Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/vTQFtDnZq55PVKzOeBnwHssQVcg.roa
File: vTQFtDnZq55PVKzOeBnwHssQVcg.roa (raw, json)
Hash identifier: dMHLGkdm+NibckW+ja083ufWGxDFgUWNeFOVPZL1sLY=
Subject key identifier: BD:34:05:B4:39:D9:AB:9E:4F:54:AC:CE:78:19:F0:1E:CB:10:55:C8
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 0187E0AF1492C5053E86E01C053027001B0A
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/vTQFtDnZq55PVKzOeBnwHssQVcg.roa
Signing time: Wed 03 May 2023 08:16:23 +0000
ROA not before: Wed 03 May 2023 08:16:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24875
IP address blocks: 185.177.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 May 2023 10:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:af:14:92:c5:05:3e:86:e0:1c:05:30:27:00:1b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: May 3 08:16:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd3405b439d9ab9e4f54acce7819f01ecb1055c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:e7:f3:89:4e:69:6e:2d:b9:e8:0d:cc:b7:
4c:1d:40:60:1f:77:78:5c:58:81:b3:a9:e7:e6:61:
d1:41:ad:e2:bc:03:1c:52:2f:66:bd:2f:d9:53:31:
01:64:38:5e:a3:c5:ec:14:0f:0f:9c:63:95:40:09:
8b:6f:23:c2:ce:b0:33:06:b1:11:ab:1b:33:22:e2:
dc:47:ca:0a:b8:85:22:cd:cc:99:f1:85:e5:70:18:
1c:72:a4:39:f6:2a:a0:46:a1:38:ba:5d:bd:e8:56:
db:79:fb:ef:b3:42:97:f2:55:39:78:89:c0:26:45:
59:04:78:47:dc:b9:8c:05:6e:22:d0:82:90:bb:c5:
c9:d2:9d:f6:40:b6:62:a2:3e:57:32:64:99:bf:34:
10:4f:25:5d:a0:c6:f6:02:13:46:33:65:7e:64:3a:
22:27:63:e5:6e:22:ba:21:73:60:4b:e3:8c:14:fd:
2b:07:a8:19:09:f7:14:e9:9d:08:94:75:3d:ae:e7:
6d:95:d0:51:37:ce:b8:27:d1:e8:cd:da:06:ba:0e:
3a:79:89:41:db:2f:60:99:61:5b:28:f1:32:a0:86:
21:9c:18:c6:d3:7b:4d:e3:bb:d6:ea:2f:6b:8a:ef:
8a:4b:d3:6d:2d:b6:2b:54:26:70:90:0f:43:9d:3d:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:34:05:B4:39:D9:AB:9E:4F:54:AC:CE:78:19:F0:1E:CB:10:55:C8
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/vTQFtDnZq55PVKzOeBnwHssQVcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a3:a5:89:4f:b2:0f:78:17:2f:3e:f1:e8:a0:02:46:16:90:
30:ec:45:61:f5:2b:1a:d5:17:b7:1d:dc:6b:d7:db:6d:5c:37:
4c:a8:7f:03:2a:a6:fb:6e:bd:60:4e:d7:5d:26:c3:5e:49:d5:
1e:a6:51:2b:fb:b6:b1:bc:36:f0:ef:3c:54:39:85:c4:09:38:
12:44:85:19:a5:00:ba:ad:b9:ec:f4:5d:97:45:4b:82:dc:47:
88:b4:7e:be:bf:e2:2a:8a:6e:1f:96:66:7e:4c:a9:5b:b3:02:
5f:61:9f:7d:d6:22:05:4c:27:b5:2f:32:b6:2f:47:c2:97:8d:
8e:c6:cd:d6:93:df:be:1e:d1:8a:47:b4:b1:6a:0e:7a:ee:92:
7e:82:16:91:20:3a:0d:d1:ce:ba:c9:d4:10:bd:e8:13:a1:0e:
74:e0:28:0c:85:1e:97:0e:de:bc:33:a9:e7:dd:2e:02:e8:d0:
c4:85:f6:60:1c:45:8f:e0:ca:57:1f:6c:2a:51:3d:35:84:9a:
a1:0a:a0:07:ef:b3:98:f3:4f:f8:02:5e:9e:a3:31:18:49:c1:
3f:e5:3f:04:9a:53:22:dc:16:76:a2:59:cd:83:95:61:b8:30:
ba:a1:de:53:fb:0a:31:02:2f:73:85:84:28:d4:5f:26:b3:db:
52:b6:01:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfgrxSSxQU+huAcBTAnABsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm
OWRlNTYwHhcNMjMwNTAzMDgxNjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDM0MDViNDM5ZDlhYjllNGY1NGFjY2U3ODE5ZjAxZWNiMTA1NWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ7n84lOaW4tuegNzLdMHUBgH3d4
XFiBs6nn5mHRQa3ivAMcUi9mvS/ZUzEBZDheo8XsFA8PnGOVQAmLbyPCzrAzBrER
qxszIuLcR8oKuIUizcyZ8YXlcBgccqQ59iqgRqE4ul296Fbbefvvs0KX8lU5eInA
JkVZBHhH3LmMBW4i0IKQu8XJ0p32QLZioj5XMmSZvzQQTyVdoMb2AhNGM2V+ZDoi
J2PlbiK6IXNgS+OMFP0rB6gZCfcU6Z0IlHU9rudtldBRN864J9HozdoGug46eYlB
2y9gmWFbKPEyoIYhnBjG03tN47vW6i9riu+KS9NtLbYrVCZwkA9DnT0wrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL00BbQ52aueT1SszngZ8B7LEFXIMB8GA1UdIwQY
MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt
ZDkzMzdkYjM5ZDFmLzEvdlRRRnREblpxNTVQVkt6T2VCbndIc3NRVmNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm
LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubHkMA0G
CSqGSIb3DQEBCwUAA4IBAQCoo6WJT7IPeBcvPvHooAJGFpAw7EVh9Ssa1Re3Hdxr
19ttXDdMqH8DKqb7br1gTtddJsNeSdUeplEr+7axvDbw7zxUOYXECTgSRIUZpQC6
rbns9F2XRUuC3EeItH6+v+Iqim4flmZ+TKlbswJfYZ991iIFTCe1LzK2L0fCl42O
xs3Wk9++HtGKR7Sxag567pJ+ghaRIDoN0c66ydQQvegToQ504CgMhR6XDt68M6nn
3S4C6NDEhfZgHEWP4MpXH2wqUT01hJqhCqAH77OY80/4Al6eozEYScE/5T8EmlMi
3BZ2olnNg5VhuDC6od5T+woxAi9zhYQo1F8ms9tStgFA
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:30 2024 by rpki-client on console-ams.rpki-client.org