Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VMQ4I2rPm9jB7bNtZlGewCtDla4.roa
File: VMQ4I2rPm9jB7bNtZlGewCtDla4.roa (raw, json)
Hash identifier: 6XvSFG1DbbLIUhvTZBf7tGVw5+vkiVolIZ0hPFvkfAk=
Subject key identifier: 54:C4:38:23:6A:CF:9B:D8:C1:ED:B3:6D:66:51:9E:C0:2B:43:95:AE
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF983D099F9E3C913F75375AC64C2E4
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VMQ4I2rPm9jB7bNtZlGewCtDla4.roa
Signing time: Mon 02 Jan 2023 00:55:01 +0000
ROA not before: Mon 02 Jan 2023 00:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200024
IP address blocks: 85.196.136.0/24 maxlen: 24
151.251.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:83:d0:99:f9:e3:c9:13:f7:53:75:ac:64:c2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54c438236acf9bd8c1edb36d66519ec02b4395ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:5c:15:3e:bb:57:b4:e0:f3:0f:fc:7b:ad:
b1:2b:4f:87:35:53:97:33:5d:d7:a2:9a:a7:80:d3:
ec:fa:e8:a1:c0:8c:46:89:d0:d6:11:15:71:47:ea:
3e:53:05:72:20:78:59:22:6a:e5:0a:9f:7e:13:d2:
86:f1:0b:54:c4:93:e0:51:91:07:b1:e1:d7:8a:dc:
c5:42:07:bd:42:a7:b0:56:61:24:9e:f3:fa:98:c1:
6c:24:10:ca:da:d3:5f:62:a7:c7:89:8d:a8:0a:33:
ad:b4:bb:cf:2c:05:ec:ab:d1:25:8b:82:5a:c5:52:
0c:5b:96:5b:09:60:b9:1c:d1:e7:b9:2e:bb:a9:38:
05:c9:8e:98:02:f8:d8:41:ff:18:24:b7:ec:5f:90:
50:38:f3:34:8d:08:db:50:f4:0b:ae:2f:64:03:3c:
3d:bc:b7:55:6d:a6:8e:c4:e1:31:b4:33:ad:3d:ce:
39:e8:bd:9b:2f:cc:b8:6f:7b:6d:cc:fc:bc:df:94:
8f:3a:aa:18:bf:3a:0c:d3:40:9a:45:ce:d0:1e:18:
52:bc:cb:f2:b3:02:9f:9c:ee:22:06:64:c9:43:a4:
f4:a2:d8:a3:27:68:29:12:ce:b3:3b:07:99:85:47:
19:68:14:30:fa:b5:3b:ad:5c:aa:69:ba:0c:ee:3f:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C4:38:23:6A:CF:9B:D8:C1:ED:B3:6D:66:51:9E:C0:2B:43:95:AE
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VMQ4I2rPm9jB7bNtZlGewCtDla4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.196.136.0/24
151.251.38.0/24
Signature Algorithm: sha256WithRSAEncryption
26:89:e4:bf:d8:ed:d7:6a:ed:0c:49:6a:7f:60:21:3d:15:5a:
86:08:a0:1e:6c:16:39:81:b6:04:41:a7:9f:5f:2e:16:51:a4:
d3:83:ac:ad:71:7d:01:62:61:10:71:83:f7:43:a3:db:25:01:
13:4a:2a:7a:b3:c8:89:60:31:7b:d7:b7:76:d4:89:e4:f7:3d:
f8:63:a7:bf:e1:42:7d:df:75:23:44:fa:96:4c:e0:f9:2f:e8:
47:92:e5:b0:bc:3a:0b:16:ad:02:c4:87:1f:e0:51:d3:cc:af:
67:6a:19:e7:fb:b6:c1:44:68:9c:9b:db:41:08:66:86:71:05:
34:27:56:26:0d:e4:02:f3:6a:ea:67:a4:71:fc:88:46:fa:3e:
4d:26:72:f6:0e:b7:8d:31:75:39:06:24:27:13:17:36:41:11:
60:4b:90:aa:27:7f:47:04:2c:66:4a:4a:31:b7:a0:fb:13:6e:
e2:17:c6:e2:7e:38:ed:2e:75:88:f6:73:09:51:93:02:e1:07:
01:ee:3e:27:9e:a7:05:95:0d:7b:d0:96:f5:16:b7:c0:0f:74:
3d:d4:15:70:5f:c9:36:aa:97:85:40:f6:ce:74:a7:6a:e6:d6:
87:2d:e4:7f:38:39:08:80:9a:39:61:7b:b5:ad:5e:31:5b:05:
eb:ce:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org