Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ViOnuxoDG4FDJ_tumCYr6qPiOb0.roa
File: ViOnuxoDG4FDJ_tumCYr6qPiOb0.roa (raw, json)
Hash identifier: JYlXWsBD9Oa41H25zdVKoKM62CxFm2kPtgQ36R1zvb8=
Subject key identifier: 56:23:A7:BB:1A:03:1B:81:43:27:FB:6E:98:26:2B:EA:A3:E2:39:BD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018756127667267089071DF38B9DD6E2FA1E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ViOnuxoDG4FDJ_tumCYr6qPiOb0.roa
Signing time: Thu 06 Apr 2023 10:17:43 +0000
ROA not before: Thu 06 Apr 2023 10:17:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 94.156.6.0/24 maxlen: 24
185.216.68.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.42.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Apr 2023 07:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:12:76:67:26:70:89:07:1d:f3:8b:9d:d6:e2:fa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 6 10:17:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5623a7bb1a031b814327fb6e98262beaa3e239bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:17:e1:82:af:5b:85:78:fd:ec:b2:97:a4:
7f:c2:90:73:c2:6b:b4:e5:7e:17:63:c7:00:62:a0:
f9:1e:8d:58:fc:65:4b:aa:d8:50:c3:0e:5f:25:fd:
b5:a3:8d:2a:e1:e2:6f:23:aa:6c:84:28:11:a3:82:
11:49:f7:08:b8:68:a8:1b:5e:64:9b:48:b0:8f:32:
e9:9d:b9:ce:fc:1f:e6:d9:e9:f0:f7:85:ea:93:69:
3d:75:90:8e:71:0e:c6:69:72:75:53:41:3d:40:ce:
0f:2a:84:37:aa:2f:ff:07:fd:60:fa:6e:ca:a1:34:
9d:73:8b:f1:2a:75:fc:33:7a:90:15:b7:5f:f6:6e:
ab:89:19:73:ac:94:84:ad:b4:a9:63:38:1f:6d:0e:
45:70:62:a2:7e:42:b8:62:f0:31:b0:e4:68:81:2f:
57:69:e5:aa:1f:82:06:0a:a7:f4:a7:6e:79:85:1d:
b2:54:cc:23:83:54:23:e3:f5:88:74:c9:31:8c:38:
49:c8:2d:f1:95:dd:a3:bd:69:75:a5:b6:ce:06:26:
34:cb:4e:88:fa:5d:b7:72:eb:9f:4f:a6:83:8a:53:
0f:93:2b:94:6c:6f:09:b8:24:fa:7a:73:25:de:c1:
5d:3f:26:ae:95:b2:b7:fa:8e:48:d4:6b:3d:d7:90:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:23:A7:BB:1A:03:1B:81:43:27:FB:6E:98:26:2B:EA:A3:E2:39:BD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ViOnuxoDG4FDJ_tumCYr6qPiOb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.51.0/24
94.156.6.0/24
185.216.68.0/24
193.42.33.0/24
193.58.122.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a9:d2:6c:ba:c5:b6:81:d9:37:2f:2a:e7:96:cc:88:a1:06:
26:6a:a7:aa:4d:86:3f:bb:04:3e:de:4d:a3:06:b2:64:11:50:
99:12:96:0c:db:ad:d3:b4:d9:25:c1:7f:f7:e4:35:cb:8b:e6:
4b:83:f9:f0:7f:eb:a4:4c:00:53:17:d7:1f:0a:24:42:a1:66:
b8:bf:c0:5d:24:8c:81:80:1a:f1:89:f7:38:4f:cc:ef:c1:37:
38:8f:d3:fe:17:d9:1a:e6:e0:23:db:07:20:34:1e:eb:37:08:
9e:ee:a8:2e:f6:35:56:ba:41:85:e0:27:3f:ac:6c:50:1b:10:
fa:c1:af:95:36:fd:2d:40:63:03:f0:f1:68:3c:9f:90:41:60:
ad:bd:9b:67:25:57:f9:1c:c5:5f:be:5c:ea:e7:ca:35:46:88:
aa:8a:c4:32:29:98:71:c8:84:00:78:79:0b:04:b9:c5:00:16:
f9:b7:52:2f:c2:46:34:21:fa:87:8d:9a:bd:28:13:69:cc:bb:
fe:c4:3e:e6:e2:34:ce:40:3f:98:08:f9:25:69:bf:21:31:13:
4d:5a:4f:56:b5:88:aa:8f:09:45:48:c1:e0:02:a7:fd:e5:b2:
d1:4f:9b:bc:f0:15:5c:06:17:0d:6a:a8:54:8e:e7:d3:ff:f5:
08:84:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:08 2024 by rpki-client on console-fra.rpki-client.org