Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VusKAMrURKVXMqokbDcxHSLvDHs.roa
File: VusKAMrURKVXMqokbDcxHSLvDHs.roa (raw, json)
Hash identifier: gsIyq5OI+xtsfdKziBnaoh2ewxl7MT0oaTnTBC/j/H4=
Subject key identifier: 56:EB:0A:00:CA:D4:44:A5:57:32:AA:24:6C:37:31:1D:22:EF:0C:7B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019289ED6F8CB7C32DE306612978FF847F1E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VusKAMrURKVXMqokbDcxHSLvDHs.roa
Signing time: Mon 14 Oct 2024 07:28:12 +0000
ROA not before: Mon 14 Oct 2024 07:28:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214347
IP address blocks: 5.83.138.0/24 maxlen: 24
5.83.153.0/24 maxlen: 24
5.83.154.0/24 maxlen: 24
77.90.29.0/24 maxlen: 24
77.90.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 08:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:ed:6f:8c:b7:c3:2d:e3:06:61:29:78:ff:84:7f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 14 07:28:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56eb0a00cad444a55732aa246c37311d22ef0c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:3b:69:93:3c:f8:09:27:ab:e1:e1:90:42:
b7:2e:90:c1:89:90:eb:16:10:4a:70:bb:55:b9:a6:
f7:04:68:ad:bf:22:c7:1a:e2:f6:a7:96:02:ad:2d:
a9:eb:ba:05:ca:84:fe:4e:a8:91:aa:67:4d:d6:7a:
93:d8:7a:3a:49:b4:54:5e:c1:93:d8:19:b2:2c:60:
d3:bc:8f:aa:2e:30:33:da:e6:6f:13:30:a4:b8:b7:
a2:37:f8:a8:09:d2:16:ff:9d:e9:48:ee:e5:3e:49:
fa:43:f3:26:23:3e:52:77:d5:93:2a:7e:61:25:56:
2e:12:c0:b6:f1:d3:ce:44:fe:cc:67:7f:c0:98:a8:
d9:b1:9e:b6:9b:6a:7e:ca:d0:d2:c5:cc:4b:e4:87:
7e:60:89:64:31:7f:c4:bb:7e:d2:40:b3:98:75:43:
f4:ac:db:73:44:6e:06:c7:06:6b:b1:43:fd:46:8b:
61:12:25:b3:1e:3d:9d:06:7c:49:3a:77:9b:5a:58:
24:9a:10:ee:5c:c7:c0:7c:43:80:a9:b8:aa:3b:bf:
79:17:6f:13:56:a6:05:96:12:85:e0:ad:7d:58:74:
b4:4b:04:d9:52:05:78:61:b2:ad:64:26:5a:3f:ad:
92:32:fb:59:47:6f:b2:87:45:4a:40:4b:66:b9:bd:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EB:0A:00:CA:D4:44:A5:57:32:AA:24:6C:37:31:1D:22:EF:0C:7B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VusKAMrURKVXMqokbDcxHSLvDHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.83.153.0-5.83.154.255
77.90.29.0/24
77.90.44.0/24
Signature Algorithm: sha256WithRSAEncryption
25:98:98:e8:80:6d:88:a9:de:fa:19:2a:4b:18:ce:9b:58:41:
2a:37:4d:56:7c:c8:38:2a:13:98:31:a0:be:2e:96:05:7c:4b:
bb:5b:21:2a:e2:0f:6d:97:b1:1b:32:3c:7a:46:47:c8:1e:5e:
c9:25:9e:c2:b8:d4:e5:23:18:6f:e2:74:04:c7:c4:92:6a:34:
ae:8c:c8:48:9f:f9:3e:85:df:bf:1d:c7:78:13:84:7c:fd:49:
25:05:f5:3a:67:90:89:ff:2b:c0:96:2b:8f:9d:fe:e7:5c:9e:
c0:cd:04:e5:bf:8b:60:5c:1c:db:69:42:dc:5b:0a:50:93:12:
4b:16:bf:cd:f7:ee:cd:bb:e1:dc:16:15:66:37:d4:52:8e:57:
a1:29:9f:7e:bd:8a:a9:17:b1:81:a3:cd:66:98:4b:df:45:3e:
60:ba:94:35:70:6d:fd:cf:db:76:3d:25:7b:89:9f:28:d9:7f:
39:86:21:21:ff:6e:43:43:44:50:42:af:01:26:c2:29:1e:cd:
93:76:a9:6e:8b:27:15:f4:8a:45:e9:72:13:13:7b:49:fb:c1:
8a:07:bc:70:22:61:01:44:dd:32:54:e2:41:dd:10:08:9c:aa:
0f:eb:23:11:b4:68:dc:5c:ba:ed:11:96:cd:34:68:ef:a5:6d:
d2:79:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 12:04:00 2024 by rpki-client on console-fra.rpki-client.org