Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/VP6BLRK4Bg94Cy0ItjuaHz0iwpI.roa
File: VP6BLRK4Bg94Cy0ItjuaHz0iwpI.roa (raw, json)
Hash identifier: wawKoPT7whrrVsE/VoIaXmIUHolGrW7myFGmc/I2kF4=
Subject key identifier: 54:FE:81:2D:12:B8:06:0F:78:0B:2D:08:B6:3B:9A:1F:3D:22:C2:92
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0186E94437166F68B47FEBC073E82752E513
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/VP6BLRK4Bg94Cy0ItjuaHz0iwpI.roa
Signing time: Thu 16 Mar 2023 07:13:27 +0000
ROA not before: Thu 16 Mar 2023 07:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 180.235.160.0/20 maxlen: 32
188.212.136.0/21 maxlen: 32
180.149.0.0/20 maxlen: 32
93.113.52.0/23 maxlen: 32
110.238.192.0/19 maxlen: 32
185.66.136.0/22 maxlen: 32
180.149.16.0/20 maxlen: 32
94.139.224.0/20 maxlen: 32
119.12.192.0/21 maxlen: 32
77.81.92.0/22 maxlen: 32
176.223.182.0/23 maxlen: 32
Validation: Failed, certificate revoked on Thu 16 Mar 2023 11:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:44:37:16:6f:68:b4:7f:eb:c0:73:e8:27:52:e5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Mar 16 07:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54fe812d12b8060f780b2d08b63b9a1f3d22c292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e3:10:ef:f0:a5:42:dc:95:7a:ec:e4:59:e5:
85:f9:5c:69:3a:75:83:98:6f:54:6c:90:8c:cf:ba:
c1:93:5d:58:4b:a7:aa:49:85:47:5f:dc:89:f6:70:
85:c2:3c:6a:b5:3d:ff:b1:33:8a:4e:6d:a0:b8:d1:
ca:5b:f2:0b:fd:ba:0b:3f:1a:c4:9d:23:c7:da:53:
ab:86:e1:21:5f:74:aa:8d:8f:ef:c8:c7:02:e7:19:
52:92:0d:22:5f:25:68:7c:c4:e5:2c:e4:2e:0d:8b:
3b:c3:b5:51:79:a7:34:a6:04:e0:7a:76:3f:90:c3:
f4:ee:1c:bd:43:86:46:33:37:8a:e7:2b:3d:09:b2:
d8:f7:41:24:b4:e4:95:03:af:33:c5:3f:ad:59:6e:
2f:0d:bd:17:8e:42:14:1f:e9:ab:9b:cd:2a:95:e0:
09:58:44:97:cc:ba:5e:74:a2:9e:56:2f:4f:82:68:
82:36:15:90:35:0b:84:12:73:d9:71:85:fe:26:87:
47:df:3d:ef:b8:79:05:2e:93:c4:95:4e:4c:ff:7b:
51:0d:f0:f7:8a:87:b0:80:f7:13:c5:38:14:67:5e:
f9:a1:d3:6c:67:f5:d3:19:10:97:10:38:2a:07:b2:
19:7d:3c:5f:aa:2e:52:32:81:b4:6f:12:e2:88:ad:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FE:81:2D:12:B8:06:0F:78:0B:2D:08:B6:3B:9A:1F:3D:22:C2:92
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/VP6BLRK4Bg94Cy0ItjuaHz0iwpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.92.0/22
93.113.52.0/23
94.139.224.0/20
110.238.192.0/19
119.12.192.0/21
176.223.182.0/23
180.149.0.0/19
180.235.160.0/20
185.66.136.0/22
188.212.136.0/21
Signature Algorithm: sha256WithRSAEncryption
55:9e:1f:dd:8a:c9:43:ec:bb:30:e7:ed:ab:e1:1c:ee:e6:7e:
ac:03:77:c3:82:ab:48:e5:5a:52:ea:d0:29:6f:09:1c:16:a6:
d0:48:c3:1f:85:31:d5:c5:e4:0b:eb:20:3d:f8:e4:b7:b7:54:
ca:8b:88:ea:23:09:48:ad:b5:90:7a:eb:3a:61:79:d5:46:37:
c0:60:a8:8d:d6:63:4d:30:bf:6b:07:da:11:40:6e:8f:7b:da:
1b:22:5b:2a:f8:1f:e6:c6:08:33:04:36:fb:36:5c:5d:ac:11:
f2:ea:a8:79:b6:a2:d2:8b:df:1a:d8:40:6f:e8:53:74:da:25:
d8:8e:b8:6b:ea:57:b3:1e:f1:27:0b:77:fa:be:ec:24:cb:54:
12:23:be:e2:d1:ea:cc:14:b1:f7:31:d8:19:4b:5c:f9:8c:4d:
b1:be:e8:ba:ab:e1:5d:5a:89:98:69:05:f6:f3:a4:fc:4e:ca:
52:4a:a9:f6:c3:51:bd:51:cf:3c:21:e9:83:ef:c5:f8:2f:9c:
70:84:3a:18:42:5e:0f:21:2a:ba:0e:4c:17:e6:0b:52:1d:4a:
05:9d:ec:7c:d5:39:c2:9d:27:f4:c0:4a:79:9b:95:49:33:b7:
87:3a:63:28:6c:b6:1d:ec:3e:df:a8:39:0c:46:48:b0:0c:be:
bd:bf:b8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:45 2024 by rpki-client on console-ams.rpki-client.org