Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V-OS_L5CLZEQtzyN5X-evpuk23o.roa
File: V-OS_L5CLZEQtzyN5X-evpuk23o.roa (raw, json)
Hash identifier: P5XU+zkDS+C9c8NIKhD54ta7CeXqodN36AmoXRbqTQ4=
Subject key identifier: 57:E3:92:FC:BE:42:2D:91:10:B7:3C:8D:E5:7F:9E:BE:9B:A4:DB:7A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E51A6B725E40678DCFE9CCB080B339348
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V-OS_L5CLZEQtzyN5X-evpuk23o.roa
Signing time: Mon 18 Mar 2024 13:01:04 +0000
ROA not before: Mon 18 Mar 2024 13:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216156
IP address blocks: 87.121.84.0/23 maxlen: 24
94.156.102.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 06:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:a6:b7:25:e4:06:78:dc:fe:9c:cb:08:0b:33:93:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 18 13:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57e392fcbe422d9110b73c8de57f9ebe9ba4db7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:d5:ca:14:fe:9c:16:4d:9d:fb:46:80:e1:
13:f0:b7:e2:4a:e4:4a:9b:1e:41:be:c3:b5:42:1b:
96:0b:d9:a1:06:ec:08:44:b7:69:fc:f4:ff:f2:a0:
ae:8f:ae:2d:2f:73:c9:e3:6d:52:8c:2a:1d:6a:09:
48:6c:dd:41:79:00:36:2f:02:bd:ec:b3:82:25:10:
c4:c3:a7:1b:54:ab:aa:b7:e9:90:73:ee:23:45:c6:
ff:c9:c5:da:32:2b:60:43:51:56:2c:21:fa:d5:45:
6f:47:2e:56:05:67:48:52:d0:4d:d7:f9:56:ab:13:
bf:c7:e3:5f:ef:9b:4d:0e:eb:84:c2:99:4c:11:1d:
ad:d3:2d:ad:86:77:2f:bd:63:0d:10:ee:5e:f5:94:
f5:04:14:e7:4e:c7:86:52:73:4f:53:ec:b9:0f:20:
f5:92:53:8c:76:78:8f:ac:32:c2:50:47:e0:75:fa:
5e:72:42:b2:5c:73:4e:31:f3:eb:2a:3d:e2:07:74:
13:84:6a:95:72:5b:08:7d:c8:65:27:72:00:56:a7:
ca:fa:29:1f:e6:2f:19:1b:3b:d4:3e:2c:b5:cc:7f:
f8:3e:a2:27:c8:f3:13:1c:5a:ee:39:1e:0b:f9:b3:
64:dd:74:48:22:07:86:eb:df:c1:bd:a4:bf:27:fa:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E3:92:FC:BE:42:2D:91:10:B7:3C:8D:E5:7F:9E:BE:9B:A4:DB:7A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/V-OS_L5CLZEQtzyN5X-evpuk23o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.84.0/23
94.156.102.0/24
141.98.6.0/24
178.215.237.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6a:66:a1:a0:c9:a8:b9:1c:49:af:35:1f:0b:8f:28:d5:a7:
7a:d5:92:aa:69:8d:de:f2:6c:4f:f7:8a:80:fc:26:7a:2e:99:
c3:b8:4e:4e:4b:17:20:1d:34:be:48:41:cb:98:79:3d:bf:15:
e0:47:50:17:13:35:16:02:b7:30:f7:46:59:ce:b5:36:0d:ad:
5a:a0:14:80:bd:f1:eb:56:c4:60:1a:fa:67:1d:64:46:b5:88:
c4:64:10:13:20:c4:7d:9e:90:b4:3a:fa:0b:58:8d:44:1b:78:
f3:b4:0a:95:1b:d4:e2:34:28:2c:19:bf:d2:8a:5f:83:ad:52:
a3:52:ef:5f:cf:73:42:32:3a:b1:a0:92:c5:c5:a6:df:1f:a9:
4c:4e:9c:67:1a:9e:ae:a4:fa:aa:d1:63:09:57:7d:7e:7f:60:
19:2e:df:5e:86:f5:cd:c9:99:2b:1b:4a:3e:ee:86:e7:99:9f:
a5:d6:10:fd:a5:c9:cf:08:d0:bc:fe:b1:ca:ae:94:da:25:65:
99:4f:33:2c:e1:25:ae:1c:15:42:cc:21:ae:9d:0f:a8:b5:27:
d4:15:8a:d2:4c:cc:fc:a7:7d:45:ef:b5:93:21:44:b8:55:0a:
d3:b6:24:03:b3:7d:3b:8e:bb:64:15:b4:62:47:d7:be:22:19:
4e:00:91:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 09:53:41 2024 by rpki-client on console-ams.rpki-client.org