Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/vtruNmfFo-ecb6S4B8NRvUwT6wM.roa
File: vtruNmfFo-ecb6S4B8NRvUwT6wM.roa (raw, json)
Hash identifier: yg2GVn3r4bx7b6f4TaKQM94FJO0UJWrv/JqPgcmvwcM=
Subject key identifier: BE:DA:EE:36:67:C5:A3:E7:9C:6F:A4:B8:07:C3:51:BD:4C:13:EB:03
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018C7CA793A14A132A727911248662A372BE
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/vtruNmfFo-ecb6S4B8NRvUwT6wM.roa
Signing time: Mon 18 Dec 2023 11:20:06 +0000
ROA not before: Mon 18 Dec 2023 11:20:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 185.55.4.0/22 maxlen: 23
185.55.142.0/23 maxlen: 23
185.55.140.0/23 maxlen: 23
185.55.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 18 Dec 2023 11:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:a7:93:a1:4a:13:2a:72:79:11:24:86:62:a3:72:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Dec 18 11:20:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bedaee3667c5a3e79c6fa4b807c351bd4c13eb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:08:94:85:e9:59:dc:fd:bd:8c:fa:1e:80:
7b:ba:e6:96:fa:bc:9f:36:92:66:7a:d5:d9:4c:2f:
b4:18:67:5c:25:b2:50:68:7a:e0:a6:96:2c:e0:d3:
08:8a:ec:19:a0:1d:f4:72:f3:3a:1c:6a:27:88:ea:
51:ea:89:59:0a:1d:1e:97:bc:83:f9:f5:f6:03:8d:
e7:88:74:c1:3d:eb:20:61:73:3f:42:e6:bc:99:21:
74:d1:a2:08:b6:82:30:77:c1:33:02:15:85:ce:db:
38:07:32:25:06:bf:0d:8c:0c:bb:16:1c:ea:fc:48:
6a:1e:ca:c1:1c:66:75:10:89:94:f9:ad:5b:8b:2d:
2c:91:d1:5c:72:10:71:54:2f:59:33:6e:fc:c5:82:
2b:26:f0:5b:6e:e6:6b:d2:13:61:7a:75:b1:10:6e:
91:9b:7c:3e:bc:e2:62:f0:77:37:ff:0f:26:28:58:
6d:31:a3:90:ff:bd:c2:dd:c6:76:37:1c:e4:07:1e:
a2:e9:37:9b:13:b8:fd:8b:05:f5:99:2a:a8:74:4e:
f3:3b:0a:06:c4:81:d5:3b:dc:c5:87:1b:4c:33:b3:
eb:5c:6b:17:fa:19:06:02:4e:08:af:41:36:af:0e:
1f:93:e6:00:77:d8:02:6b:7a:c7:d1:b5:0c:21:9c:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DA:EE:36:67:C5:A3:E7:9C:6F:A4:B8:07:C3:51:BD:4C:13:EB:03
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/vtruNmfFo-ecb6S4B8NRvUwT6wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.4.0/22
185.55.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:64:ac:79:3a:92:7e:47:d0:4b:76:98:02:bc:d0:86:9b:bd:
55:d1:56:01:2a:9c:85:b3:07:75:20:30:bd:c1:23:21:d1:9f:
ef:24:20:e2:cb:d0:a4:10:8f:2b:6f:f1:69:05:95:0d:f4:f9:
58:9e:d5:a6:98:02:0e:24:47:48:33:ee:6d:2a:b1:b0:cf:43:
f9:91:ec:bf:d7:07:df:04:c8:46:63:0e:51:5d:1a:b8:80:56:
d4:7d:70:ee:1d:b3:51:6d:f1:3c:b7:62:99:da:7f:ec:10:46:
57:80:84:2e:59:ba:b0:61:ce:b7:b3:d1:6d:5f:5b:fc:ba:96:
b3:01:8f:ff:d3:f0:98:62:5d:c3:ed:e1:95:b5:ba:ca:c4:54:
4c:ad:3f:ba:c9:93:8c:cf:fd:db:da:91:96:d2:32:74:6e:9d:
32:bd:35:96:a2:71:ad:1a:63:ac:63:54:7c:fc:0c:4c:ad:eb:
53:f3:2c:7b:55:6e:c5:49:59:b4:7f:db:be:15:a3:b9:04:18:
43:94:23:57:58:fc:0d:a5:59:28:90:0e:68:77:b4:78:29:7a:
ef:5c:e7:9b:fb:64:ba:e5:7e:d8:e3:c8:ae:29:d3:ed:1c:31:
76:88:07:04:fb:8a:a0:c9:94:dd:88:8d:92:8b:95:18:b8:53:
9d:4a:ec:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org