Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/vNpUm8CFK_jd9hnVjUeg7PzLqzk.roa
File: vNpUm8CFK_jd9hnVjUeg7PzLqzk.roa (raw, json)
Hash identifier: foVYqSIIj4jCzxVzFP2DxhfRX+NNzwRMIdLUd+rNdhs=
Subject key identifier: BC:DA:54:9B:C0:85:2B:F8:DD:F6:19:D5:8D:47:A0:EC:FC:CB:AB:39
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 0185704BD79510960B30388BC2B41BF6C5D4
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/vNpUm8CFK_jd9hnVjUeg7PzLqzk.roa
Signing time: Mon 02 Jan 2023 02:24:56 +0000
ROA not before: Mon 02 Jan 2023 02:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199118
IP address blocks: 91.198.250.0/24 maxlen: 24
195.10.208.0/24 maxlen: 24
91.223.20.0/24 maxlen: 24
80.241.56.0/21 maxlen: 24
185.97.172.0/22 maxlen: 24
2001:67c:2050::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:d7:95:10:96:0b:30:38:8b:c2:b4:1b:f6:c5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Jan 2 02:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcda549bc0852bf8ddf619d58d47a0ecfccbab39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:59:b0:e7:2f:5c:22:06:6e:36:29:2d:f6:
0d:8e:df:70:91:56:bb:49:3d:72:7e:95:3d:51:8e:
45:44:88:45:71:e4:ee:ab:78:c6:e1:69:86:ff:cd:
15:9e:80:b9:d6:a8:56:b9:1f:5c:d3:bf:a5:8e:c0:
4a:db:86:bd:b8:4a:8f:ee:45:41:1f:a4:8a:c5:da:
c0:14:98:1e:a4:d8:67:59:c7:62:47:06:27:66:d6:
94:87:20:1b:3c:88:b7:7d:a7:22:b6:c6:95:d8:28:
0e:e4:ad:a8:11:08:b7:0c:49:7f:d6:21:2c:02:05:
73:c1:b2:af:c2:05:3d:8f:2c:18:05:58:10:a4:5f:
6a:92:a7:ee:31:01:82:dd:4f:26:db:c4:81:26:f5:
54:17:13:58:d8:b5:c0:72:8b:60:b2:20:3f:99:13:
37:5b:e3:df:00:00:b6:e2:52:b4:27:30:bf:f9:4c:
18:4f:7f:20:02:a6:73:47:c9:be:87:a3:8e:07:d9:
6f:62:4f:58:ee:4c:53:e9:50:ab:e9:1c:69:9c:e4:
52:dd:80:b6:45:60:4a:c7:c8:91:d4:4d:09:6c:eb:
32:5d:55:8d:70:6e:f5:3c:70:f4:ab:d1:dc:ae:c1:
3b:ee:24:a2:dd:bb:9e:71:2f:cc:24:dc:ed:75:ca:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DA:54:9B:C0:85:2B:F8:DD:F6:19:D5:8D:47:A0:EC:FC:CB:AB:39
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/vNpUm8CFK_jd9hnVjUeg7PzLqzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.241.56.0/21
91.198.250.0/24
91.223.20.0/24
185.97.172.0/22
195.10.208.0/24
IPv6:
2001:67c:2050::/48
Signature Algorithm: sha256WithRSAEncryption
91:fc:ff:2c:b5:42:9c:b5:a2:e6:95:fd:c1:01:dc:86:83:ac:
9a:82:0d:2b:cf:c6:37:93:07:81:99:60:08:eb:cb:f9:55:56:
04:97:c0:58:63:59:26:29:c2:5c:72:d0:eb:22:5f:e0:6d:a0:
21:ce:0c:a9:68:7b:ca:6b:5f:a6:19:02:ec:87:4d:d8:cc:b4:
df:19:f1:b3:44:ea:11:eb:e5:fe:da:9f:0d:79:c0:cf:a2:45:
6d:25:c8:f8:e0:af:a7:fd:61:28:de:f9:6e:74:ec:0f:0d:e1:
ad:60:bb:0a:4e:94:1a:4a:1d:66:54:dc:f7:9a:92:63:89:a6:
8c:74:bb:c6:09:e6:4a:9d:16:05:c5:6f:81:c0:9e:a4:32:b4:
25:e7:3b:1a:78:16:bd:25:e2:23:6f:f6:e3:f2:14:9a:8e:16:
3a:39:f5:59:d7:48:7d:7b:33:e4:1b:59:99:40:8d:b8:3f:7f:
d1:f0:56:0c:03:4e:07:86:9f:e0:64:d8:64:ee:c9:92:88:ce:
e9:e9:b8:9c:5b:10:d3:80:e2:3e:76:f8:a7:66:8e:d7:ed:f8:
c3:34:1c:35:2c:d5:cb:67:62:0b:94:57:a5:12:9b:e3:19:ee:
39:78:a7:45:aa:da:21:19:46:2a:51:34:4e:e0:39:7a:04:e9:
ad:19:28:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:13 2024 by rpki-client on console-fra.rpki-client.org