:80:e5:30:f8:e4:2f:6f:a5:3b:c1:24:b4:32:4a:e6:
6e:e1:07:a1:0d:aa:2f:a1:6d:2a:b0:e3:78:71:f6:49:e7:bd:
32:0a:49:a4:48:de:0a:97:18:83:6c:fd:ed:ad:db:b3:ef:c0:
63:3e:3d:41:33:96:c3:9d:1b:66:78:77:ca:c3:56:83:86:02:
1d:bf:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org