Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/vwe_bHV3UwS8X7FNbOKslK80Hxs.roa
File: vwe_bHV3UwS8X7FNbOKslK80Hxs.roa (raw, json)
Hash identifier: Jd/Qx/FKRehHvNsc16Rj3prWu0jaxvc6jrbFvG5rwH0=
Subject key identifier: BF:07:BF:6C:75:77:53:04:BC:5F:B1:4D:6C:E2:AC:94:AF:34:1F:1B
Certificate issuer: /CN=e47521e7b6b38abfb88bf71e9bc5a02b2eccd3b3
Certificate serial: 01856D2F2A59756F4B968B5FAEBB28539F12
Authority key identifier: E4:75:21:E7:B6:B3:8A:BF:B8:8B:F7:1E:9B:C5:A0:2B:2E:CC:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HUh57azir-4i_cem8WgKy7M07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/vwe_bHV3UwS8X7FNbOKslK80Hxs.roa
Signing time: Sun 01 Jan 2023 11:54:45 +0000
ROA not before: Sun 01 Jan 2023 11:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204082
IP address blocks: 185.109.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:2a:59:75:6f:4b:96:8b:5f:ae:bb:28:53:9f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47521e7b6b38abfb88bf71e9bc5a02b2eccd3b3
Validity
Not Before: Jan 1 11:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf07bf6c75775304bc5fb14d6ce2ac94af341f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:6e:7f:42:98:d4:c2:00:70:55:46:72:20:
ae:2c:92:05:54:dd:81:b1:8a:20:b0:74:49:35:79:
49:ca:72:0d:e1:f7:fa:e6:dd:6f:53:61:cd:25:f8:
af:54:b9:f1:8a:20:f4:48:9b:f9:5f:c6:53:c9:cb:
e5:4b:6d:d2:fc:fa:38:b8:92:35:1b:78:9b:6d:74:
3f:07:b3:da:e7:97:cc:bd:33:e8:9d:ad:ed:73:df:
4b:b4:7e:50:84:b2:4a:02:34:fe:c5:fd:94:bf:ec:
5c:fb:61:85:fd:4d:7a:c3:16:5e:04:fd:fe:f3:45:
69:c1:54:21:e0:1a:75:6e:6a:d2:51:d7:41:f0:b0:
20:69:d6:ab:53:6f:32:62:a7:90:12:81:9b:b9:71:
ad:84:db:6f:f0:94:6b:61:00:b3:3e:98:c8:b6:75:
d4:91:e8:f1:62:6e:4d:23:e7:0f:4d:cc:84:4e:97:
25:32:5f:37:ba:4d:32:24:6c:44:aa:08:43:38:4f:
37:f5:cf:42:b6:01:ff:da:ae:65:17:e6:cc:32:92:
f0:cf:bf:90:5b:32:09:4c:5b:68:04:ec:52:f1:81:
83:41:09:2f:6e:ae:39:45:f5:4c:ca:ad:17:a4:e4:
f6:7a:0f:e4:2e:fb:fc:fa:3d:4f:b3:d9:68:5c:b1:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:BF:6C:75:77:53:04:BC:5F:B1:4D:6C:E2:AC:94:AF:34:1F:1B
X509v3 Authority Key Identifier:
keyid:E4:75:21:E7:B6:B3:8A:BF:B8:8B:F7:1E:9B:C5:A0:2B:2E:CC:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HUh57azir-4i_cem8WgKy7M07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/vwe_bHV3UwS8X7FNbOKslK80Hxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/5HUh57azir-4i_cem8WgKy7M07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.243.0/24
Signature Algorithm: sha256WithRSAEncryption
94:6d:d2:e3:6d:07:e3:85:0e:80:5b:3c:0f:32:8f:a8:f5:85:
e4:00:41:c1:88:fc:05:e1:cf:ca:06:7c:cd:b8:26:e1:43:32:
94:17:b2:7a:4f:00:42:1f:04:03:a2:b5:71:28:28:42:20:c4:
30:7d:1c:5e:15:c1:ed:7c:17:f3:f9:5e:a0:8c:bc:49:2c:03:
93:c8:4f:3a:47:e4:83:71:e4:1e:73:56:e0:38:56:af:37:aa:
22:bf:ee:6b:a4:1d:de:c5:e2:a2:07:3f:5b:8b:ed:ff:52:1c:
51:e1:d2:08:bd:2d:d5:7a:ee:28:f0:2f:ec:65:ac:a3:83:a0:
1b:f5:11:90:89:50:a8:cd:70:9e:fe:78:9c:10:37:ce:45:8a:
b0:87:3a:c8:d8:0c:3b:9d:62:e1:1c:4b:bb:00:9c:18:a2:f3:
87:98:f4:06:e7:06:18:fc:02:21:e2:8b:43:a4:83:08:4f:63:
b5:05:4d:d0:2f:f9:30:c5:f4:3b:19:b6:b5:f2:e9:93:ae:df:
44:93:7f:5d:bc:37:80:ca:4b:35:59:6a:1f:0f:75:e1:02:30:
81:86:f0:19:cd:a4:d4:87:ca:03:de:b9:7a:b0:59:b7:82:3e:
51:64:71:19:95:b9:f5:ee:bd:fd:bd:ab:e7:24:f8:63:b6:a2:
fb:86:7e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:56 2024 by rpki-client on console-ams.rpki-client.org