Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/vmkWOKu-ONeC8Gca2kbq-k2zIpY.roa
File: vmkWOKu-ONeC8Gca2kbq-k2zIpY.roa (raw, json)
Hash identifier: EnielwWMerocZJghUuGd/z9AgnP0NBOoh1FjYlSfCHg=
Subject key identifier: BE:69:16:38:AB:BE:38:D7:82:F0:67:1A:DA:46:EA:FA:4D:B3:22:96
Certificate issuer: /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial: 01856C1C9D30F2A54562949FF4A7FBAAE477
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/vmkWOKu-ONeC8Gca2kbq-k2zIpY.roa
Signing time: Sun 01 Jan 2023 06:54:52 +0000
ROA not before: Sun 01 Jan 2023 06:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59767
IP address blocks: 212.89.32.0/20 maxlen: 20
45.135.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:9d:30:f2:a5:45:62:94:9f:f4:a7:fb:aa:e4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
Validity
Not Before: Jan 1 06:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be691638abbe38d782f0671ada46eafa4db32296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:d7:04:68:92:19:30:5a:13:b5:cc:ba:f0:
b0:3a:dc:af:e6:b8:13:34:4d:64:20:48:c8:7d:37:
94:73:dd:ec:07:7f:99:05:1a:77:37:88:66:54:8f:
d2:99:a2:55:6c:07:a3:85:ad:6c:36:73:04:30:4f:
6d:ec:48:be:b2:59:1e:11:d6:c4:e3:92:00:7f:76:
98:f2:a3:7c:ea:25:2b:dd:8f:7c:7d:98:bd:86:96:
0d:dd:ee:e3:cd:d3:87:00:15:83:1c:45:e1:7b:85:
87:67:08:90:c4:64:13:e9:4d:77:a0:d9:f8:37:8e:
3e:f0:11:04:cf:ee:05:f1:28:7c:bd:b2:95:47:87:
ab:97:1b:0b:9d:bb:19:4a:e1:dc:8e:d4:d0:6b:7d:
c2:ee:bc:cb:d9:a4:cd:08:17:76:eb:d0:cd:ec:a8:
7e:3a:3e:9c:f4:6f:98:95:4f:9d:f2:9b:26:21:a5:
71:95:df:50:93:90:19:81:63:db:52:9c:c4:43:1a:
dc:33:09:e1:ba:e5:f1:18:dc:ed:c7:14:b5:b8:a4:
1b:67:28:f5:76:54:12:e5:52:e2:ec:83:6f:67:21:
b9:08:44:79:03:8a:e7:18:73:2d:7d:c7:4f:9e:82:
cf:cd:91:52:74:61:58:fb:14:ed:5c:e9:b5:f7:28:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:69:16:38:AB:BE:38:D7:82:F0:67:1A:DA:46:EA:FA:4D:B3:22:96
X509v3 Authority Key Identifier:
keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/vmkWOKu-ONeC8Gca2kbq-k2zIpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.156.0/22
212.89.32.0/20
Signature Algorithm: sha256WithRSAEncryption
14:33:4a:24:1b:cd:44:83:8f:88:66:f0:01:62:b6:c7:44:a3:
ce:ef:12:95:9b:12:d4:a0:80:95:f3:56:4c:7b:2d:ad:36:d5:
6e:f2:ba:0a:e1:64:e8:98:71:7b:e1:f5:0a:bb:77:c1:36:71:
96:2e:4d:50:02:df:4e:58:17:d9:ef:1e:36:0e:4a:18:a1:51:
f3:db:49:23:f5:16:e3:78:61:66:9c:02:6b:67:ef:b4:d1:b9:
ef:35:18:47:df:48:95:fd:04:c1:1d:d9:7a:c4:90:71:01:d1:
3a:e6:f4:66:49:e2:e3:0d:27:6d:0c:97:df:85:57:62:09:bb:
9e:30:77:01:d0:4f:bd:3e:79:8e:f2:2f:53:f2:63:dd:5f:6c:
26:73:1b:c9:85:8c:bc:1b:79:57:37:03:d5:76:7a:3c:73:64:
de:c1:d1:60:fa:d0:0b:4f:7a:6e:b8:46:47:e6:9c:96:8b:ed:
e5:cf:4a:45:0c:b3:25:04:eb:d4:d0:3e:f3:e5:41:5a:2a:2d:
6c:4a:21:5d:1e:7e:49:db:69:a2:2d:69:df:73:54:d5:44:5e:
42:f6:08:aa:08:b3:5b:0c:a4:b5:bc:c1:b6:30:85:5d:71:2a:
ed:23:f3:7e:40:d3:76:b6:17:82:81:83:83:fb:a3:0e:f4:68:
f2:a2:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:36 2024 by rpki-client on console-ams.rpki-client.org