Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VKKCoCikHMUCoTcFnB4q_zdWNJU.roa
File: VKKCoCikHMUCoTcFnB4q_zdWNJU.roa (raw, json)
Hash identifier: CDXffu+vYcN4+seLG1t5nUGbqPGnUI93InkAicyQ9wA=
Subject key identifier: 54:A2:82:A0:28:A4:1C:C5:02:A1:37:05:9C:1E:2A:FF:37:56:34:95
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018B04F62BF5CEDB213FA85B5E94689ED60A
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VKKCoCikHMUCoTcFnB4q_zdWNJU.roa
Signing time: Fri 06 Oct 2023 12:28:43 +0000
ROA not before: Fri 06 Oct 2023 12:28:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399641
IP address blocks: 37.140.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:f6:2b:f5:ce:db:21:3f:a8:5b:5e:94:68:9e:d6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 6 12:28:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54a282a028a41cc502a137059c1e2aff37563495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:f2:67:df:4e:07:9c:d2:d4:a9:39:36:a0:
e4:df:05:a2:41:60:0c:17:aa:7a:c0:ea:0e:bf:8b:
45:fd:9f:6f:be:94:a9:65:8f:d1:c2:49:99:87:d2:
08:6a:e9:14:8a:7b:a4:02:c1:9c:8f:86:ed:c5:b2:
86:e1:50:14:69:71:f5:38:af:66:6e:8e:61:3d:dc:
11:e0:fc:1d:fb:23:5f:b7:f3:97:67:6b:43:b8:fd:
c5:ec:0a:57:07:bb:3c:b3:6a:a2:08:fe:15:4c:ec:
e3:25:85:66:cb:70:b8:80:5f:96:d1:89:83:28:70:
59:b3:94:58:76:29:23:40:aa:cd:ae:d8:39:f5:45:
7d:ff:9f:ad:60:dd:26:1f:b6:39:5a:c7:ec:02:9d:
d0:a4:fd:4f:f2:88:81:b1:5d:35:f3:28:9e:ec:ef:
53:42:24:b9:c5:97:70:e0:b4:3c:b8:2f:92:80:d5:
1f:87:25:6f:ba:67:b9:ea:42:60:e2:65:42:15:14:
9b:1c:7a:19:2f:c3:2e:c7:0a:23:c7:9e:82:a3:c8:
59:f5:54:10:68:a8:44:f7:91:7f:62:73:00:89:ed:
8b:fa:4c:0d:fd:b9:f1:3f:b2:4f:53:47:cf:68:8f:
4a:0f:77:fa:2a:1a:4f:4a:e2:76:19:20:d7:3d:1d:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A2:82:A0:28:A4:1C:C5:02:A1:37:05:9C:1E:2A:FF:37:56:34:95
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VKKCoCikHMUCoTcFnB4q_zdWNJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.250.0/24
Signature Algorithm: sha256WithRSAEncryption
51:82:42:86:21:84:a0:c3:cf:12:5b:50:05:94:12:37:a8:9a:
8d:16:79:0a:ce:9f:ce:13:2f:0c:ad:87:95:77:2a:2c:8e:58:
d8:47:7d:55:fc:f3:55:5c:33:f6:7c:49:24:20:aa:9c:11:8d:
19:a8:ef:a2:f1:c6:42:03:4b:c0:83:18:77:82:e7:08:5b:25:
c4:51:fb:02:91:a9:5b:2d:dd:fc:0a:a8:a7:d7:36:da:3e:d7:
b8:38:1b:22:2b:bd:79:a3:a3:5f:59:82:08:7e:c5:6c:a7:9e:
b3:5d:03:7e:e9:ca:45:51:32:c6:0e:98:57:7f:f4:35:21:d5:
ee:7a:49:d9:78:57:b1:80:46:a0:8f:65:be:05:8b:69:77:ef:
03:75:87:10:b6:a5:3e:c9:32:d2:da:bf:11:89:fc:d5:56:e6:
26:a4:22:20:ab:cc:bd:48:02:bd:6b:82:c7:c1:97:ed:94:d2:
5c:06:f5:6b:4e:20:70:4c:d3:bb:35:5e:43:48:b5:8a:36:d3:
51:45:e2:eb:f3:12:dd:23:1e:01:b1:8a:dd:92:63:69:3a:30:
46:fc:72:f5:b8:66:7d:f4:ee:9a:e6:7e:c1:cc:d3:81:70:56:
24:b7:03:65:0f:e7:b3:f5:5d:15:8f:60:c7:f8:b8:71:23:74:
9c:5b:82:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org