Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/vmBmJyvPN5jxZGRFp-VLveA5oJ4.roa
File: vmBmJyvPN5jxZGRFp-VLveA5oJ4.roa (raw, json)
Hash identifier: uJ7OZJdGXkFr3ZLewbZmXeHHJkzKU0c69f/lqPXDvso=
Subject key identifier: BE:60:66:27:2B:CF:37:98:F1:64:64:45:A7:E5:4B:BD:E0:39:A0:9E
Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial: 018570150C290DB9424576399E142B4F0837
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/vmBmJyvPN5jxZGRFp-VLveA5oJ4.roa
Signing time: Mon 02 Jan 2023 01:25:05 +0000
ROA not before: Mon 02 Jan 2023 01:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205418
IP address blocks: 185.155.181.0/24 maxlen: 24
185.155.183.0/24 maxlen: 24
2a00:8c40:243::/48 maxlen: 48
2a00:8c40:235::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:0c:29:0d:b9:42:45:76:39:9e:14:2b:4f:08:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Validity
Not Before: Jan 2 01:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be6066272bcf3798f1646445a7e54bbde039a09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:54:4e:6b:67:91:ae:f9:b2:a2:29:2f:53:
cf:8c:3a:1f:54:11:9b:de:a7:73:3d:32:60:ba:58:
8c:89:ca:32:b5:ff:a9:a7:fd:ea:80:7d:d4:8b:ea:
13:43:05:88:85:87:8f:d2:c6:40:d2:c3:8d:2a:69:
91:02:53:5a:69:31:4d:3e:6d:e9:ca:2f:83:6a:67:
93:c2:1a:ad:71:b2:41:11:5a:c4:88:64:79:f6:95:
cb:95:7f:55:f3:8f:00:6d:40:30:6c:2d:42:7f:5f:
51:d1:a2:79:0e:c2:fb:6d:30:6d:94:68:82:f3:a5:
9d:3e:23:e8:00:fc:05:11:f3:19:56:e1:2d:53:43:
b2:0f:18:ca:14:23:bc:7b:7c:04:9d:54:9a:56:c1:
46:61:18:e3:51:a4:ec:f8:42:bf:48:ef:2b:e0:f6:
c4:13:95:d1:23:2d:21:33:83:96:34:45:04:d2:a1:
f0:b1:88:d8:a7:96:04:32:44:ee:b7:c8:77:48:e7:
30:d7:39:38:e8:b6:a9:29:f6:26:33:a4:a4:fe:17:
b8:20:a8:91:2b:d1:68:f2:9a:94:5d:02:c5:35:1e:
af:ad:bd:d6:3b:09:63:4e:96:7b:ae:4e:71:ea:dc:
ad:cf:73:bd:b8:e7:c6:f0:98:64:31:f8:93:3e:b0:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:60:66:27:2B:CF:37:98:F1:64:64:45:A7:E5:4B:BD:E0:39:A0:9E
X509v3 Authority Key Identifier:
keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/vmBmJyvPN5jxZGRFp-VLveA5oJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.181.0/24
185.155.183.0/24
IPv6:
2a00:8c40:235::/48
2a00:8c40:243::/48
Signature Algorithm: sha256WithRSAEncryption
4d:9e:45:2b:e4:ba:fb:b0:7f:74:72:06:7b:a4:9b:be:47:de:
e1:a2:d2:17:2f:64:7c:e3:e8:96:be:d7:15:ac:2f:ef:84:bc:
02:ac:52:ed:88:7b:a5:f0:19:d7:88:ec:7d:23:04:9e:4f:24:
df:c1:93:cf:d8:6a:0e:71:ac:32:44:96:9e:32:15:e6:50:52:
eb:4f:93:bc:3d:e7:ad:fe:41:64:9a:88:16:93:c9:8a:6d:c8:
e5:bb:28:30:bd:74:34:75:59:fc:b4:ac:1c:36:2d:5e:09:79:
90:f5:12:7d:e2:fd:66:cc:1e:9f:ca:08:46:e9:13:b1:9d:1b:
70:55:19:14:ba:84:4c:f9:2d:cd:12:cb:a6:89:8f:59:e7:27:
27:06:f7:61:1c:97:3b:22:f8:86:32:43:22:25:c5:a8:6e:6e:
90:ef:9e:33:31:3d:22:47:de:5f:77:6c:59:58:f5:6e:c4:5f:
4a:1d:a6:00:47:42:fa:7e:a8:f3:fa:ca:ce:93:92:20:08:92:
b8:f3:18:68:1a:d9:74:71:9e:6a:d6:42:52:64:7a:0b:55:ab:
2b:2c:36:14:aa:0b:27:70:c0:d3:3e:ca:b9:42:bc:88:fb:4d:
83:95:75:67:98:ee:4f:5e:86:4a:de:e5:7b:7d:7b:f1:72:77:
d1:03:07:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:45 2024 by rpki-client on console-fra.rpki-client.org