Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/Vcb0eCuHS1QhBJYTH1wjgDRDFqE.roa
File: Vcb0eCuHS1QhBJYTH1wjgDRDFqE.roa (raw, json)
Hash identifier: eC6yOXvNnUgUAAih3rAQbU2UIr3JaLBE0kCxxkT/mcs=
Subject key identifier: 55:C6:F4:78:2B:87:4B:54:21:04:96:13:1F:5C:23:80:34:43:16:A1
Certificate issuer: /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial: 018DC545CBBC651705F4C064C31EC76840EB
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/Vcb0eCuHS1QhBJYTH1wjgDRDFqE.roa
Signing time: Tue 20 Feb 2024 06:48:21 +0000
ROA not before: Tue 20 Feb 2024 06:48:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38955
IP address blocks: 81.19.144.0/20 maxlen: 24
178.23.80.0/21 maxlen: 23
185.16.188.0/22 maxlen: 24
185.16.188.0/24 maxlen: 29
185.16.190.0/24 maxlen: 24
185.115.184.0/23 maxlen: 23
185.115.186.0/23 maxlen: 23
185.164.4.0/23 maxlen: 23
185.164.6.0/23 maxlen: 23
185.173.140.0/22 maxlen: 24
2a00:1a68::/32 maxlen: 34
2a0a:7c00::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 May 2024 11:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:45:cb:bc:65:17:05:f4:c0:64:c3:1e:c7:68:40:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Validity
Not Before: Feb 20 06:48:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55c6f4782b874b54210496131f5c2380344316a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:d3:54:13:ea:98:29:98:eb:92:4f:82:c1:
7d:85:ac:65:11:ed:54:69:bd:d0:9d:f4:1c:7e:3e:
64:f8:b9:aa:9a:e0:f3:f1:51:77:82:71:cf:fe:b6:
99:fb:6f:30:6e:eb:48:09:96:fd:51:1c:d6:a0:09:
a0:f3:60:5a:13:7b:ad:d0:f9:91:20:d8:d4:7e:69:
14:04:0b:cb:24:1c:2a:13:e9:2d:2f:3f:7b:f8:25:
fe:8e:3d:55:19:f2:ce:76:65:4f:83:7d:57:5b:42:
c5:84:c8:24:f6:ea:eb:01:6e:1a:af:65:4e:b9:62:
b8:d7:2f:3b:c4:8c:7f:b7:0a:6e:f7:99:f5:08:f9:
4d:44:f4:8e:db:d9:3f:a9:d9:18:03:c3:e1:32:cd:
1b:b4:84:9c:5b:f3:21:a4:0b:6b:4d:d5:59:4c:a5:
d8:66:ad:f4:ec:b8:f1:72:47:8a:7e:8b:d6:e5:3f:
62:75:5a:d7:81:38:9b:53:8b:89:a1:b3:0f:3d:09:
38:94:19:6c:55:ce:47:da:14:a3:fc:fb:e6:58:e7:
93:b8:da:9d:1d:20:ed:48:1f:58:da:ad:2b:5e:16:
b4:8a:93:7f:e3:fa:2f:05:e4:f4:bb:68:95:f8:68:
b5:f5:3e:22:68:c0:c6:ff:88:76:e6:25:e7:b6:6d:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C6:F4:78:2B:87:4B:54:21:04:96:13:1F:5C:23:80:34:43:16:A1
X509v3 Authority Key Identifier:
keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/Vcb0eCuHS1QhBJYTH1wjgDRDFqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.144.0/20
178.23.80.0/21
185.16.188.0/22
185.115.184.0/22
185.164.4.0/22
185.173.140.0/22
IPv6:
2a00:1a68::/32
2a0a:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
4b:ae:50:28:23:90:6e:32:21:05:a5:f5:f0:65:20:2c:6f:85:
06:94:b0:c7:44:ee:5c:dc:15:2f:03:c2:72:73:d6:e9:f7:10:
64:ab:a5:3d:ed:89:14:8a:fa:8c:62:b2:63:e1:05:e8:e7:1a:
33:55:6c:7a:a0:e5:2a:b0:88:ab:eb:0e:98:b3:32:e4:9e:7f:
bb:ba:12:df:88:6c:a5:71:8f:e6:fc:b1:35:f9:b8:a8:4e:a6:
78:ed:0f:78:58:cd:8f:ae:ab:05:0f:be:33:f4:25:a2:44:12:
54:46:86:50:ac:44:ef:45:8a:5e:e0:44:da:5a:d2:a9:5b:20:
b8:17:2f:f3:94:82:25:0c:bd:a3:9b:2a:b7:60:17:5c:3f:4a:
c6:ce:6c:fb:ce:77:f2:15:48:13:c9:22:75:ee:58:4f:42:f7:
49:0d:58:b9:a3:68:8e:3f:a7:0c:0c:e8:3c:2a:87:57:6a:43:
02:9a:98:1b:b5:9b:99:af:a3:f3:38:e7:83:b6:d7:19:1d:e6:
5f:bb:05:e3:5a:e6:f3:53:3b:17:34:8e:26:ad:39:f8:f6:0b:
47:48:0e:21:3b:60:0d:78:40:33:58:9c:42:fa:82:d7:33:47:
45:c5:05:ed:bd:b2:85:f8:b2:03:48:5f:0c:a6:e3:0f:54:cc:
35:b6:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:58:43 2024 by rpki-client on console-fra.rpki-client.org