Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/VKeu-7kO-oCOd6Br6rgLFKxt4tQ.roa
File: VKeu-7kO-oCOd6Br6rgLFKxt4tQ.roa (raw, json)
Hash identifier: 4I/oN4aZ1JekprHAbwsHtuebrjUn9W9UAuFr31160oQ=
Subject key identifier: 54:A7:AE:FB:B9:0E:FA:80:8E:77:A0:6B:EA:B8:0B:14:AC:6D:E2:D4
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 018ADFE7B8EA36150D835A26A69F04FA192C
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/VKeu-7kO-oCOd6Br6rgLFKxt4tQ.roa
Signing time: Fri 29 Sep 2023 07:46:59 +0000
ROA not before: Fri 29 Sep 2023 07:46:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 185.121.227.0/24 maxlen: 24
185.188.143.0/24 maxlen: 24
185.121.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Nov 2023 13:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:e7:b8:ea:36:15:0d:83:5a:26:a6:9f:04:fa:19:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Sep 29 07:46:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54a7aefbb90efa808e77a06beab80b14ac6de2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:16:bf:6c:13:2d:24:e2:22:29:3c:ea:0f:
cc:8f:a2:19:5f:e5:7b:39:8b:25:89:44:6e:2f:c0:
1d:5d:53:b4:eb:bd:74:ed:e2:4b:54:2b:76:4a:1b:
1a:bc:b4:9e:c1:80:9c:73:9c:e2:15:50:04:9b:18:
12:9f:38:18:01:54:57:58:00:44:a4:64:d1:01:d8:
01:f1:7f:69:27:9b:f8:03:16:82:a0:f0:b8:0b:0c:
a4:2e:fe:3d:60:5d:c5:e5:d5:64:91:4f:84:28:21:
b1:c5:a8:b8:c9:f9:56:b8:96:31:98:2d:47:e0:7f:
fe:3e:59:19:d9:6c:d8:63:47:e8:43:e7:41:18:2f:
a3:d6:89:d3:c9:6c:cc:32:4d:75:c9:4c:dd:e1:bc:
a0:58:7f:c3:de:09:87:b8:35:12:18:29:09:12:66:
0f:68:ea:d3:7f:bd:03:b7:15:90:d8:7b:21:c0:84:
65:57:83:c3:90:3d:54:81:e2:a4:8e:e7:cb:0f:76:
24:80:0d:3e:ce:e6:ce:47:52:fe:7d:6d:75:15:aa:
14:cf:d6:94:cd:19:41:ec:af:2f:d5:ae:e0:f2:8e:
67:d7:8c:c1:f6:a6:23:2e:fa:e4:ab:7c:22:46:e7:
7b:b0:3d:f2:b1:1b:cf:8b:2a:c0:88:b6:8e:64:99:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A7:AE:FB:B9:0E:FA:80:8E:77:A0:6B:EA:B8:0B:14:AC:6D:E2:D4
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/VKeu-7kO-oCOd6Br6rgLFKxt4tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.225.0/24
185.121.227.0/24
185.188.143.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:bc:44:ed:91:3e:90:f8:8b:75:a4:88:65:b3:f2:c2:4d:9e:
a0:9d:8b:97:87:25:11:fe:17:98:3f:f5:55:93:e0:59:74:b5:
86:61:37:b0:29:22:43:0b:f7:5e:d9:1a:ab:47:5a:7a:ce:3b:
80:d7:32:8c:83:68:14:c7:8c:c5:e1:7b:0b:cd:9f:2a:fe:6c:
cd:42:4f:e4:53:b9:60:e0:2f:66:10:40:3b:88:68:c5:42:a2:
b3:3c:15:94:06:62:ab:f7:03:8b:53:b0:b3:a9:d1:14:3a:2f:
c4:43:83:cf:0b:81:73:aa:03:e1:9c:7f:73:e3:1e:53:32:ad:
2c:d7:0f:f7:4c:14:44:01:98:e0:ac:81:68:46:fc:44:34:37:
19:9b:d5:48:6e:49:8d:7a:87:2a:45:dd:13:01:62:e2:f0:d3:
00:f1:94:40:a8:11:25:dc:5c:bb:b8:d0:91:f4:dc:06:b7:9f:
11:a3:9d:46:16:cb:58:2f:07:80:e5:61:dc:29:8f:28:55:e0:
4b:1b:ac:fa:56:e8:24:84:88:1f:e8:d2:93:f3:c7:50:58:47:
41:e4:44:e6:c3:7c:2e:34:0c:9b:18:06:c6:4c:bd:6e:4e:17:
9a:42:fd:8c:e8:50:7b:ca:d6:a1:53:77:2f:dd:3b:f8:bd:40:
af:c5:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:58 2024 by rpki-client on console-ams.rpki-client.org