Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VB2RDvXakyLkDGlWffaocX3pKGs.roa
File: VB2RDvXakyLkDGlWffaocX3pKGs.roa (raw, json)
Hash identifier: jixaPN8IB/gKj/cJOVDTkASqZvUDAzureOMsMrmEXmQ=
Subject key identifier: 54:1D:91:0E:F5:DA:93:22:E4:0C:69:56:7D:F6:A8:71:7D:E9:28:6B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191BC3125279763C6657AF3B17EBA4E3064
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VB2RDvXakyLkDGlWffaocX3pKGs.roa
Signing time: Wed 04 Sep 2024 08:40:22 +0000
ROA not before: Wed 04 Sep 2024 08:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401116
IP address blocks: 85.31.47.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 08:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bc:31:25:27:97:63:c6:65:7a:f3:b1:7e:ba:4e:30:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 4 08:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=541d910ef5da9322e40c69567df6a8717de9286b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:f5:4f:48:34:0d:9f:f0:e9:b7:ba:8d:33:
71:f9:3f:46:b4:5e:8b:18:ab:17:ba:d8:1f:63:87:
53:20:15:6e:b0:59:bf:7d:bc:9c:25:13:09:88:c0:
e1:ce:e6:38:44:e3:67:0f:83:86:cc:f2:96:69:43:
93:18:11:f0:93:49:a9:cf:87:0b:76:e0:c9:86:c8:
69:70:ef:ca:12:8e:d1:fd:0a:17:bc:87:b9:40:08:
41:43:fc:de:79:7d:eb:62:67:f0:8e:82:8b:ae:28:
3b:a7:0a:66:e4:57:24:f7:9c:f3:3a:6e:f5:e3:b0:
e0:05:31:a4:36:66:ef:60:5c:41:7f:29:7c:82:3c:
11:73:7e:42:12:fc:62:33:c4:cb:ba:ef:9b:3f:2f:
1a:3b:36:63:42:26:c0:a1:cd:ad:93:02:63:6e:93:
6f:4b:88:d1:1d:78:3a:db:88:2a:40:92:2a:a2:c5:
15:1e:3b:5c:c6:5a:b5:64:e3:5b:4a:b7:b8:44:5a:
bc:ae:0f:57:04:11:ec:3c:65:72:ae:d8:08:bd:ca:
5a:ba:f9:81:8a:c1:18:dd:c1:3a:15:61:a9:1a:e9:
44:b7:06:79:d7:55:d8:f4:dd:f8:8f:69:17:25:9d:
0d:58:7d:82:ff:af:81:72:1c:6c:17:3f:05:c2:59:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:91:0E:F5:DA:93:22:E4:0C:69:56:7D:F6:A8:71:7D:E9:28:6B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VB2RDvXakyLkDGlWffaocX3pKGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.47.0/24
178.215.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a0:5c:21:a7:81:c1:00:36:38:5e:94:23:51:22:41:23:4d:
8e:2d:02:5b:ea:f8:0f:2a:4c:d6:56:06:c1:5b:28:0d:e1:5e:
8d:4e:5f:58:2f:3d:f5:41:62:a4:a5:3f:dc:a7:72:34:5c:87:
3b:28:ad:1f:1c:a1:ba:1e:d8:53:06:99:3b:20:1c:61:6a:4e:
7b:9e:81:07:b2:51:07:2b:49:45:1d:7d:e4:e8:90:17:6c:06:
c6:33:9e:12:b7:09:ac:4b:69:03:0d:ba:05:e6:e6:5a:7b:db:
02:7f:09:74:12:53:6d:1a:a1:cf:ae:ac:e0:f7:8f:0b:8d:bc:
8a:4e:90:d1:d7:ba:74:98:da:a4:09:b9:e2:66:ce:0f:8e:a2:
06:f3:1c:f7:f5:cb:80:46:49:06:21:fb:52:c9:13:10:7e:4f:
07:cf:e2:5f:06:8f:a4:50:52:08:29:17:e7:a0:1a:26:9b:05:
ab:02:b0:f3:60:c0:0e:ac:60:65:26:02:61:9c:54:ad:d6:86:
bd:7b:df:71:61:17:20:49:13:50:2e:e4:fd:87:d2:28:2b:4f:
1e:7f:e1:6a:7a:25:d9:d1:a7:82:23:46:50:25:a1:aa:24:e5:
b3:5e:a0:fc:e6:8f:8e:38:01:b8:bb:eb:41:c5:f8:a9:92:ba:
8d:3e:b5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 10:55:23 2024 by rpki-client on console-fra.rpki-client.org