Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/VazPDbQ9N1L-eB0wqN3fgn5NfsQ.roa
File: VazPDbQ9N1L-eB0wqN3fgn5NfsQ.roa (raw, json)
Hash identifier: VwSgOyEN7aQ/eNdDJafo9FjYbk+FsnS310Z8tmrzd8E=
Subject key identifier: 55:AC:CF:0D:B4:3D:37:52:FE:78:1D:30:A8:DD:DF:82:7E:4D:7E:C4
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 0187C33DD4FD030E7848E2828560E1C08491
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/VazPDbQ9N1L-eB0wqN3fgn5NfsQ.roa
Signing time: Thu 27 Apr 2023 15:03:41 +0000
ROA not before: Thu 27 Apr 2023 15:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204653
IP address blocks: 212.66.164.0/24 maxlen: 24
212.66.166.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c3:3d:d4:fd:03:0e:78:48:e2:82:85:60:e1:c0:84:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Apr 27 15:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55accf0db43d3752fe781d30a8dddf827e4d7ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:b8:31:f5:d5:3e:34:77:00:6c:a6:ff:dc:
f3:0e:94:8b:f5:b5:c4:29:f2:f4:b2:9e:7c:8a:b4:
59:f1:5b:8f:73:c1:9f:31:c7:c6:bb:92:c0:cf:69:
30:66:c0:d6:80:75:84:60:1d:bb:08:de:b9:8e:fa:
d1:d1:87:0e:1e:3e:c5:19:9c:17:9f:96:f0:87:8c:
83:6f:11:0c:65:44:c5:9c:26:99:13:a6:0c:3f:e5:
2a:a7:a1:73:a0:bf:76:0d:0b:8a:03:9a:b9:16:98:
60:b9:0b:9f:86:ef:3b:e2:0e:ca:2a:67:ee:5b:14:
3f:8b:42:ea:fd:64:a8:0e:ac:0e:09:a6:1c:30:25:
31:b4:12:f0:c7:26:3d:ac:7a:15:67:08:19:fe:67:
19:a4:57:32:f9:be:71:12:5e:3d:4a:c1:aa:53:69:
83:af:00:36:da:f1:43:38:c9:f2:af:e7:11:42:b2:
d1:33:bd:b7:92:fb:e0:75:4c:ea:21:1a:cb:91:f4:
f2:b9:68:02:a5:8e:c1:1c:cf:36:87:7b:a3:a2:c4:
04:4f:37:a6:64:3a:06:be:64:87:00:e4:eb:34:23:
fa:98:b9:e5:e9:b1:31:ff:f5:42:27:fc:2d:63:02:
f8:07:96:67:f8:04:26:df:63:a0:15:83:69:8a:ee:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AC:CF:0D:B4:3D:37:52:FE:78:1D:30:A8:DD:DF:82:7E:4D:7E:C4
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/VazPDbQ9N1L-eB0wqN3fgn5NfsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.164.0/24
212.66.166.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:7f:d3:a8:eb:a4:55:77:63:91:5e:57:92:b5:1e:05:2a:67:
0b:57:a5:3d:3a:fc:22:e2:44:12:87:7b:c1:a5:ab:09:ce:01:
df:5d:25:6a:13:95:b7:3f:e1:89:84:50:db:a3:5d:87:6a:7d:
4b:34:77:79:ef:02:4e:24:f4:59:ce:f9:86:a5:b6:c1:ac:ca:
80:71:de:2d:19:94:1e:c3:9e:90:ac:bd:49:8b:64:f7:b6:49:
b9:42:4b:6a:a5:17:f6:2d:61:6b:66:15:67:cf:d2:98:69:fa:
f4:b2:02:22:36:a4:47:0a:5c:81:6b:b7:6d:cf:ee:2f:cf:97:
3c:67:78:d4:1d:50:3a:dc:c7:e6:1f:ce:26:29:b0:a0:11:10:
90:3c:a0:01:f9:62:fa:9d:18:1d:46:d5:8f:9f:47:ff:ea:7d:
57:1f:d3:3c:6a:24:39:24:97:71:04:da:b6:0e:9d:38:f3:b3:
c3:24:42:81:db:c0:88:f1:11:94:06:e6:a7:2d:bd:dc:8f:83:
53:5e:39:af:32:7d:d5:5a:1f:22:3c:81:9f:01:83:58:a7:5e:
e6:72:cd:61:42:c9:07:7a:ec:a7:2d:ca:3d:f1:0b:da:74:86:
5f:a3:62:29:e8:b5:0c:42:70:6b:84:d9:14:4a:1a:82:73:72:
7e:48:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:21 2024 by rpki-client on console-fra.rpki-client.org