Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/VKtpMNuc4J9B992Zl5Bv-ttfJCs.roa
File: VKtpMNuc4J9B992Zl5Bv-ttfJCs.roa (raw, json)
Hash identifier: WRz5mtQ6j8ZzVjdy1Yqjkqwof0Sl0YXSJWPnf2M7ib4=
Subject key identifier: 54:AB:69:30:DB:9C:E0:9F:41:F7:DD:99:97:90:6F:FA:DB:5F:24:2B
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 01890C82FAA41242C23760EA2D3D75ED45F0
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/VKtpMNuc4J9B992Zl5Bv-ttfJCs.roa
Signing time: Fri 30 Jun 2023 13:34:17 +0000
ROA not before: Fri 30 Jun 2023 13:34:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48716
IP address blocks: 185.146.0.0/22 maxlen: 24
185.102.72.0/22 maxlen: 24
91.147.95.0/24 maxlen: 24
91.147.94.0/24 maxlen: 24
91.147.92.0/24 maxlen: 24
91.147.92.0/22 maxlen: 22
91.147.93.0/24 maxlen: 24
195.93.152.0/23 maxlen: 24
195.49.208.0/21 maxlen: 24
109.233.108.0/22 maxlen: 32
77.240.38.0/23 maxlen: 24
94.247.128.0/21 maxlen: 24
91.215.137.0/24 maxlen: 32
91.215.136.0/22 maxlen: 24
91.215.136.0/24 maxlen: 24
91.215.139.0/24 maxlen: 32
185.4.180.0/22 maxlen: 24
195.210.46.0/23 maxlen: 24
91.201.214.0/23 maxlen: 24
185.22.64.0/22 maxlen: 24
78.40.108.0/23 maxlen: 24
89.219.32.0/22 maxlen: 24
194.110.54.0/23 maxlen: 24
77.243.80.0/23 maxlen: 24
194.39.64.0/23 maxlen: 24
194.39.64.0/22 maxlen: 24
185.35.222.0/23 maxlen: 24
194.39.67.0/24 maxlen: 24
194.39.66.0/24 maxlen: 24
2a00:5da0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:82:fa:a4:12:42:c2:37:60:ea:2d:3d:75:ed:45:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Jun 30 13:34:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54ab6930db9ce09f41f7dd9997906ffadb5f242b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:25:dd:53:e8:98:79:2d:f6:ec:d7:ba:fb:
ca:45:c4:af:6b:51:5e:ad:f4:f5:03:91:d9:0d:dc:
85:3c:19:ba:19:7f:62:ec:65:91:98:dd:d5:c9:80:
a7:5b:3c:be:28:fd:bb:7e:88:a2:38:ae:aa:74:2d:
1e:8e:99:58:97:35:5a:c0:9f:c8:bd:cf:f8:14:a7:
13:41:5f:3c:85:99:4b:63:9e:d1:d2:7f:23:cd:96:
b8:42:a1:53:34:b3:0f:ad:66:16:f6:29:fa:d1:eb:
7c:2e:97:fa:c8:ad:e5:42:e0:71:02:0d:df:c5:60:
bf:66:1c:cd:24:bb:df:d0:56:8c:5f:39:20:5b:f5:
64:43:18:e7:9c:30:d1:6b:c9:30:5a:54:50:b1:1a:
04:b7:eb:28:6d:31:0f:6f:d6:2b:7d:4c:85:40:d4:
b3:10:a0:1d:98:4e:17:2e:4d:f2:0e:1e:86:c0:d7:
f6:50:3e:c1:9b:11:57:7e:88:95:70:66:a6:0f:e2:
f0:3f:12:37:0d:57:bc:6d:19:61:66:60:09:0d:0e:
d7:fb:42:9d:a5:ee:31:e5:4d:52:27:d6:6a:97:30:
03:6f:97:2e:98:0b:dd:7f:f1:94:ac:b6:ce:1e:06:
b5:0e:eb:23:ed:0c:10:46:92:dd:55:3a:76:94:eb:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AB:69:30:DB:9C:E0:9F:41:F7:DD:99:97:90:6F:FA:DB:5F:24:2B
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/VKtpMNuc4J9B992Zl5Bv-ttfJCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.38.0/23
77.243.80.0/23
78.40.108.0/23
89.219.32.0/22
91.147.92.0/22
91.201.214.0/23
91.215.136.0/22
94.247.128.0/21
109.233.108.0/22
185.4.180.0/22
185.22.64.0/22
185.35.222.0/23
185.102.72.0/22
185.146.0.0/22
194.39.64.0/22
194.110.54.0/23
195.49.208.0/21
195.93.152.0/23
195.210.46.0/23
IPv6:
2a00:5da0::/32
Signature Algorithm: sha256WithRSAEncryption
37:4f:4d:4d:64:75:e6:a8:30:c0:28:32:c2:3d:68:9a:94:07:
51:d0:ae:64:3e:c9:56:52:7e:9c:70:22:fd:bd:87:19:83:80:
5f:d1:de:23:5d:40:39:1b:e0:20:05:fe:8b:88:09:77:d5:cd:
43:5b:29:24:23:12:a1:bf:19:82:e7:08:b7:c0:dd:2c:2d:50:
c9:a5:ce:b7:e8:5c:f7:d7:d1:4c:29:6b:9c:ba:7d:f9:4f:65:
70:eb:11:66:fc:c4:d2:37:ed:1a:20:e1:1c:58:6a:ae:58:f5:
de:9d:7f:1d:19:f0:c4:e2:7c:b6:5b:2e:d5:19:af:f7:7a:e2:
1f:6d:ee:9c:04:61:6c:5f:66:ce:7a:ed:b5:06:5c:b2:65:3a:
a9:40:ed:50:3b:bb:61:63:15:8a:7b:ed:bd:92:f5:e2:91:f6:
35:39:c6:c0:40:3f:40:b0:12:a3:7f:f6:ef:c0:3b:63:dc:98:
42:be:37:95:fb:2f:ca:3f:f7:89:6c:f3:67:42:c4:8b:61:e3:
aa:93:75:44:de:a5:ec:53:c3:46:16:c0:85:08:cc:b0:80:17:
aa:b9:a5:36:cd:25:ea:b5:79:8b:43:b2:ed:a0:6b:eb:e1:8d:
b4:a3:de:34:3d:2f:17:d3:6d:03:ba:21:1a:c8:ac:cb:4f:c9:
6d:e7:fb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 14:23:10 2023 by rpki-client on console-ams.rpki-client.org