Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/VWOe0FwKTq1ymFebuPOIKi7ooXo.roa
File: VWOe0FwKTq1ymFebuPOIKi7ooXo.roa (raw, json)
Hash identifier: c7RmoaRXbNtvSgSln1PBF6nTz66BSMfPxdNSa53OmcE=
Subject key identifier: 55:63:9E:D0:5C:0A:4E:AD:72:98:57:9B:B8:F3:88:2A:2E:E8:A1:7A
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 01857230DCEC4D243FB4B3D8D42B4CC42233
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/VWOe0FwKTq1ymFebuPOIKi7ooXo.roa
Signing time: Mon 02 Jan 2023 11:14:42 +0000
ROA not before: Mon 02 Jan 2023 11:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50494
IP address blocks: 193.105.70.0/24 maxlen: 24
83.150.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:dc:ec:4d:24:3f:b4:b3:d8:d4:2b:4c:c4:22:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: Jan 2 11:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55639ed05c0a4ead7298579bb8f3882a2ee8a17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a2:3a:cd:6d:65:76:54:e2:26:77:b3:1f:27:
89:11:60:4f:93:04:20:b7:77:52:7f:ed:05:c8:31:
ed:d0:c9:55:0a:78:e7:95:54:f1:8e:2b:01:31:5e:
5a:05:c9:a7:77:a7:b7:33:7b:d7:42:e9:cc:ee:e5:
8a:55:ca:66:fb:f0:f1:5f:6c:2e:c5:57:4e:83:9c:
c1:ea:c9:98:ad:30:5a:b2:c3:b9:c0:5b:bc:de:21:
e9:e5:d0:03:f9:9f:36:fa:c8:2e:76:4d:9a:71:71:
75:50:6a:ab:b2:b7:bf:ce:8b:77:cc:18:11:23:d2:
a3:c8:27:c9:ac:17:dd:4b:4b:63:59:f8:e8:c4:b1:
4e:fe:2b:c8:d1:d7:9c:ff:25:b7:91:b8:7f:b8:60:
93:d9:b8:51:dd:c2:5f:c0:69:85:58:1b:bc:c8:b4:
75:d4:d1:94:02:76:fb:4e:4f:3d:3a:e5:69:b3:60:
1e:f1:ed:6b:10:23:0c:79:f3:a0:60:53:57:aa:1c:
2e:11:ef:e9:e6:a3:cf:2d:18:68:b6:65:44:bf:dd:
ca:a2:0a:86:eb:9c:c7:bc:18:34:d9:f4:ec:2a:c1:
82:1f:96:9d:05:bc:e6:37:26:a6:82:5c:91:cc:d3:
83:02:2a:27:29:1f:83:94:68:37:0c:12:16:8c:67:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:63:9E:D0:5C:0A:4E:AD:72:98:57:9B:B8:F3:88:2A:2E:E8:A1:7A
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/VWOe0FwKTq1ymFebuPOIKi7ooXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.204.0/24
193.105.70.0/24
Signature Algorithm: sha256WithRSAEncryption
70:7e:1c:13:6d:3a:89:72:13:91:88:e2:10:78:c6:bb:2a:05:
25:7d:d6:ad:7b:9e:b7:32:0a:0c:f4:03:1a:2f:78:82:85:f8:
88:d0:56:2b:6e:97:2b:c8:e0:34:87:2b:be:45:74:8f:15:cc:
4b:e5:fb:63:e6:89:f4:fe:64:f3:0a:aa:71:43:a2:97:44:5c:
84:4a:83:0e:d5:a8:95:3a:01:50:e1:2f:14:72:4b:3a:1b:00:
fe:d3:45:f5:cb:91:fe:02:c6:8e:94:74:3c:c1:7f:ae:80:8e:
43:fd:dc:9b:c2:c8:24:4e:d9:f0:77:9d:88:92:b5:83:5b:ae:
f5:63:ed:62:19:18:32:04:bd:d1:11:6a:42:a9:77:1d:6d:36:
7c:de:3e:00:0e:d3:c3:7f:ab:f7:14:3e:8e:76:bf:1b:71:63:
c7:ca:cc:c4:3e:0f:e8:02:42:9b:76:d4:3d:03:c5:1b:5c:95:
73:68:95:88:6a:4d:d8:1a:7b:24:67:92:76:9c:07:8f:5e:9b:
35:36:c4:50:98:f8:a6:f5:0b:5a:83:dd:1f:06:98:a6:bb:99:
b4:3a:3a:ff:23:ef:9b:8b:06:8b:45:0a:1c:fd:f4:16:72:de:
3b:d5:51:a5:d7:3a:1e:30:98:b5:fa:77:99:00:a4:70:a3:69:
3d:e1:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:11 2024 by rpki-client on console-ams.rpki-client.org