Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/Vi_3v0SatdV24Q1nsSXJa7FPez8.roa
File: Vi_3v0SatdV24Q1nsSXJa7FPez8.roa (raw, json)
Hash identifier: 547NeYfLX58bbEjxawIk19YKm+dnrn8kOKsKrR9ywew=
Subject key identifier: 56:2F:F7:BF:44:9A:B5:D5:76:E1:0D:67:B1:25:C9:6B:B1:4F:7B:3F
Certificate issuer: /CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Certificate serial: 018940AB8B5DC92348D1CA0B71DC272E4762
Authority key identifier: 87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/Vi_3v0SatdV24Q1nsSXJa7FPez8.roa
Signing time: Mon 10 Jul 2023 16:38:51 +0000
ROA not before: Mon 10 Jul 2023 16:38:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 84.238.160.0/22 maxlen: 24
82.146.16.0/22 maxlen: 24
84.238.132.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:ab:8b:5d:c9:23:48:d1:ca:0b:71:dc:27:2e:47:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Validity
Not Before: Jul 10 16:38:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=562ff7bf449ab5d576e10d67b125c96bb14f7b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:7d:8e:67:00:cf:9e:cc:8c:c7:33:cc:7f:
7d:26:fa:bb:bf:db:f1:69:80:be:a0:d5:a6:8e:08:
5f:5b:08:c4:c7:c4:1e:ac:1e:2a:d5:60:f8:b7:45:
3f:45:94:50:56:23:47:5b:9c:dc:09:67:de:2f:19:
95:71:7c:e7:73:22:90:75:2a:2e:a7:b1:6d:aa:12:
39:01:39:da:8f:fd:bd:a5:a3:08:0a:5d:d2:e0:87:
81:9f:3e:70:2d:4d:bc:e5:41:73:15:6f:1f:40:3d:
48:49:19:c0:22:27:aa:1f:79:79:8c:87:9d:d1:25:
ac:3d:b4:6a:ff:02:21:c0:6c:b4:a3:5a:a7:0d:b2:
d8:70:36:2d:13:d1:69:55:e4:e3:5b:22:4a:f9:5f:
18:2e:48:85:42:61:91:4f:63:63:77:b5:80:1b:e5:
71:46:9b:4e:69:6c:25:b5:ee:99:7e:4b:40:e4:13:
5e:64:5e:73:7a:ae:d7:1f:08:fc:9b:92:ee:9d:30:
9a:b0:2a:9a:1f:f6:15:42:d5:d5:43:c1:32:8e:c8:
bd:41:30:01:52:d3:87:42:40:34:82:12:36:8e:80:
b6:f3:cb:d6:33:32:4b:d0:d4:79:ad:07:35:77:c8:
9a:bc:3c:d9:02:d9:81:e6:c6:05:74:66:c9:91:05:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2F:F7:BF:44:9A:B5:D5:76:E1:0D:67:B1:25:C9:6B:B1:4F:7B:3F
X509v3 Authority Key Identifier:
keyid:87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/Vi_3v0SatdV24Q1nsSXJa7FPez8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.16.0/22
84.238.132.0/23
84.238.160.0/22
Signature Algorithm: sha256WithRSAEncryption
80:ce:a0:10:1a:49:ca:38:e9:2c:3f:7d:e3:8a:86:6a:d2:be:
23:fe:15:08:08:e2:0f:5f:78:a6:d7:4b:68:30:c7:f4:04:a6:
07:82:1d:11:87:c4:00:b5:35:1a:ec:5d:ba:67:cc:c1:e4:a8:
39:3c:d8:2d:a5:6b:f8:bf:e7:68:44:cc:4a:62:59:b5:05:16:
64:58:85:9c:65:bf:f0:1e:e8:5e:f2:ef:b3:b0:43:ff:43:87:
52:f6:09:88:33:0b:00:e2:8e:93:90:86:6c:6e:c9:c1:93:83:
4a:fe:01:f5:9a:a7:be:8b:70:38:79:17:41:bd:50:55:c5:c5:
3c:51:aa:b2:ad:98:cb:fe:f0:a3:50:d5:cb:98:f5:8d:45:64:
53:e3:24:47:ad:46:86:d9:c2:7f:b6:7c:fe:92:1d:e1:b1:b3:
37:88:bc:54:e5:a6:db:37:28:bf:43:49:cf:5d:56:ee:7a:1d:
94:6e:2c:cf:bc:de:c4:d5:1b:82:e0:88:f6:96:54:0a:aa:94:
f5:4d:d1:a2:08:df:13:10:8a:27:cd:af:ba:74:c6:28:6a:d0:
04:42:a1:75:db:e7:e8:d8:40:e2:67:1f:09:f9:00:7a:c3:03:
d6:02:1d:8a:74:b5:82:02:21:b4:df:3f:4e:ac:68:0e:cc:5e:
c9:6f:43:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 08:43:49 2023 by rpki-client on console-fra.rpki-client.org