Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/VVGKuxLw78bkOg31O9sGHFimcbM.roa
File: VVGKuxLw78bkOg31O9sGHFimcbM.roa (raw, json)
Hash identifier: Wh/Q6pLlSufAZYr3zgvqnRtNrpudCJmx+mfEkxJ3X9U=
Subject key identifier: 55:51:8A:BB:12:F0:EF:C6:E4:3A:0D:F5:3B:DB:06:1C:58:A6:71:B3
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 018CC7948FD505E0E3B552368A47431DECC9
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/VVGKuxLw78bkOg31O9sGHFimcbM.roa
Signing time: Tue 02 Jan 2024 00:30:51 +0000
ROA not before: Tue 02 Jan 2024 00:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 185.22.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 08:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:8f:d5:05:e0:e3:b5:52:36:8a:47:43:1d:ec:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Jan 2 00:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55518abb12f0efc6e43a0df53bdb061c58a671b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ca:15:0c:2b:e4:2e:9f:a4:a8:02:8c:ee:76:
bc:78:07:cf:d0:42:78:30:87:86:31:2e:81:52:41:
8a:f9:e9:6f:75:c3:f5:0a:db:d9:3e:80:3d:83:a9:
13:26:08:20:b8:33:02:04:8f:a5:c2:52:9e:7d:25:
50:7d:81:a4:3f:dd:b9:1b:37:03:46:a1:8a:66:0a:
d4:a5:40:51:d8:84:76:00:86:e6:e4:9a:3a:e5:47:
de:d8:25:f9:13:8c:fa:96:0a:54:3c:2f:5b:5a:ce:
85:44:b2:03:40:8e:4e:1b:23:b5:c1:50:8b:64:13:
82:dc:ca:3b:36:98:4b:7e:72:3a:11:09:2c:17:65:
29:22:52:00:df:60:bf:9d:11:cb:ad:1a:da:7d:21:
2c:25:96:d0:07:97:44:96:e5:7e:fa:7c:d5:45:a0:
9c:f3:c2:31:50:f7:65:0c:ac:b5:20:e7:38:05:09:
a7:19:79:a3:89:c1:e6:d6:2c:2c:d5:46:74:27:96:
94:c9:f1:55:02:f8:84:97:c7:4c:36:14:d5:87:f7:
4d:66:23:f5:d6:c9:99:30:7d:39:c8:73:1e:24:7a:
7c:cf:35:65:2a:21:29:47:8c:44:aa:80:fb:70:1e:
5c:15:de:fd:76:a6:50:56:97:94:0c:6a:a2:c1:ae:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:51:8A:BB:12:F0:EF:C6:E4:3A:0D:F5:3B:DB:06:1C:58:A6:71:B3
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/VVGKuxLw78bkOg31O9sGHFimcbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.230.0/24
Signature Algorithm: sha256WithRSAEncryption
96:40:f5:d7:be:f1:2f:ce:fb:61:71:5f:a1:08:99:ee:7c:1c:
59:bc:73:f3:77:cf:73:f2:f1:93:0f:2b:aa:7a:ba:f1:d3:2c:
d5:03:ff:f4:f5:88:aa:7b:b4:81:2a:83:b9:64:1a:9e:b4:95:
db:da:9f:51:a2:eb:dd:2d:4d:9d:bd:6e:5b:87:6e:5d:0c:c0:
a2:57:ac:5a:41:a3:2e:4d:b1:4a:05:d2:6a:c8:4d:48:e9:1a:
bc:9d:85:59:fc:65:f5:7e:5b:5d:d6:26:a5:f1:a7:a2:ff:2c:
9a:74:f7:91:59:19:2b:4e:d7:9e:3a:5e:8c:0f:3d:65:54:e6:
5a:44:60:cc:26:a0:35:57:68:db:8a:d6:b0:1b:ff:7c:5f:38:
75:e8:59:8c:9c:53:15:91:2a:bf:60:f1:14:54:51:9a:06:5e:
87:bd:1a:ed:11:59:be:69:cd:35:fc:ce:86:84:ae:db:6c:41:
75:db:03:f7:3f:46:e6:8f:ed:82:59:a0:34:7e:06:72:05:ef:
5b:f0:ad:e1:6a:dc:8e:29:6d:85:84:b1:44:c1:9d:f8:07:c4:
cf:af:df:b5:57:8d:e3:d3:36:fb:89:df:ff:ca:a7:48:04:08:
85:1f:9c:08:9f:37:18:46:65:b0:06:5c:ff:30:b9:a7:2e:0d:
ee:77:45:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:47 2024 by rpki-client on console-ams.rpki-client.org