Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/vriFxjP7kUBgLplOU0kcIjZMI9c.roa
File: vriFxjP7kUBgLplOU0kcIjZMI9c.roa (raw, json)
Hash identifier: lT6dyL6rQ65tL+9bx0ldmAHGcSFgSwN356zEssOTI+4=
Subject key identifier: BE:B8:85:C6:33:FB:91:40:60:2E:99:4E:53:49:1C:22:36:4C:23:D7
Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02
Certificate serial: 018CC87014F5AF6877511360AA4C01EE8FFD
Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/vriFxjP7kUBgLplOU0kcIjZMI9c.roa
Signing time: Tue 02 Jan 2024 04:30:37 +0000
ROA not before: Tue 02 Jan 2024 04:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47745
IP address blocks: 85.187.1.0/24 maxlen: 24
185.255.59.0/24 maxlen: 24
151.237.61.0/24 maxlen: 24
151.237.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 13:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:14:f5:af:68:77:51:13:60:aa:4c:01:ee:8f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02
Validity
Not Before: Jan 2 04:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beb885c633fb9140602e994e53491c22364c23d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:d4:7c:17:bb:c6:d9:67:3c:f8:0f:de:75:
20:74:36:01:21:5e:53:2f:7d:5c:68:65:1b:53:2c:
c1:c3:52:1b:c5:a7:a5:0d:fc:2e:3d:f1:41:c0:f8:
0e:32:ca:c6:84:b1:a3:94:b4:53:3c:eb:d1:e0:4e:
e0:6f:37:6a:82:dc:3f:71:6e:0b:96:fe:cc:fd:0d:
fd:08:fb:d3:43:7b:69:29:55:f4:7f:27:79:37:11:
5b:ac:99:7f:8f:7e:2a:82:6c:3f:21:ae:07:60:70:
98:9c:9f:5c:96:f0:63:66:9e:e6:8a:0f:a3:5e:0e:
73:99:8a:2a:d8:81:6d:8b:6e:03:38:8b:fd:fc:e6:
6c:30:7a:31:08:0b:c2:01:3d:17:10:32:8a:b3:cf:
5e:2b:9d:b8:c0:5d:58:b7:74:dc:f4:1e:9a:76:80:
ad:8a:bc:4b:a3:75:2e:92:a9:29:b0:83:16:48:e1:
6f:48:af:0c:6c:07:08:1f:54:3b:3d:cc:2a:25:ab:
21:45:0d:6f:c4:26:ae:3b:ca:e2:0a:ef:48:c8:a3:
c5:df:6d:77:13:3a:93:9a:81:40:4f:ef:f6:99:af:
09:c2:61:a2:36:0a:59:c8:c5:36:5b:60:1d:c7:70:
e7:3f:4b:1e:0a:72:b1:11:4e:a1:3e:c5:19:33:01:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B8:85:C6:33:FB:91:40:60:2E:99:4E:53:49:1C:22:36:4C:23:D7
X509v3 Authority Key Identifier:
keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/vriFxjP7kUBgLplOU0kcIjZMI9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.1.0/24
151.237.60.0/23
185.255.59.0/24
Signature Algorithm: sha256WithRSAEncryption
35:55:da:6b:41:b5:3c:5e:8a:36:f5:60:07:6d:28:46:c1:25:
35:31:3c:33:13:ae:b6:98:d0:b6:23:b3:53:61:cd:a4:35:f9:
92:db:62:f2:45:df:7e:8d:a7:68:23:79:72:a3:c4:ac:59:3e:
62:44:ce:4c:0b:8c:93:34:7c:4d:dc:37:d1:6f:15:17:42:41:
ac:b8:5d:d5:fd:3b:2e:43:75:fe:43:18:01:dc:7b:84:ba:e6:
75:b9:4b:d9:a6:cd:fd:c4:dd:e9:96:70:85:ad:e9:22:55:23:
7c:3c:0e:5c:57:6a:0a:92:1e:f2:a4:52:12:cc:3c:2a:af:43:
25:77:14:69:3e:c2:56:0f:cf:a0:5b:47:26:a3:3f:51:4b:ba:
b4:0c:e9:67:5d:49:7c:1d:54:7b:3f:4e:30:95:a3:fe:c5:a0:
79:a8:c1:1d:79:59:5d:46:1a:04:bb:d4:3f:ff:cb:0b:40:26:
3e:37:b5:46:38:6f:23:56:f8:55:0b:98:af:6c:7c:87:95:1e:
9a:ef:13:a1:81:29:7e:b2:35:9c:37:38:f1:b4:5e:3e:f1:c1:
fe:e7:f7:d0:52:46:fb:70:81:4c:bb:09:d6:20:8b:ee:da:dc:
15:1d:56:64:63:70:b4:d7:27:d0:58:0d:a7:83:f7:22:d3:2f:
bc:e5:25:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:07 2024 by rpki-client on console-fra.rpki-client.org