Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/vQEBk62taQCPb29LP8YEAhQwTN8.roa
File: vQEBk62taQCPb29LP8YEAhQwTN8.roa (raw, json)
Hash identifier: 0wvTm7ymssWwyaGXVOdMujurjYrqhVl//1eVskHhuVc=
Subject key identifier: BD:01:01:93:AD:AD:69:00:8F:6F:6F:4B:3F:C6:04:02:14:30:4C:DF
Certificate issuer: /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial: 01856C0A5426D241EB577272C58B615AC5A9
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/vQEBk62taQCPb29LP8YEAhQwTN8.roa
Signing time: Sun 01 Jan 2023 06:34:54 +0000
ROA not before: Sun 01 Jan 2023 06:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202269
IP address blocks: 194.5.175.0/24 maxlen: 24
194.5.188.0/24 maxlen: 24
194.5.195.0/24 maxlen: 24
194.5.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:54:26:d2:41:eb:57:72:72:c5:8b:61:5a:c5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Validity
Not Before: Jan 1 06:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd010193adad69008f6f6f4b3fc6040214304cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b0:d1:85:6a:ba:c8:b9:fe:7b:ca:18:2e:fe:
18:59:97:b1:e0:6f:95:85:54:bb:33:04:78:24:fa:
4e:1b:6e:e7:9f:b6:a6:66:04:ab:74:c5:41:ae:71:
e2:dd:b8:88:b2:bd:09:2a:6a:49:ec:01:8a:59:01:
b7:4d:05:37:9c:b0:e3:3a:bd:7d:91:a9:9b:ca:d0:
c8:25:dc:f2:1c:22:24:5f:a6:4e:0f:a6:d5:1f:80:
40:74:6d:0e:b6:85:8c:04:3a:2a:93:0f:7b:38:cb:
c1:cf:54:3d:2d:f9:b9:75:4a:48:10:0d:90:d0:13:
d4:63:46:fe:23:99:96:04:a2:20:3e:e7:ea:10:d2:
e8:59:07:8d:91:7d:d3:3d:af:59:ef:be:17:65:86:
c7:39:49:81:8d:f1:4a:c2:8b:a0:ac:11:66:f1:8e:
16:69:ba:9c:19:04:46:63:eb:a3:13:08:1b:31:70:
ae:1a:93:6c:35:ca:8a:a7:a8:1b:dc:85:2a:6b:08:
c4:23:d7:ef:bf:17:28:59:12:28:1f:bc:fb:41:b9:
55:a1:c2:f4:c5:39:84:7d:8a:d4:25:62:44:a9:26:
b3:b8:74:ce:04:9e:e2:4c:3a:0a:ee:c9:d9:a4:b2:
a1:6c:62:e9:f4:d4:81:b1:f6:b7:69:0e:97:18:e5:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:01:01:93:AD:AD:69:00:8F:6F:6F:4B:3F:C6:04:02:14:30:4C:DF
X509v3 Authority Key Identifier:
keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/vQEBk62taQCPb29LP8YEAhQwTN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.175.0/24
194.5.188.0/24
194.5.195.0/24
194.5.205.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8d:69:0e:62:f5:1d:48:ee:b6:e0:83:0a:db:50:44:8b:09:
7f:e3:be:0e:12:84:b9:ef:b0:55:a2:1d:92:7e:1d:17:c8:7f:
6d:25:2d:c3:6c:c1:8e:81:23:ac:36:72:b7:9a:82:f7:ba:29:
fe:48:8a:81:05:6c:a5:96:0b:d8:fc:a7:8c:fe:0d:68:ca:fd:
4c:f6:39:e2:ae:3e:40:f3:fd:10:47:45:ef:60:c4:0d:56:00:
a6:ac:0f:ef:4c:65:9a:88:cb:4b:b2:e5:d7:99:87:e3:c7:36:
df:32:fc:95:c8:7e:6e:02:48:e6:1a:e4:5d:59:a0:a0:c2:88:
8f:ad:75:36:4e:fb:98:55:4c:57:71:66:d9:1e:47:4b:60:40:
1e:0d:7c:1b:6b:c0:e3:d3:48:0b:cf:3e:1f:d5:d9:75:5b:12:
2f:64:47:21:2c:9b:fa:35:ff:7c:dd:3b:95:aa:b7:cb:fe:71:
7a:d3:24:35:92:17:2a:d3:ff:7f:f3:97:fb:1a:03:bb:fe:0f:
8e:43:38:8e:ea:a8:72:7c:b8:40:4b:43:bf:10:e2:e0:ff:3c:
f4:b9:fd:05:75:60:56:ff:df:3e:08:df:33:92:e0:8f:36:5b:
0a:74:5f:cb:4f:df:b9:ec:75:23:0d:15:03:d4:bb:bc:59:cc:
1e:c9:88:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:12 2024 by rpki-client on console-fra.rpki-client.org