Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/VU2222C8TmJECSSylozWPFfGbss.roa
File: VU2222C8TmJECSSylozWPFfGbss.roa (raw, json)
Hash identifier: SgSUGwTrEzHVnS/85UUMgTo9mb+W0ZYPc+aWqa+wWuo=
Subject key identifier: 55:4D:B6:DB:60:BC:4E:62:44:09:24:B2:96:8C:D6:3C:57:C6:6E:CB
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 01856FD4F5A7557AF3E38CF3ADB83740FD51
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/VU2222C8TmJECSSylozWPFfGbss.roa
Signing time: Mon 02 Jan 2023 00:15:05 +0000
ROA not before: Mon 02 Jan 2023 00:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41557
IP address blocks: 188.117.204.0/22 maxlen: 22
188.117.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:f5:a7:55:7a:f3:e3:8c:f3:ad:b8:37:40:fd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 2 00:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=554db6db60bc4e62440924b2968cd63c57c66ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:02:05:cc:65:ad:5c:23:9e:5a:2a:6e:d9:f2:
c3:e3:16:00:8b:88:c2:3f:47:10:b1:fd:e6:c8:8e:
3b:88:fb:56:41:05:c0:78:e3:8e:22:39:ae:bc:fd:
9f:fb:5d:57:fb:4a:9e:1e:7c:cc:f3:32:0a:5c:3b:
6f:b1:e7:15:a9:44:0e:71:a0:7f:6a:e1:c6:e1:4c:
b9:0d:f4:73:48:54:11:d8:2c:c0:36:09:7d:27:e0:
16:28:bf:b3:40:ae:77:0a:b2:86:30:4d:fc:a5:43:
e6:ff:c2:f9:2c:33:31:18:69:9a:a5:2c:6b:81:77:
53:db:c0:ea:65:9d:24:d9:82:67:55:7e:e2:34:41:
c1:f5:95:dd:bb:40:b7:91:3f:8a:88:92:58:b0:b0:
ae:b0:8d:77:a1:c2:b9:7f:fd:e6:47:80:c6:ae:8c:
a9:da:92:d3:3e:43:f9:72:f3:09:dd:ef:70:00:24:
03:81:d0:04:39:b0:db:16:aa:bb:cd:77:82:56:c3:
1f:07:02:dd:2a:e4:95:04:7f:cd:7d:2f:05:5b:35:
b5:b6:b4:55:23:79:e2:ea:d5:be:ed:87:8b:2b:20:
a8:5f:bb:4d:61:bb:28:8e:9a:97:dc:d6:e3:8a:06:
f0:c4:0d:e2:1e:52:4e:9a:e7:c6:93:83:40:17:69:
db:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4D:B6:DB:60:BC:4E:62:44:09:24:B2:96:8C:D6:3C:57:C6:6E:CB
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/VU2222C8TmJECSSylozWPFfGbss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.117.204.0/22
188.117.212.0/22
Signature Algorithm: sha256WithRSAEncryption
98:2d:0d:4b:f1:d2:76:9c:aa:6d:8a:7b:f1:36:be:d2:2a:22:
fd:d6:d2:c8:ad:7b:42:41:21:dd:b2:3a:41:de:39:6a:bc:e7:
d6:c8:52:7d:ac:a4:9c:44:72:65:d5:a4:21:3c:d7:8f:7c:34:
9e:2b:d0:b8:9c:8b:8f:60:6d:29:23:5a:1a:13:44:e7:f5:ee:
82:ab:d0:61:40:c7:f8:e5:7c:c0:30:13:39:cc:ad:76:31:a7:
d5:e9:24:01:0b:49:0b:23:8c:ba:72:64:11:22:d0:20:b7:ed:
2e:eb:e3:6b:fc:f0:28:ac:6a:2f:18:fa:03:73:46:2e:01:17:
3e:93:01:7d:4a:f2:12:30:c3:e6:6f:5d:db:29:62:65:2e:c0:
1c:f6:74:ed:e3:e7:12:3b:5d:84:e5:98:37:7b:e9:66:67:00:
d1:7a:b6:bf:7d:d8:90:6b:ab:f1:d8:73:1d:55:7a:d0:4a:10:
3a:1d:7d:3e:64:16:df:64:9f:42:4e:b0:d2:ab:17:bb:6d:e5:
08:f3:9f:c9:6f:4a:09:94:c6:c2:69:13:25:e5:d2:03:71:93:
8a:13:c2:5a:bc:44:d5:03:be:db:6d:1b:92:bd:b4:ee:80:c1:
99:0e:f1:52:41:3f:7f:07:7d:f5:f4:05:ed:08:35:5b:2e:16:
db:ca:25:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:41 2024 by rpki-client on console-ams.rpki-client.org