Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VrogsOuZTIfet4_V85iYeHxkSAM.roa
File: VrogsOuZTIfet4_V85iYeHxkSAM.roa (raw, json)
Hash identifier: y6+5d9fxxggi7f0U0kkxx7+QmB3hvIvYQ4h2QvTkzaU=
Subject key identifier: 56:BA:20:B0:EB:99:4C:87:DE:B7:8F:D5:F3:98:98:78:7C:64:48:03
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A3954A42D6CD85EE0DD237194C891
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VrogsOuZTIfet4_V85iYeHxkSAM.roa
Signing time: Tue 02 Jan 2024 12:33:33 +0000
ROA not before: Tue 02 Jan 2024 12:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201159
IP address blocks: 146.120.171.0/24 maxlen: 24
31.148.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:39:54:a4:2d:6c:d8:5e:e0:dd:23:71:94:c8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56ba20b0eb994c87deb78fd5f39898787c644803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d0:a1:53:99:a9:4d:7d:2a:ce:33:60:34:09:
5c:41:a1:f8:9e:67:af:c0:e3:c1:95:29:66:cc:bd:
ed:d0:16:71:ea:9c:cb:38:49:77:17:78:ba:79:5c:
de:8d:34:06:b5:aa:b6:db:9e:47:fa:ca:ae:fb:8f:
9d:0a:ce:97:4d:0f:2b:f0:d5:a4:02:98:36:b8:c2:
2c:bb:d7:ce:63:99:e0:51:0c:5b:e0:8c:69:6e:76:
44:16:7c:bd:e3:db:b8:68:53:85:05:c4:74:47:4e:
d5:fe:14:fc:86:f8:67:09:d2:dc:85:85:0c:f3:b5:
22:b7:ab:a2:de:db:eb:06:5a:43:29:d0:55:06:d0:
dc:b8:13:26:04:30:1d:79:50:26:6f:65:94:bb:67:
7e:03:f0:9a:dc:4e:23:61:0d:27:68:83:b5:2e:13:
ff:8a:09:fb:60:00:5e:21:a7:90:2f:fb:18:34:e6:
ca:91:fb:ed:81:49:e8:d7:4a:11:26:19:38:a6:ef:
27:e5:7d:ee:08:73:ce:2a:9f:1e:50:3a:bc:64:77:
ea:65:e7:cd:28:31:47:84:d2:00:63:0e:d2:7b:03:
97:a5:04:8c:b4:0c:7d:cf:15:d7:66:fa:2c:ea:e2:
e7:96:cd:eb:ad:e7:9f:f3:82:02:25:cf:c5:77:5e:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:20:B0:EB:99:4C:87:DE:B7:8F:D5:F3:98:98:78:7C:64:48:03
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VrogsOuZTIfet4_V85iYeHxkSAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.170.0/24
146.120.171.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:58:b6:b2:b7:cc:4e:c9:0d:d5:a4:f1:31:6a:d2:a0:d4:ff:
b3:40:43:16:6e:f7:1d:0b:e0:02:95:da:88:8f:46:93:d3:47:
3f:1d:19:10:b6:39:8c:73:e4:35:e9:94:e4:6f:19:8b:ca:03:
b8:bc:90:60:97:2a:8a:63:6e:f4:aa:d7:bb:41:33:2e:8d:65:
a5:6b:04:9d:d0:68:24:cf:e5:78:a4:b8:16:35:4a:a5:ca:9b:
b1:6d:b4:4f:2f:a3:71:9e:0c:69:b4:03:7f:61:13:57:4a:56:
88:6b:d8:3e:f9:ed:ad:a8:a9:d4:31:68:c9:3f:52:9b:86:58:
ca:65:be:33:37:8d:93:d7:17:e7:3f:c7:06:9f:b7:52:ce:9b:
df:d3:d2:8a:12:35:0c:b8:20:f2:6b:86:e0:45:92:18:0d:d8:
d4:a5:15:25:6d:b9:2e:fa:53:be:c0:b8:e1:fa:12:fc:bf:9a:
9d:6f:89:53:27:c6:b2:04:46:dc:7a:4e:0c:e9:fd:95:70:cb:
4c:18:20:0f:df:dc:66:5e:cb:9c:82:78:4a:0d:04:4b:f9:b9:
81:b6:b8:73:76:75:0d:17:58:64:1f:c2:40:6a:de:d1:ad:ff:
83:43:fa:6e:8c:81:c1:27:03:94:49:c1:b3:3d:ab:76:7d:22:
f6:01:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 13:04:23 2024 by rpki-client on console-fra.rpki-client.org