Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vkeHAHde_jpDPIvz3IBYK_Ysao8.roa
File: vkeHAHde_jpDPIvz3IBYK_Ysao8.roa (raw, json)
Hash identifier: NP4x2+zxwnKTl/lZZV1wz5Y9o6NhR2djunpwjgC6GtU=
Subject key identifier: BE:47:87:00:77:5E:FE:3A:43:3C:8B:F3:DC:80:58:2B:F6:2C:6A:8F
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018E79AA45AF6223591BFCE25D84F8959062
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vkeHAHde_jpDPIvz3IBYK_Ysao8.roa
Signing time: Tue 26 Mar 2024 07:29:45 +0000
ROA not before: Tue 26 Mar 2024 07:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215281
IP address blocks: 185.103.101.0/24 maxlen: 24
193.233.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 08:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:79:aa:45:af:62:23:59:1b:fc:e2:5d:84:f8:95:90:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 26 07:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be478700775efe3a433c8bf3dc80582bf62c6a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:84:ab:01:f0:18:a3:51:d3:ee:5d:b8:d1:
3a:c7:af:18:4e:6c:b5:e0:b4:b2:c5:87:00:e5:55:
68:5c:37:91:0a:70:18:b2:75:a3:f6:a9:08:df:33:
95:5c:a7:08:c9:6e:b0:94:11:c2:0b:68:9b:36:3f:
46:17:e4:30:32:65:5c:c4:29:69:8e:0c:7a:93:2e:
49:97:e3:76:f9:31:da:6a:ce:40:60:ff:b7:ec:87:
e7:f7:1e:ac:8e:73:28:39:7a:3e:b7:03:d0:bc:6c:
db:87:25:d9:d1:a9:e5:5c:ad:85:31:bd:44:bf:09:
7a:4f:50:3d:13:e1:b6:ee:21:b3:3d:42:a1:75:6f:
93:e3:70:a3:6e:b5:14:25:fb:53:d8:bb:dc:39:cc:
e0:3d:89:6e:14:04:8f:09:d5:5c:83:75:d0:54:e1:
4c:3c:11:b7:b9:c1:f0:28:9e:27:16:d9:cd:d2:eb:
03:36:c5:24:78:72:5b:b9:0c:16:0e:69:59:b7:ac:
75:2c:79:42:00:77:62:c9:46:d4:4e:19:f4:11:ff:
45:f8:fd:12:05:fc:f5:8f:a5:27:15:03:4b:73:b6:
eb:77:b8:c6:01:bc:7c:0b:aa:64:83:ef:30:a2:d2:
3f:ee:15:cc:c9:5e:57:31:f6:47:9d:48:ae:d6:fa:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:47:87:00:77:5E:FE:3A:43:3C:8B:F3:DC:80:58:2B:F6:2C:6A:8F
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vkeHAHde_jpDPIvz3IBYK_Ysao8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.101.0/24
193.233.252.0/24
Signature Algorithm: sha256WithRSAEncryption
34:06:d0:1f:52:d8:88:55:ce:f1:80:c3:f6:f5:ec:a3:3d:29:
50:73:83:34:fa:d5:2f:73:ef:62:93:5e:93:bf:04:2e:29:0f:
b8:f8:13:62:06:15:74:de:1c:21:a1:f9:0f:b2:19:9d:b8:6d:
bd:cb:0e:13:28:76:4f:6a:ec:49:cd:ec:3c:52:bd:bd:eb:d6:
f6:c5:e1:19:63:e2:6d:ec:4d:f1:68:b0:52:1c:93:a3:f0:68:
4d:b4:d6:26:7a:b9:33:44:48:29:a1:8b:63:80:bf:45:68:2b:
32:37:a6:79:37:64:11:3a:c2:35:4a:08:1b:15:cd:b0:04:b8:
27:ba:40:bb:02:f5:c2:6a:8d:41:01:ee:57:e6:68:cd:41:0b:
8a:fc:73:64:3f:17:79:96:ca:3b:eb:c0:fe:73:13:28:7e:33:
77:12:55:ca:86:21:58:2f:59:9b:4d:b3:6f:48:f1:84:d9:18:
10:bb:2c:8b:05:e7:b6:7c:f6:34:ec:6b:42:86:00:d0:50:57:
82:fc:75:85:e0:aa:8b:8b:0b:66:b8:65:08:f7:19:b7:d8:76:
f5:b2:6e:e5:42:d2:bf:35:6c:93:b3:f8:f1:6f:20:ce:04:63:
ed:20:6a:45:c7:1d:e0:38:b4:95:ba:a3:55:78:68:c9:5a:ee:
0a:43:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 11:17:12 2024 by rpki-client on console-ams.rpki-client.org