Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/VcT_OVFLLMhDQm6sS0uheGK7d_U.roa
File: VcT_OVFLLMhDQm6sS0uheGK7d_U.roa (raw, json)
Hash identifier: eWRsuy8MDoGM1TRUz1mW2KcfbHGSOI4PalNT4xZNF+4=
Subject key identifier: 55:C4:FF:39:51:4B:2C:C8:43:42:6E:AC:4B:4B:A1:78:62:BB:77:F5
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018C16D5D557F4FBC362F30FBEDC93FF9E53
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/VcT_OVFLLMhDQm6sS0uheGK7d_U.roa
Signing time: Tue 28 Nov 2023 16:49:21 +0000
ROA not before: Tue 28 Nov 2023 16:49:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 193.111.76.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:16:d5:d5:57:f4:fb:c3:62:f3:0f:be:dc:93:ff:9e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Nov 28 16:49:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55c4ff39514b2cc843426eac4b4ba17862bb77f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:3a:16:45:1a:d9:20:47:6d:83:80:30:6d:
bc:f0:32:ab:a5:9c:64:07:cc:70:92:b5:4f:cc:6c:
3f:d6:a3:3c:c5:1b:47:c5:33:6f:6d:77:d5:f6:ef:
0b:0c:68:9b:95:41:5e:f8:2f:57:20:29:ec:88:70:
af:ca:ce:c4:69:6a:36:f5:b6:16:aa:13:6c:6a:86:
e6:62:85:76:b9:d9:7d:f2:98:57:3d:b7:d0:1b:f1:
73:64:dd:2a:0a:09:f3:d2:67:49:92:ff:a2:43:41:
69:28:22:df:55:45:53:f0:e9:a9:a1:59:8e:bc:cf:
c2:6d:5c:39:c6:58:5b:15:a3:8a:57:df:aa:dc:89:
e1:bc:0f:55:ac:3e:bc:ab:19:26:4f:de:1c:a7:95:
e3:88:5d:78:f1:e4:74:9e:28:a6:92:91:8c:cf:ad:
43:da:f1:8a:bb:ef:c4:b3:20:51:29:e6:19:5a:ba:
57:ff:6b:e6:7a:ed:cb:2d:a6:7e:24:0f:83:81:8b:
14:d1:e5:b1:4c:08:2c:58:82:52:f0:1a:6f:f5:bd:
02:2d:43:98:7d:6c:aa:34:3a:48:e6:ef:17:73:82:
ab:ee:f7:4f:20:44:ca:27:6a:2c:89:b2:fa:0c:ff:
46:ae:6e:3a:39:d4:4c:c3:85:b7:10:21:2f:85:8f:
b1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C4:FF:39:51:4B:2C:C8:43:42:6E:AC:4B:4B:A1:78:62:BB:77:F5
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/VcT_OVFLLMhDQm6sS0uheGK7d_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.8.0/24
193.17.5.0/24
193.17.7.0/24
193.111.76.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:5a:0e:93:d0:a2:93:20:b4:41:92:27:c5:08:1b:45:ee:93:
29:c0:63:a8:f7:ea:76:cd:63:c3:64:75:95:8a:9d:ce:63:c7:
2e:19:32:fa:b4:e0:ab:d2:09:61:95:b1:65:9f:36:ca:62:22:
07:73:4f:2b:a8:25:fb:4c:b5:f8:e3:7b:3f:95:37:7c:ae:99:
09:dc:7f:60:0d:3f:e8:18:af:e5:ca:00:81:93:fa:1b:66:ac:
86:ea:19:b9:af:60:65:24:4a:dc:1e:b8:a3:b9:0c:55:52:6c:
7f:dc:6f:a3:f6:5c:fc:fa:54:3f:2b:e2:4b:75:b3:ba:82:0e:
95:50:e4:5b:e0:42:e3:83:39:02:63:5c:05:b8:c6:6f:ab:a4:
eb:82:ea:7c:5b:3c:8d:27:f5:c8:d2:1d:65:56:db:a2:a3:36:
ef:bd:4d:a6:f8:f4:86:37:ff:1b:7a:ee:b6:99:3c:a7:5a:a0:
5b:25:a5:ae:2f:b6:85:0d:75:f6:d8:6b:af:59:ee:03:3a:84:
d9:ce:8e:26:9d:72:cb:e9:3a:69:7d:41:15:96:e9:f8:9c:bd:
eb:d8:5a:71:ac:c5:5b:be:f2:68:17:cf:55:19:e2:46:88:b7:
86:7f:e8:4f:03:e5:b9:07:42:4e:f3:f5:5a:bf:3b:89:99:48:
ea:a4:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org