Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/VQHlPNKCXjTC2ll7wnYO61Tqvqw.roa
File: VQHlPNKCXjTC2ll7wnYO61Tqvqw.roa (raw, json)
Hash identifier: hPL7rqJKUsa2YmkXrmZb5ZDPp6rZutVn3/Rq7W+1LKM=
Subject key identifier: 55:01:E5:3C:D2:82:5E:34:C2:DA:59:7B:C2:76:0E:EB:54:EA:BE:AC
Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Certificate serial: 01857015408A1F32492365FA84E81474D31C
Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/VQHlPNKCXjTC2ll7wnYO61Tqvqw.roa
Signing time: Mon 02 Jan 2023 01:25:18 +0000
ROA not before: Mon 02 Jan 2023 01:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60670
IP address blocks: 45.155.110.0/24 maxlen: 24
45.155.109.0/24 maxlen: 24
45.155.108.0/24 maxlen: 24
45.155.111.0/24 maxlen: 24
185.180.184.0/24 maxlen: 24
185.180.186.0/24 maxlen: 24
185.180.185.0/24 maxlen: 24
185.180.187.0/24 maxlen: 24
2a0a:ad80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:40:8a:1f:32:49:23:65:fa:84:e8:14:74:d3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Validity
Not Before: Jan 2 01:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5501e53cd2825e34c2da597bc2760eeb54eabeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:a7:e5:d7:22:3f:ea:41:ad:4d:ff:67:c2:
f6:e1:7d:c2:0d:3c:47:1d:aa:73:26:dd:16:47:6d:
68:20:a6:5e:5f:c1:88:90:d2:ec:5c:17:08:8a:be:
55:fd:41:ea:be:4d:1b:0b:47:1d:46:8b:f5:72:91:
38:78:86:b8:c1:b1:f7:8d:b4:54:03:3a:b5:8f:9d:
ac:ef:7e:24:e3:48:c6:59:5e:5d:eb:0a:14:90:f3:
72:b7:57:71:66:24:ae:88:63:c1:46:bc:ba:d7:5c:
4c:8d:7b:2f:4a:e7:af:64:74:b6:06:f2:f1:fa:ad:
0a:da:6e:56:fc:4e:e9:14:cd:d3:7c:22:c8:cb:96:
0b:01:f1:d8:99:14:30:90:ca:d2:d2:97:53:62:d5:
58:71:f5:0c:a9:47:6d:ed:04:a2:2a:32:d9:62:91:
6d:b9:0e:ad:bf:06:a8:e6:a7:2d:d8:bb:9c:20:21:
8f:7a:8a:c1:1b:40:0f:a3:b8:92:b5:f1:5e:0b:86:
d0:c1:7d:b4:b0:79:11:a3:13:ae:6e:e0:2a:6e:00:
da:bc:6a:ff:65:a9:9f:24:f8:a8:8e:7d:9c:3e:ff:
34:b1:a1:27:20:5f:f0:05:5f:98:4a:d7:15:bf:61:
50:e0:73:1f:1f:d2:52:bd:7f:44:ae:81:2e:35:9c:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:01:E5:3C:D2:82:5E:34:C2:DA:59:7B:C2:76:0E:EB:54:EA:BE:AC
X509v3 Authority Key Identifier:
keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/VQHlPNKCXjTC2ll7wnYO61Tqvqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.108.0/22
185.180.184.0/22
IPv6:
2a0a:ad80::/29
Signature Algorithm: sha256WithRSAEncryption
aa:18:d9:18:1f:e9:d7:41:13:bf:3d:e2:89:e5:af:58:09:61:
df:5c:80:c1:4e:82:cc:bd:a9:dd:70:96:cb:7d:48:c0:bc:8e:
7a:64:ce:55:0a:2a:fe:02:a3:80:87:3e:e0:d1:54:29:f4:8b:
c9:f2:87:de:c9:6b:00:41:4e:42:e0:77:9b:dd:23:b6:00:65:
05:92:28:84:88:bf:a1:4f:61:a8:7c:b3:0c:cf:9b:5d:ca:e0:
ae:e7:58:fc:13:32:70:f8:a9:d1:c3:86:b3:b9:fa:22:af:39:
98:2a:a0:16:84:7f:59:f5:7c:63:b4:f6:78:f8:1f:39:01:14:
6f:67:2d:fb:35:bf:64:11:45:ad:27:4e:28:63:93:7d:fd:05:
a3:cc:7e:86:be:a4:0b:e5:68:c3:37:e6:5e:1e:de:d9:51:29:
59:a7:44:88:5b:ea:0c:05:84:26:7d:c8:d7:bf:a1:f6:66:9e:
06:6b:34:14:6d:11:fb:ad:e4:f5:17:dd:8a:46:30:65:4d:d4:
bf:e8:2c:5a:2d:f1:9a:dd:c2:ae:08:e8:e8:8f:45:31:3c:d7:
70:60:a9:21:9e:18:dd:17:0d:79:a3:4e:62:d9:33:9b:56:0c:
c0:2c:74:b7:f5:c9:b5:aa:97:54:5b:82:57:69:50:29:e2:77:
b5:e3:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:14 2024 by rpki-client on console-ams.rpki-client.org