Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/Vmujuo01F4__vFpMRCUoTqY4AB4.roa
File: Vmujuo01F4__vFpMRCUoTqY4AB4.roa (raw, json)
Hash identifier: HpW7HO6j/MUt0zohNXi49E2SqmTqzSiwMeaoRDlxpOo=
Subject key identifier: 56:6B:A3:BA:8D:35:17:8F:FF:BC:5A:4C:44:25:28:4E:A6:38:00:1E
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: 018570C2C19670AD58E9C8982B4C7D6C0BC6
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/Vmujuo01F4__vFpMRCUoTqY4AB4.roa
Signing time: Mon 02 Jan 2023 04:34:49 +0000
ROA not before: Mon 02 Jan 2023 04:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202987
IP address blocks: 185.127.125.0/24 maxlen: 24
185.127.124.0/24 maxlen: 24
185.127.127.0/24 maxlen: 24
185.127.126.0/24 maxlen: 24
193.27.233.0/24 maxlen: 24
193.27.232.0/24 maxlen: 24
193.27.234.0/24 maxlen: 24
193.27.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:c1:96:70:ad:58:e9:c8:98:2b:4c:7d:6c:0b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Jan 2 04:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=566ba3ba8d35178fffbc5a4c4425284ea638001e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:7e:40:36:18:79:18:49:e9:ed:3d:05:da:
e0:c2:f9:70:fc:05:03:78:33:9c:af:af:a6:1f:1c:
46:55:89:c6:43:2c:65:c9:c6:e2:94:06:dd:33:f2:
5d:35:93:a4:ea:50:bc:3b:af:54:48:2b:09:2e:6c:
73:35:82:b1:37:f2:5e:8b:83:dd:b5:b4:63:5a:83:
36:c5:4a:37:a0:2f:6d:6f:a2:6f:57:23:27:5d:34:
20:2f:9a:6f:0b:d7:be:03:21:59:88:ef:41:d6:ce:
d7:aa:8f:b3:90:77:b7:44:a2:73:73:00:3f:a9:06:
82:46:af:83:45:62:8c:e2:85:ee:6d:96:8e:7f:60:
8c:61:82:98:5e:f9:74:31:2d:6f:f0:98:b4:3c:bd:
f1:ff:ff:85:24:5c:0f:c5:a4:5e:12:ca:e0:7d:3b:
87:c4:37:31:e0:41:85:78:8a:cd:ad:85:4f:15:57:
bc:cc:da:8e:74:d3:98:a9:16:35:ca:5b:62:59:2b:
aa:e4:01:a9:e5:96:9d:2f:a9:de:66:3b:5c:cb:69:
50:8e:0e:58:6a:21:8c:c6:dc:e2:4f:aa:d8:57:fb:
50:c5:33:3c:61:b3:f1:e7:41:19:52:80:67:53:b7:
2a:36:4d:2d:19:80:0f:0c:57:5a:bc:f9:05:72:6e:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6B:A3:BA:8D:35:17:8F:FF:BC:5A:4C:44:25:28:4E:A6:38:00:1E
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/Vmujuo01F4__vFpMRCUoTqY4AB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.124.0/22
193.27.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:3e:53:31:49:f6:34:c3:a6:03:3c:9c:e2:bb:a0:f3:6b:c6:
7d:a1:a4:2f:9a:50:26:00:11:a4:00:52:ec:e2:04:92:ea:8e:
77:2e:43:3f:28:10:cc:8b:1e:08:c1:d3:83:9b:c3:30:3f:59:
77:c8:81:cc:e6:8d:15:26:64:e1:80:88:f5:3e:d3:80:70:78:
9c:77:b6:30:f5:be:a8:03:ee:67:f8:1f:ad:a1:81:b8:0b:50:
ea:5c:a3:c5:1f:43:02:e5:1b:01:8a:be:92:bf:30:c1:e0:8e:
7d:87:00:7e:d2:8f:35:3a:b8:37:a1:17:7c:8d:af:f0:d5:93:
d1:8e:54:d9:b9:b7:de:05:a6:aa:5b:15:4e:e3:21:07:16:bb:
f0:c9:8d:2f:6e:97:ad:04:90:69:25:be:a7:1e:01:4b:1c:e9:
13:02:6e:5f:06:e5:29:db:53:41:65:6e:95:09:8a:9a:3e:a0:
5c:f8:25:ed:9b:69:e3:99:b1:7e:71:d3:a4:f4:15:19:b9:8f:
07:07:b7:35:ea:8f:0a:8c:67:8d:5c:05:7f:27:27:ec:8f:bd:
b7:1f:c7:88:45:1e:24:67:cb:ff:68:3d:a4:b9:f3:d9:ef:4f:
4d:4f:e5:ea:6a:d6:0b:0f:3e:0d:03:63:64:b8:f2:2f:45:21:
19:e1:17:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:16 2024 by rpki-client on console-fra.rpki-client.org