Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ves6WAkm6KHsBzzCZsGAY_xv7IQ.roa
File: Ves6WAkm6KHsBzzCZsGAY_xv7IQ.roa (raw, json)
Hash identifier: xOmE5R7Y8sOo3u1CNn8sLCx6VuzNfGfa4WFnjwNZclk=
Subject key identifier: 55:EB:3A:58:09:26:E8:A1:EC:07:3C:C2:66:C1:80:63:FC:6F:EC:84
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191E5D8B060D502070EE375E97E1262A3DD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ves6WAkm6KHsBzzCZsGAY_xv7IQ.roa
Signing time: Thu 12 Sep 2024 10:47:48 +0000
ROA not before: Thu 12 Sep 2024 10:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.121.86.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
93.123.113.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 20:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:d8:b0:60:d5:02:07:0e:e3:75:e9:7e:12:62:a3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 12 10:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55eb3a580926e8a1ec073cc266c18063fc6fec84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:55:40:31:1e:e0:7b:1b:ad:b5:d7:14:a5:
2f:6f:31:19:98:8d:54:44:a0:ed:6b:2c:0e:3a:bc:
11:18:14:5e:90:de:6b:5f:13:c7:97:28:41:86:63:
b7:32:4e:73:70:b4:55:3b:e3:b5:53:e6:2b:3e:88:
34:84:2d:3a:d2:81:2f:3d:05:a8:a7:5e:63:80:90:
39:61:81:3c:9e:51:18:d6:52:b2:a6:99:c2:d3:ae:
56:fd:4c:d2:9b:a5:cb:05:b9:0f:06:bc:27:91:1d:
fe:48:ad:77:03:c0:7f:b5:9f:58:f6:21:d3:10:44:
9a:7d:ad:16:22:a2:a5:ef:79:cd:f3:cf:20:d7:7d:
c9:9a:1d:72:58:97:c9:c8:57:28:fe:90:6c:20:90:
70:90:8d:6c:03:9c:f2:55:62:53:6e:fa:26:b1:3e:
3e:a5:ea:a1:4e:7c:4f:2d:b3:55:22:5b:9c:6c:bf:
b9:98:39:fe:a7:ad:4c:ae:1e:89:6a:ce:96:05:4e:
d9:c7:03:e7:39:8c:18:b1:bb:e3:b8:b8:32:7c:a3:
e8:bd:9a:95:e8:54:22:f9:4e:0c:9b:cf:44:a8:48:
6d:70:95:c4:e9:23:59:c8:89:ec:d8:57:85:08:77:
c0:ea:36:85:33:6d:bb:2d:e3:d0:01:f7:db:06:6b:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EB:3A:58:09:26:E8:A1:EC:07:3C:C2:66:C1:80:63:FC:6F:EC:84
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ves6WAkm6KHsBzzCZsGAY_xv7IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
87.121.86.0/24
93.123.74.0/23
93.123.113.0/24
178.215.227.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
82:30:b8:be:98:39:d4:3a:de:b5:67:41:e6:b1:a4:31:ba:d0:
0e:66:68:a0:f9:5d:42:93:f1:6d:2a:3c:14:61:d0:7b:04:cf:
fe:0d:63:f3:a5:de:33:08:77:c3:c4:d1:87:7e:28:14:da:1d:
f4:ec:33:90:56:9a:a0:47:a1:fd:04:70:98:c0:eb:b8:85:41:
1d:fc:97:dc:d9:ee:ca:cd:24:9c:eb:42:c9:45:10:ca:1f:49:
b1:2f:22:4e:c8:6b:ff:8a:a9:3e:f4:78:60:a2:cd:31:1d:b3:
e7:3b:e8:3d:ba:66:9c:79:25:5e:b2:68:89:7e:20:c3:bf:a8:
02:43:ff:be:67:0d:31:37:df:fe:12:82:56:05:0b:5b:c0:9b:
d5:09:3f:2e:4b:05:cb:83:41:62:a9:07:43:11:4d:2a:c8:0b:
e7:3e:12:98:97:22:48:6a:ef:7b:1c:e7:2e:82:53:95:ec:d7:
96:0c:16:e1:af:c1:5e:ad:ba:b1:47:d6:2b:b7:56:0c:ca:f8:
49:3e:60:4f:bb:9f:19:4c:4d:57:ca:6b:6d:0a:a1:aa:05:4c:
ef:47:21:f9:16:70:fe:5f:ef:91:d7:dc:a2:a7:7f:82:56:d5:
23:44:2d:42:0a:99:28:f5:c8:0a:8d:5b:f2:2b:d6:8a:6d:4d:
d6:1f:8d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 00:29:55 2024 by rpki-client on console-ams.rpki-client.org