Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/vi0NU9Q9N699xxWoS2sVGpr4WzM.roa
File: vi0NU9Q9N699xxWoS2sVGpr4WzM.roa (raw, json)
Hash identifier: 3PcnNc1VsREoFd21MGoGAV3AOv6c/fMFys3lZSDmZe8=
Subject key identifier: BE:2D:0D:53:D4:3D:37:AF:7D:C7:15:A8:4B:6B:15:1A:9A:F8:5B:33
Certificate issuer: /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Certificate serial: 01889AB8A498D020764CD57A1A7394B5A5CB
Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/vi0NU9Q9N699xxWoS2sVGpr4WzM.roa
Signing time: Thu 08 Jun 2023 11:16:11 +0000
ROA not before: Thu 08 Jun 2023 11:16:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201193
IP address blocks: 185.231.49.0/24 maxlen: 24
185.231.50.0/24 maxlen: 24
185.231.50.0/23 maxlen: 24
185.231.51.0/24 maxlen: 24
185.231.48.0/24 maxlen: 24
185.231.48.0/23 maxlen: 24
185.231.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 10:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:b8:a4:98:d0:20:76:4c:d5:7a:1a:73:94:b5:a5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Validity
Not Before: Jun 8 11:16:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be2d0d53d43d37af7dc715a84b6b151a9af85b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f7:84:b8:52:38:90:9f:8f:ab:39:36:41:6a:
4b:ce:3d:66:52:cc:06:79:c3:82:a1:d4:18:0d:e1:
3a:0c:46:fd:29:40:0f:80:83:2e:34:b1:38:46:d2:
bf:b4:f7:10:ac:6b:94:9f:bc:8f:49:2b:84:76:f3:
73:75:22:18:62:1c:b9:81:b0:ea:f6:8a:de:9c:f9:
d8:79:ac:db:4b:a3:74:c0:1d:6e:33:0a:63:a9:e0:
e0:68:49:03:1e:63:6f:cf:0f:48:ef:4c:d6:50:c4:
0b:ec:37:c6:3f:21:6e:74:17:fc:b1:41:5b:6d:3e:
e8:0b:9a:54:e7:71:aa:0c:64:0e:04:27:fa:7b:db:
b3:a5:5b:82:a1:62:07:92:48:54:fe:b5:02:12:c6:
a1:bd:ec:1e:33:8c:f4:c5:f3:c1:53:55:f7:fd:50:
e8:a7:c8:0a:b8:76:e7:d7:e7:9e:68:2e:07:e9:80:
e1:66:07:84:c9:44:96:18:b6:35:fd:c9:ee:8e:34:
4f:0c:dc:7e:2d:c3:11:9f:bb:e0:1a:4d:36:e8:d6:
79:5c:8d:a8:e0:f7:44:d0:48:ac:30:b5:73:28:54:
fb:90:51:0b:fa:e9:d5:55:ed:48:84:67:09:ff:9b:
2d:b0:2d:8f:43:06:97:49:e4:08:fe:48:3d:3d:65:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2D:0D:53:D4:3D:37:AF:7D:C7:15:A8:4B:6B:15:1A:9A:F8:5B:33
X509v3 Authority Key Identifier:
keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/vi0NU9Q9N699xxWoS2sVGpr4WzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.48.0/22
Signature Algorithm: sha256WithRSAEncryption
21:9d:11:ac:be:9e:d3:d2:d9:01:06:ff:c4:ac:71:e1:f3:7c:
b7:0c:13:5b:79:e0:f7:31:7e:91:46:c1:b1:57:c4:db:02:9b:
4c:6d:25:04:a2:a5:4f:ea:81:c3:6e:e3:99:5a:27:7e:57:0a:
46:0f:e3:bf:ea:ec:ed:11:e2:c2:d7:4a:0e:9c:09:71:54:82:
4b:d8:28:0f:1b:db:1b:0e:aa:22:8a:07:e6:63:ff:f4:3c:eb:
17:59:16:a6:3e:4c:d4:aa:df:9b:e6:cd:c0:b1:af:f9:0c:c6:
1b:c2:2a:85:53:94:b5:e5:69:21:39:b5:3c:88:0f:70:56:73:
07:78:65:fe:29:db:e1:53:a6:41:42:65:c5:04:e0:14:7d:46:
36:75:22:76:89:71:8f:5c:de:9d:24:5f:75:e1:ef:ef:5c:63:
37:15:96:c0:e0:b3:b3:00:00:fd:31:33:9d:f0:70:a5:03:68:
12:ac:9e:50:cd:59:ca:46:ec:d8:14:29:e1:ff:f8:2c:7b:08:
ea:cd:b0:4c:82:14:cb:d6:8d:ba:ec:97:2f:7b:4c:64:38:70:
f4:ac:6c:d7:28:69:b4:cc:5c:65:40:b3:1e:a2:06:40:c2:5b:
60:61:7d:e3:84:81:b6:7f:dd:ff:06:73:47:01:7e:8d:11:87:
00:53:0e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:06 2024 by rpki-client on console-ams.rpki-client.org