Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vE4ANbAt4aLufeCy7chYkTB8qsU.roa
File: vE4ANbAt4aLufeCy7chYkTB8qsU.roa (raw, json)
Hash identifier: TduQrDi+gP1ZYQcYwW0cvIEv0gwDPycC9LXT5Bj18jA=
Subject key identifier: BC:4E:00:35:B0:2D:E1:A2:EE:7D:E0:B2:ED:C8:58:91:30:7C:AA:C5
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018570676B17ED7AC4609AF2D38724D13836
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vE4ANbAt4aLufeCy7chYkTB8qsU.roa
Signing time: Mon 02 Jan 2023 02:55:03 +0000
ROA not before: Mon 02 Jan 2023 02:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209243
IP address blocks: 195.22.156.0/24 maxlen: 24
195.22.157.0/24 maxlen: 24
80.64.216.0/24 maxlen: 24
80.64.217.0/24 maxlen: 24
45.157.34.0/24 maxlen: 24
194.146.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 15:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:6b:17:ed:7a:c4:60:9a:f2:d3:87:24:d1:38:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 2 02:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc4e0035b02de1a2ee7de0b2edc85891307caac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ff:4f:d2:d8:88:77:3d:cf:93:6d:a2:cc:4a:
9c:5c:12:8d:f9:a1:bf:a0:57:1c:3e:fa:4a:15:d5:
48:e6:1a:20:db:9f:78:8d:60:bc:b7:6a:7f:98:69:
8d:9e:96:9c:cd:99:59:c5:51:cc:42:d3:2e:c2:ce:
f8:39:48:e2:a5:9e:b7:1f:dd:70:1c:0e:a1:44:c2:
73:61:16:3d:f2:83:bc:a0:da:4f:6e:d3:71:06:36:
fd:8e:3f:00:36:2e:1d:54:4d:ba:b9:e5:16:c7:79:
96:4a:5f:4a:13:da:6f:01:c3:79:20:7b:f7:1a:65:
fa:10:79:c0:2e:c4:a5:d3:c5:61:f3:10:67:3a:c1:
10:8f:99:71:7d:e5:cf:2e:80:db:67:50:ea:09:2f:
bd:e4:6c:33:80:db:c7:32:1c:75:ea:41:1a:39:c9:
67:08:b3:fb:53:6b:ac:32:ab:f2:ce:02:c6:c5:44:
d8:1b:7b:2b:0e:7c:33:93:52:40:07:94:df:a7:11:
87:f1:b2:ec:3a:bc:55:46:dc:e0:cd:e7:a9:39:90:
89:5b:85:43:ec:ac:00:36:f5:83:e5:02:cf:fe:1b:
95:df:e5:d9:c1:9f:22:b2:1a:fd:3f:47:e2:0d:a4:
8a:a9:64:58:79:3b:4a:2e:1d:99:58:ca:25:bc:75:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4E:00:35:B0:2D:E1:A2:EE:7D:E0:B2:ED:C8:58:91:30:7C:AA:C5
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vE4ANbAt4aLufeCy7chYkTB8qsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.34.0/24
80.64.216.0/23
194.146.49.0/24
195.22.156.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:4b:f2:8f:4b:a0:b3:f4:99:d9:5a:79:00:56:b5:9a:df:2c:
bf:cc:96:fb:04:87:f5:1b:93:05:b2:a7:b9:b2:0c:5c:78:ae:
49:d8:62:71:88:c8:a5:1f:f1:f8:b8:0e:b9:15:7f:53:75:f5:
2f:a3:90:52:56:d6:ab:f9:2e:22:87:74:df:c7:33:fd:6a:d6:
83:14:da:43:67:7e:c1:27:71:46:43:b4:fb:ec:86:de:da:1b:
30:7c:40:3a:12:b1:6b:21:a9:9d:27:f2:49:e0:d7:7d:7c:75:
36:e0:70:d5:86:d4:6f:58:c3:08:af:c9:60:3f:2a:f8:d7:5a:
46:ad:6b:b6:5b:81:95:8b:a8:05:63:8f:4d:8f:6d:44:95:0b:
7f:16:b0:43:53:ed:bd:4c:aa:d0:71:ac:9a:94:a6:b4:89:1a:
0f:70:03:46:7c:e4:8e:28:cd:6c:9c:30:2c:c9:0c:04:91:9f:
df:19:70:9f:da:66:d6:fa:11:4f:6e:0e:3f:2f:83:4f:7c:3d:
42:d5:08:3e:f4:e1:63:54:cf:7d:8a:89:24:3d:7d:cf:1e:50:
8e:1a:1e:c9:42:70:95:4c:4f:a3:d3:7b:9a:28:81:8e:dd:1c:
53:8d:0d:9b:5c:4f:c7:8b:41:9a:75:de:76:f7:e2:ff:44:df:
86:01:f5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:26 2024 by rpki-client on console-fra.rpki-client.org