Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/V0vbPo-0LDdWNAGiaZq16LaLLK4.roa
File: V0vbPo-0LDdWNAGiaZq16LaLLK4.roa (raw, json)
Hash identifier: W78wX3MIrbC1vf33sPgpIjg1Ql3tgSSz73zDmmYnK+M=
Subject key identifier: 57:4B:DB:3E:8F:B4:2C:37:56:34:01:A2:69:9A:B5:E8:B6:8B:2C:AE
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 01856DEF639D5AE40E958AE2CD30CD4918E0
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/V0vbPo-0LDdWNAGiaZq16LaLLK4.roa
Signing time: Sun 01 Jan 2023 15:24:43 +0000
ROA not before: Sun 01 Jan 2023 15:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51175
IP address blocks: 185.101.190.0/24 maxlen: 24
185.101.188.0/22 maxlen: 22
195.110.50.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:63:9d:5a:e4:0e:95:8a:e2:cd:30:cd:49:18:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Jan 1 15:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=574bdb3e8fb42c37563401a2699ab5e8b68b2cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:f3:f7:38:96:f6:4c:ff:e1:77:80:01:50:
06:36:39:e6:1a:a9:c6:5b:88:55:49:f3:a3:fb:c7:
66:85:ba:29:f4:a6:6e:90:d3:b6:8f:d6:b6:86:dd:
80:c6:1a:0e:bd:ac:2b:c9:59:c7:f3:14:68:3f:17:
a0:f6:3e:47:1d:18:96:e6:0c:de:96:cd:2a:41:33:
63:ff:a9:97:57:94:d8:88:6c:b4:5d:9a:56:10:e0:
2d:66:cc:6d:66:bc:bf:9e:e8:47:32:c0:83:dc:59:
ac:99:51:f3:8e:bf:63:10:43:9b:3e:53:70:d1:07:
4a:f5:d6:7e:78:42:02:b7:08:4d:97:01:59:6e:dd:
3b:c5:bd:76:35:23:ad:6a:f4:4b:4a:1a:2b:e0:e0:
56:ac:0d:5c:32:39:df:25:98:1f:fb:f1:fe:db:86:
ba:72:9f:ce:13:f7:d9:3c:1e:17:e3:cb:2e:fb:2c:
a6:55:49:f7:1e:ca:6b:9a:82:98:b1:27:72:9e:5e:
ba:b2:41:87:2c:15:50:e4:11:1d:e4:8b:af:34:a5:
2b:b1:52:c3:97:5c:52:e7:21:78:8e:6e:29:96:76:
0c:f2:61:98:17:01:84:a2:46:30:c6:c7:e5:47:2b:
ca:15:c1:20:83:b5:8b:cb:ee:f1:5a:d4:91:1d:c6:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4B:DB:3E:8F:B4:2C:37:56:34:01:A2:69:9A:B5:E8:B6:8B:2C:AE
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/V0vbPo-0LDdWNAGiaZq16LaLLK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.188.0/22
195.110.50.0/23
Signature Algorithm: sha256WithRSAEncryption
75:a3:95:71:30:26:4e:28:ef:f7:72:78:a9:17:a1:0c:7c:2e:
c8:01:1a:3c:4f:23:df:96:83:d9:3b:98:67:c5:85:ea:2f:c6:
62:83:05:05:be:96:d9:db:ec:15:17:29:5a:59:31:f1:ff:56:
07:65:61:da:c4:a2:e0:38:f7:ff:6f:33:ce:96:1b:00:cf:3b:
02:ad:39:ea:c0:fb:ce:7f:df:fc:c9:f7:a9:f0:b3:ad:ac:72:
0a:b1:9f:39:dc:09:a9:5a:be:5b:21:99:03:e8:5f:25:11:b2:
33:0d:94:25:d9:28:5a:f7:4e:58:fc:73:66:c0:8e:66:c6:d4:
6b:90:96:ff:e1:b3:a7:36:d1:5a:d6:38:68:a2:3a:c6:2d:7b:
02:8c:e3:5f:9f:ea:66:6b:0c:f3:4a:f5:a1:9d:ca:a4:2f:9b:
3a:15:4a:99:6b:81:1f:95:26:f9:41:32:16:63:20:75:d1:51:
d1:70:68:00:dd:21:84:f0:67:30:74:28:40:c5:60:63:f1:4d:
1c:bf:e2:6d:9a:5b:a4:76:6f:40:6f:05:fc:ee:dd:31:bc:5f:
26:9d:16:83:7a:40:ca:cc:4e:70:16:52:fa:72:b6:de:46:43:
7d:c5:e7:c7:1a:cd:73:72:48:18:4d:77:cc:68:d3:ca:26:ec:
3f:33:07:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:15 2023 by rpki-client on console-fra.rpki-client.org