Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vfnVRiRRapaCOTUMH5YZj8NTPqU.roa
File: vfnVRiRRapaCOTUMH5YZj8NTPqU.roa (raw, json)
Hash identifier: DmRAvFPOVcgflks06ZxkpEBv3HUUM5TRn1wxG1r6Bh0=
Subject key identifier: BD:F9:D5:46:24:51:6A:96:82:39:35:0C:1F:96:19:8F:C3:53:3E:A5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01900AD73688BB520D6E9EE4C2C3F4D15AE4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vfnVRiRRapaCOTUMH5YZj8NTPqU.roa
Signing time: Wed 12 Jun 2024 05:06:34 +0000
ROA not before: Wed 12 Jun 2024 05:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.253.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 08:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0a:d7:36:88:bb:52:0d:6e:9e:e4:c2:c3:f4:d1:5a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 12 05:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdf9d54624516a968239350c1f96198fc3533ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:6b:fb:38:8d:87:8b:28:cf:9c:f9:5a:3a:
30:6d:8d:73:d4:25:17:cb:9c:f0:7d:dd:a2:8b:f3:
77:01:ec:44:a2:8b:e2:a2:93:03:29:75:2c:43:12:
17:71:59:18:ff:a2:47:f9:d5:18:49:a4:65:d1:c2:
48:9a:49:ce:0e:7b:9f:bb:81:c1:cc:f8:57:c5:7a:
f0:c4:1b:c6:22:d4:7b:60:2f:25:c3:8b:ce:f6:9b:
4c:a1:16:96:f5:83:2b:6a:17:de:18:31:16:51:b5:
7c:e6:d6:db:9c:5e:a8:d9:2e:21:15:f1:fd:85:8e:
59:b0:1f:f0:ea:48:2d:9f:0b:6b:18:13:f8:68:ae:
f6:b0:7c:59:0c:8c:13:1d:d1:25:4b:d9:df:61:f9:
1f:7f:7c:36:d0:aa:61:4f:b8:1d:03:3a:a2:11:a0:
eb:8e:c9:1f:aa:0a:23:1f:f1:62:c8:4f:b9:ca:f0:
e3:ea:30:3f:8b:fb:3d:8e:e4:12:1b:7c:52:68:a9:
42:fb:7c:c0:bf:3f:6f:db:12:56:e8:1d:0a:89:c6:
1f:05:eb:4a:e7:b3:cc:69:99:87:50:0c:9f:75:20:
6f:3c:cb:40:81:1c:01:22:69:65:dc:12:83:3b:6e:
18:69:fc:d1:02:7f:ac:1c:53:98:71:09:24:a8:63:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:D5:46:24:51:6A:96:82:39:35:0C:1F:96:19:8F:C3:53:3E:A5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vfnVRiRRapaCOTUMH5YZj8NTPqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.88.64.0/24
79.110.51.0/24
87.120.166.0/24
94.154.162.0/24
109.206.239.0/24
178.215.227.0/24
185.222.161.0-185.222.162.255
185.246.223.0/24
193.37.40.0/24
194.55.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:25:f4:6f:ca:c8:0f:3b:9d:47:b2:11:46:52:3b:9e:60:93:
3b:39:bc:44:b1:4a:66:d0:9f:54:1f:b2:db:df:35:27:70:7a:
bb:e6:01:70:79:49:32:d0:eb:e5:dd:66:6b:ec:df:a8:88:a1:
ab:d1:2d:dc:2c:9e:7e:7c:ea:26:7f:f7:27:7f:8f:c5:b5:9d:
27:57:77:6a:35:43:cc:a3:23:ae:61:dd:36:3f:8f:81:b3:dd:
e0:3d:8c:e6:e7:8e:51:b0:fb:e6:0d:28:c6:c1:56:55:fb:47:
f6:8a:f0:74:1d:8d:78:2b:dc:82:f9:01:1a:98:88:a5:20:f7:
7c:cc:cb:ef:2d:5d:58:62:08:ce:87:10:a4:00:80:ed:17:f4:
09:8d:4e:31:e0:59:36:a8:3a:fb:45:be:1e:32:2b:04:f6:5c:
8d:2e:f3:79:1f:e0:b5:9e:36:64:87:bc:2c:f2:87:25:78:24:
72:37:a4:c9:bd:9d:fd:6c:a2:9b:5b:db:91:b6:6e:47:1b:31:
7c:f4:14:94:ec:3a:7c:3f:70:3e:c9:7e:c6:c4:d9:78:b1:39:
3f:f2:dc:f3:30:59:a6:d5:b5:c2:6d:ec:6f:e9:71:2b:ec:6d:
5e:19:e4:59:86:94:d4:fb:71:47:04:cc:09:34:ec:09:fe:77:
e4:33:b9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:53:23 2024 by rpki-client on console-ams.rpki-client.org