Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/veaBnZYrYlotBBMv8rX_Wbzc8gw.roa
File: veaBnZYrYlotBBMv8rX_Wbzc8gw.roa (raw, json)
Hash identifier: JGfG9/Cy8tETJcyIvU7PLIqF4KOBS64gSEOBL/bN1hE=
Subject key identifier: BD:E6:81:9D:96:2B:62:5A:2D:04:13:2F:F2:B5:FF:59:BC:DC:F2:0C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD116FC3EDB54CB2A14E992A8FFCC8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/veaBnZYrYlotBBMv8rX_Wbzc8gw.roa
Signing time: Tue 02 Jan 2024 06:29:40 +0000
ROA not before: Tue 02 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216078
IP address blocks: 194.48.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 13:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:11:6f:c3:ed:b5:4c:b2:a1:4e:99:2a:8f:fc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bde6819d962b625a2d04132ff2b5ff59bcdcf20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:37:39:97:bc:21:5b:8a:c6:c9:c9:35:9b:e1:
3e:05:61:aa:44:5c:70:5b:dd:c1:69:3d:e6:14:f7:
1b:e0:2a:b4:9f:f8:d7:dc:ad:6b:08:d5:77:2d:ad:
a6:69:d8:1a:61:bc:d9:2f:43:d5:29:a3:18:ca:cd:
4a:8b:c0:3c:0f:c2:6f:ef:24:62:49:53:26:c6:82:
36:07:dd:56:7d:c4:be:97:aa:d5:31:a9:3f:f8:8e:
90:42:1c:8d:fe:11:a3:bb:4c:dc:26:cc:db:dd:4c:
83:72:92:43:cb:64:95:93:c9:42:ea:a2:bb:72:c4:
e6:1f:f4:d2:9b:cf:4e:bd:12:70:9b:2e:5e:cb:16:
64:09:67:f8:7b:5d:c1:cd:07:4b:01:bf:29:af:1d:
3b:5d:ce:e8:44:55:ed:0b:92:eb:bf:96:da:17:71:
78:d4:d6:3c:0e:9f:c4:80:d2:da:60:8e:dc:02:95:
fe:15:9c:eb:f1:0a:f0:e6:ac:04:1f:9f:39:f6:6a:
c9:31:76:02:44:e2:a1:98:65:5f:fb:bc:79:e4:97:
b3:34:60:54:57:17:c6:c5:a4:5e:8a:c7:36:f3:48:
df:6d:3b:b6:8c:a8:ef:10:62:7d:81:42:52:7d:eb:
f0:97:a3:18:82:36:32:48:b5:52:ac:9f:bf:92:83:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E6:81:9D:96:2B:62:5A:2D:04:13:2F:F2:B5:FF:59:BC:DC:F2:0C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/veaBnZYrYlotBBMv8rX_Wbzc8gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
01:78:f2:95:a8:a4:bb:9d:cc:41:ab:48:62:20:91:e8:01:38:
e5:4a:17:c8:97:91:57:9e:c0:a9:71:6b:ef:0a:2a:d0:30:57:
f2:3c:a2:0f:50:01:fa:8c:d4:81:2f:0d:42:4f:65:d6:ff:48:
e4:45:f4:a4:e8:62:bd:0b:a2:7e:08:8e:43:9c:a0:31:2e:75:
7c:68:3b:e2:d9:e8:73:73:84:08:2d:55:ed:51:4d:f8:cb:7d:
17:87:a6:03:96:d4:37:36:ac:aa:dd:7a:6b:63:b9:1d:5e:7f:
0f:59:ba:3b:24:76:2b:3d:ca:04:97:da:44:03:22:37:57:92:
69:6c:36:dc:8e:00:d9:59:bf:a4:d2:ce:ea:5c:31:29:d6:c7:
df:42:b3:c4:5e:ed:e8:97:d6:41:46:b6:2b:3e:ce:8c:7c:91:
df:71:cc:e9:19:5e:c6:2e:c9:de:9f:34:d5:1b:27:66:1b:f5:
1d:c1:a0:75:33:c9:6b:01:81:71:9c:56:ce:a0:7f:ef:b0:12:
14:7f:4e:ba:87:91:41:e6:80:6a:bb:95:12:92:23:36:cd:a2:
9b:35:f0:86:44:49:89:20:da:99:1b:ef:12:91:03:28:d3:52:
b3:c4:77:83:eb:d1:f4:98:04:6c:33:23:7a:05:91:cb:8e:57:
30:0e:02:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 17:52:29 2024 by rpki-client on console-ams.rpki-client.org