Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vFiM57lhllXuaH6dE1phTUHWL08.roa
File: vFiM57lhllXuaH6dE1phTUHWL08.roa (raw, json)
Hash identifier: XbNKyIEiMeJ0yNMtGr+BfT0r4xq+yI7HHngyCO3h6NI=
Subject key identifier: BC:58:8C:E7:B9:61:96:55:EE:68:7E:9D:13:5A:61:4D:41:D6:2F:4F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CE7DDE6CE6E75DF6362C436E5E39FC307
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vFiM57lhllXuaH6dE1phTUHWL08.roa
Signing time: Mon 08 Jan 2024 06:58:48 +0000
ROA not before: Mon 08 Jan 2024 06:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 91.92.26.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
45.8.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 09:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:dd:e6:ce:6e:75:df:63:62:c4:36:e5:e3:9f:c3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 8 06:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc588ce7b9619655ee687e9d135a614d41d62f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:65:ef:09:f1:c6:d4:44:8a:fd:d1:ff:dd:
bb:89:c2:20:1e:15:97:55:2c:55:28:21:5d:fe:22:
6c:99:7e:e6:31:85:31:fb:9e:ea:52:18:8f:d8:46:
66:1b:b9:dc:f1:69:1c:23:aa:10:c1:f0:46:7b:28:
fa:7f:7d:38:cb:82:40:e6:3e:01:c2:9e:25:43:8d:
47:f6:8b:6e:f2:85:72:ff:1f:71:e4:e9:a8:33:0d:
2f:74:b2:cf:c6:78:3e:fe:ec:4f:c9:7e:a5:5b:a5:
09:39:20:3e:2c:a5:25:00:c8:23:34:a9:31:f2:d5:
3b:59:8f:8e:80:af:4c:27:24:00:ea:b8:c1:bd:a1:
77:28:17:44:af:e9:97:47:ca:ca:a1:e1:2a:11:c7:
50:38:75:ca:f5:df:88:d5:bf:2f:b2:d2:17:00:02:
d0:68:9c:82:99:87:05:99:88:51:ae:17:2a:74:bf:
4d:16:04:e1:0f:19:d2:4c:a5:ab:e7:70:c8:d1:9f:
84:48:96:37:d2:54:00:07:0b:d6:12:b9:84:7b:95:
0e:60:ea:07:0c:24:cb:b7:39:cc:9e:33:29:19:c9:
db:2d:f1:2b:c5:7b:b3:97:62:c7:cc:10:09:78:a0:
e9:c9:5a:3a:2f:ca:ba:e6:89:c1:85:8a:e2:47:77:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:58:8C:E7:B9:61:96:55:EE:68:7E:9D:13:5A:61:4D:41:D6:2F:4F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vFiM57lhllXuaH6dE1phTUHWL08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
87.120.192.0/23
91.92.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:83:8f:cf:6a:fc:8e:9d:69:83:81:39:48:8e:e3:34:0f:df:
86:43:02:44:77:e2:2e:be:1c:2f:4c:d1:7d:1d:89:8a:e1:58:
dd:97:78:78:21:f1:d9:70:ef:d1:14:1e:3d:9d:21:aa:a4:b7:
93:a9:0b:7b:24:40:36:54:28:21:6e:65:64:82:37:1b:e9:2b:
72:71:c1:a6:e0:de:13:69:87:8e:79:b2:b8:59:66:f8:5e:a2:
4a:5a:00:e6:46:c9:1e:53:ed:af:c3:eb:14:96:f6:4b:f3:2c:
3a:d4:67:70:0c:bb:15:01:46:db:6c:2d:23:05:4b:c4:f8:42:
88:7b:e0:dc:01:63:f1:c7:f5:e2:26:6f:c7:fe:ee:0d:2d:1f:
85:a5:83:b2:56:9d:9f:d8:8b:c5:8b:ff:5a:3a:7c:73:4f:aa:
d2:42:56:6d:3b:ac:46:3c:d3:51:2c:a3:e7:73:18:69:dc:ad:
d8:4e:53:04:da:09:5e:75:55:68:97:f9:79:3e:ed:f1:49:ff:
8c:fa:28:32:64:63:16:e0:65:24:cc:c9:de:84:9f:af:c2:ad:
e0:ec:b2:17:67:7f:fb:95:39:01:4d:47:83:43:55:ee:a8:87:
5f:32:9f:b8:a3:4e:d5:9c:ac:04:31:83:0c:a3:e3:c0:00:15:
78:d6:87:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:52:10 2024 by rpki-client on console-ams.rpki-client.org