Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vHFrFjbbQSxkhnqX-v52pdxnUGI.roa
File: vHFrFjbbQSxkhnqX-v52pdxnUGI.roa (raw, json)
Hash identifier: 2upMJykfEHmhFTJyZ4NLOuMnjFG4/Ubgg5JzTPdEsdA=
Subject key identifier: BC:71:6B:16:36:DB:41:2C:64:86:7A:97:FA:FE:76:A5:DC:67:50:62
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FED3339490BA02A9FF358613E8F104D74
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vHFrFjbbQSxkhnqX-v52pdxnUGI.roa
Signing time: Thu 06 Jun 2024 10:58:28 +0000
ROA not before: Thu 06 Jun 2024 10:58:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147186
IP address blocks: 45.129.86.0/23 maxlen: 24
82.115.211.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 06:14:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:33:39:49:0b:a0:2a:9f:f3:58:61:3e:8f:10:4d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 6 10:58:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc716b1636db412c64867a97fafe76a5dc675062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:1a:e7:34:fb:04:4c:ca:23:fa:b9:54:0a:
b1:4b:55:ff:85:3f:0a:56:9f:04:6b:51:fd:ba:8b:
aa:fa:ea:9d:f2:04:b2:f2:5f:f0:bc:c8:1e:56:d8:
6d:2c:a2:3e:2f:72:8c:25:db:a6:99:86:7d:97:54:
91:35:ed:ac:79:c6:2b:40:16:2a:d5:a7:d3:3d:0c:
5f:0d:d8:88:ef:36:0e:6d:1e:00:07:a7:37:1c:8a:
2d:6b:1d:ee:a7:91:8e:88:b1:19:5f:d6:33:d2:3e:
b8:dc:09:8a:52:b4:23:9c:41:23:30:de:f1:d1:d3:
a7:49:a5:3e:8c:f0:28:29:3c:a7:ed:b9:a8:0a:69:
1b:c9:26:a1:e2:2d:97:5d:29:58:4b:d9:c2:2c:46:
26:45:56:36:44:ab:49:53:82:79:46:88:87:30:83:
d7:1b:4d:ae:67:6f:00:60:a1:56:df:cf:7c:e8:53:
07:a3:02:c4:4f:22:1e:8b:f3:41:f9:c3:0a:d0:d8:
cf:47:bb:be:b0:bd:20:f7:5d:f0:be:62:24:81:a7:
7e:1c:ab:9e:cd:94:a7:10:64:af:56:66:de:00:a7:
27:59:a5:96:16:49:71:1b:2f:16:6c:09:65:22:8c:
49:35:ab:d1:35:03:82:b0:96:2d:55:d9:cd:cf:37:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:71:6B:16:36:DB:41:2C:64:86:7A:97:FA:FE:76:A5:DC:67:50:62
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vHFrFjbbQSxkhnqX-v52pdxnUGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.86.0/23
82.115.211.0/24
94.154.161.0/24
185.252.176.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
98:12:ed:30:e0:3b:84:73:78:82:cb:bf:ff:9f:04:d3:e0:60:
26:9c:a3:64:9f:b4:42:82:f7:54:dc:e3:3c:c6:a8:46:c7:dd:
60:df:25:f8:91:fa:ee:11:18:6a:49:71:1b:a8:ba:9a:70:56:
4c:9b:db:85:e9:25:be:51:64:b5:aa:e1:a3:26:b2:69:b1:a6:
47:08:bd:d3:65:04:ae:0d:4f:a5:7c:2d:09:02:c0:c5:b3:d9:
15:43:73:09:3a:99:d6:52:4b:a1:11:4a:58:3a:59:30:de:04:
4b:0d:07:af:66:a6:70:40:53:95:36:29:40:91:bd:d1:e3:ed:
8c:ca:d7:29:fd:b1:50:c5:54:7c:2f:ea:84:47:97:9c:88:37:
65:34:44:6f:e3:d0:30:dd:a7:ca:dc:11:74:54:1c:dd:bd:c4:
38:7d:79:1f:46:37:e9:1e:3b:cf:9a:2b:44:51:90:d1:3f:17:
66:90:4b:98:0f:fd:85:95:14:7d:06:57:72:f1:47:d4:a8:0c:
8d:2d:8e:65:e7:d9:f6:63:f5:4d:a8:cb:a1:59:15:31:7b:45:
2a:6a:c8:8c:c6:0f:dc:7e:28:0e:bd:d2:82:a3:61:4c:bf:e9:
bc:ef:4a:54:34:14:c6:e3:de:eb:5c:72:36:5b:d5:28:cd:bd:
21:6d:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 08:50:53 2024 by rpki-client on console-fra.rpki-client.org