Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/vTILcSUeHMWZtRj1V28VHbgt3D0.roa
File: vTILcSUeHMWZtRj1V28VHbgt3D0.roa (raw, json)
Hash identifier: lScYzsQ/AoCAO8xdbGrnxYFkuoFE+TonVAaWKNgEja4=
Subject key identifier: BD:32:0B:71:25:1E:1C:C5:99:B5:18:F5:57:6F:15:1D:B8:2D:DC:3D
Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3
Certificate serial: 01856F26C36BAD5C26D63C161AAB24C396BC
Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/vTILcSUeHMWZtRj1V28VHbgt3D0.roa
Signing time: Sun 01 Jan 2023 21:04:49 +0000
ROA not before: Sun 01 Jan 2023 21:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203990
IP address blocks: 185.117.124.0/22 maxlen: 24
185.117.124.0/24 maxlen: 24
185.117.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:c3:6b:ad:5c:26:d6:3c:16:1a:ab:24:c3:96:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3
Validity
Not Before: Jan 1 21:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd320b71251e1cc599b518f5576f151db82ddc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:fa:e6:de:26:73:0f:9e:dd:5c:4f:8d:f0:
e8:24:30:08:46:a6:7b:89:0a:16:73:75:89:2f:48:
65:3c:47:08:71:9e:17:46:58:20:ea:96:cb:e0:97:
2e:00:8a:5f:b9:4b:07:ce:47:36:c2:01:ac:da:cd:
d5:61:46:38:3f:9a:24:1b:e6:95:29:5d:0f:73:c7:
28:f7:1c:86:62:c6:87:02:8d:bc:ef:2b:bf:b8:20:
9d:fd:97:0a:c3:ae:25:9e:8e:0c:49:5c:40:85:ce:
0f:b5:b7:04:0c:12:41:87:cb:ae:35:8e:8a:85:5b:
f1:ae:a6:81:0f:da:6b:73:ab:36:0c:8e:a2:4b:13:
0d:1d:08:db:61:ed:73:ee:1e:8b:e0:eb:90:f4:be:
8c:f7:7e:4e:c7:49:59:ba:69:cc:9a:40:53:f3:2d:
6c:ea:22:61:38:f2:7e:9b:a4:e6:d1:38:bb:83:ae:
c5:ab:a7:66:5d:53:15:da:7a:f3:6f:55:35:6d:a2:
01:1f:b8:a0:7e:70:ad:4a:17:56:f8:8c:db:86:72:
7e:01:47:85:7c:36:c3:c1:67:d9:49:2c:d0:af:a3:
97:5e:09:b6:0e:58:5f:5d:04:d5:e0:1f:1a:9b:56:
d0:e4:a8:5e:be:10:3b:6c:15:2a:cf:09:1d:29:23:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:32:0B:71:25:1E:1C:C5:99:B5:18:F5:57:6F:15:1D:B8:2D:DC:3D
X509v3 Authority Key Identifier:
keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/vTILcSUeHMWZtRj1V28VHbgt3D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.124.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:26:30:82:cf:9f:2c:4e:0d:3e:57:ae:69:ca:47:1f:ff:70:
7c:d2:d7:cb:cb:eb:55:d7:7b:c9:b1:03:fe:43:ab:6d:a4:01:
01:ce:ca:3e:c1:e1:7e:7a:4a:67:93:a2:38:77:25:af:8d:be:
65:e8:77:06:ed:14:79:40:e3:67:2d:66:6d:e2:05:c5:d7:ef:
b3:2d:31:c1:68:4b:e9:9c:d6:51:eb:ff:66:44:ff:80:f3:57:
5a:87:f4:ac:5c:6c:cf:76:30:1f:68:91:ea:0c:e1:e6:c8:e9:
6b:27:92:89:ef:c5:9a:21:6b:bf:f3:f7:b7:64:71:23:14:b4:
02:ca:3b:4b:a5:0a:da:6d:df:66:f3:b8:62:ef:a0:dc:5f:df:
bc:6d:da:c3:05:d1:af:67:96:21:fa:4f:04:05:3f:5c:0e:3b:
68:da:dd:df:7f:e2:be:b0:fe:eb:08:29:3e:6e:4b:0c:2b:f3:
15:84:53:a0:71:25:ef:c6:c2:0e:a5:cf:f8:d6:34:7b:86:a2:
40:3f:21:52:0f:0c:ad:78:07:94:b7:7f:3f:86:6e:32:86:55:
aa:00:ab:ab:2a:ad:6c:e8:c3:04:54:38:3b:f9:20:15:c0:a0:
4a:0b:4e:a7:3d:fd:78:19:80:96:f8:2e:b4:5d:12:98:56:7c:
48:b5:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:25 2024 by rpki-client on console-fra.rpki-client.org