Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vQlXT3k_titGqFUprP8vZGEdPp0.roa
File: vQlXT3k_titGqFUprP8vZGEdPp0.roa (raw, json)
Hash identifier: CYBnQ85zxoyZZavBgpSQJGoF+jepozHF+f63nlsJG3g=
Subject key identifier: BD:09:57:4F:79:3F:B6:2B:46:A8:55:29:AC:FF:2F:64:61:1D:3E:9D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0185958E7DBC8E0B984627AC16D807999DAE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vQlXT3k_titGqFUprP8vZGEdPp0.roa
Signing time: Mon 09 Jan 2023 08:03:41 +0000
ROA not before: Mon 09 Jan 2023 08:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.136.0/24 maxlen: 24
94.177.150.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 12:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:8e:7d:bc:8e:0b:98:46:27:ac:16:d8:07:99:9d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 9 08:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd09574f793fb62b46a85529acff2f64611d3e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:22:b5:96:0c:56:7a:df:e7:47:9b:f2:83:
05:2b:74:36:10:85:b1:ac:73:34:46:88:f3:b1:62:
81:4e:6c:80:1a:ff:a9:6c:05:f9:99:5d:7e:a4:7a:
28:cf:4b:3a:a7:b9:6e:46:44:9d:4b:b6:67:be:c1:
4b:f3:b1:40:c2:d0:ac:24:a8:db:67:9d:c6:87:ad:
fc:3c:ea:35:47:8a:d5:1c:b5:51:9a:49:3a:73:8d:
e8:8e:cc:c3:70:ce:9c:c6:00:5e:5d:54:44:ad:d1:
6b:d6:41:44:b9:78:37:43:42:13:7e:7a:45:a7:27:
7f:17:3d:01:8e:79:39:ae:bc:96:cd:3c:62:e8:63:
c4:d1:19:cf:bf:4d:c6:28:84:a5:a3:c1:08:9b:16:
c0:dd:89:6a:27:05:84:44:4d:5a:5a:0a:3c:cd:f7:
31:0d:c2:55:1d:60:a7:0f:d8:5d:14:ec:1a:4c:b6:
b0:dd:0f:ad:0f:de:7e:47:09:a4:30:62:e6:92:25:
8e:f1:c4:94:c2:5e:00:cf:ca:8f:fa:59:49:e8:b0:
10:14:7a:1f:2a:62:f6:fc:fc:29:ca:e3:e3:de:75:
48:52:c2:29:6c:77:de:b6:3c:01:6e:8d:04:28:bd:
c0:01:e1:2f:fa:0d:fa:39:a4:f0:66:b4:a9:04:2e:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:09:57:4F:79:3F:B6:2B:46:A8:55:29:AC:FF:2F:64:61:1D:3E:9D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vQlXT3k_titGqFUprP8vZGEdPp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.244.0/24
94.177.150.0/24
188.241.136.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6b:6e:f8:59:40:f2:1b:ff:0f:66:56:4a:9a:3a:b3:2c:74:
cc:38:cf:e1:be:df:35:0b:e0:f3:11:95:01:48:5b:fc:eb:8d:
f6:d6:32:75:f8:af:3a:5f:56:42:46:01:a7:2a:52:ff:19:33:
4b:86:0b:30:0c:10:70:00:c2:7a:da:0d:a9:65:d9:89:08:46:
62:62:b7:fd:0a:05:51:8b:71:42:e4:28:63:40:5f:23:c4:98:
a8:fa:6f:c3:d6:e0:9c:11:22:7f:27:dc:bf:3a:d5:1c:66:73:
19:fb:7e:47:dc:93:0b:5b:aa:94:50:16:66:1d:94:38:db:3f:
7d:6f:3b:57:42:70:e5:12:62:32:5c:6d:84:1c:4f:41:41:22:
89:dc:5c:8f:25:42:fe:42:6c:9d:a3:16:fe:8d:25:fc:72:de:
af:60:17:83:d1:ba:7b:13:ed:82:a9:c4:45:1e:55:0a:5e:c9:
4f:16:0b:bb:d6:ef:6f:26:23:fc:4c:78:25:41:b4:23:a1:90:
ef:39:18:0f:14:82:a8:72:1c:68:18:03:cd:80:49:8a:df:9f:
f2:46:eb:e3:2b:76:79:25:39:f1:7c:f2:92:90:3a:58:1a:2f:
07:18:b5:75:ad:60:dc:86:06:bc:04:dc:e7:dd:7b:13:95:28:
7f:5d:b5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org