Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/vel3X2gvNJPhR70gna6If0c73z8.roa
File: vel3X2gvNJPhR70gna6If0c73z8.roa (raw, json)
Hash identifier: 5P+UtQD3PcWqIXqCLzThh8QXF4B9IT+pnpbOE0s6uC8=
Subject key identifier: BD:E9:77:5F:68:2F:34:93:E1:47:BD:20:9D:AE:88:7F:47:3B:DF:3F
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 018626E7C9776D37B5EAF041D98503FCA9B3
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/vel3X2gvNJPhR70gna6If0c73z8.roa
Signing time: Mon 06 Feb 2023 13:26:09 +0000
ROA not before: Mon 06 Feb 2023 13:26:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197898
IP address blocks: 194.48.232.0/22 maxlen: 24
2a0c:c740::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:e7:c9:77:6d:37:b5:ea:f0:41:d9:85:03:fc:a9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Feb 6 13:26:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bde9775f682f3493e147bd209dae887f473bdf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:76:9c:8f:7d:2a:48:f2:03:80:e3:51:ac:
41:b0:a1:89:a2:fa:72:e3:df:31:50:98:7e:c4:4f:
77:33:37:b3:2a:57:15:53:9f:97:b4:ee:fe:1a:3b:
5e:34:79:10:0e:34:86:8e:f8:80:c8:59:a3:49:99:
f1:d3:15:89:fe:33:80:9b:69:9a:25:63:09:1c:54:
db:87:dd:9e:f0:ea:82:c3:0d:85:c4:a9:52:9c:b1:
79:93:c4:78:8d:09:70:a4:9f:8f:1c:b2:72:c0:fb:
89:fc:4c:49:49:9c:0d:be:ee:b0:9c:a9:cc:7c:7d:
9e:74:71:6f:bd:23:0e:15:dc:d2:4e:14:6d:f6:32:
33:eb:9a:1d:ce:93:a0:60:8b:44:3b:22:6c:a6:6e:
cf:3c:b0:03:a3:65:6c:1c:78:56:1a:d9:41:76:34:
1a:08:2b:7f:6b:93:3b:53:ba:bd:ee:90:09:ca:ee:
1d:6a:37:62:81:6c:99:2c:2f:7d:b2:25:1a:57:ff:
43:2a:a4:a7:9c:c3:7a:e5:2c:b4:77:cc:6b:21:0d:
74:a9:2d:ff:ef:5b:47:cd:a5:94:70:ba:64:8e:93:
d6:e8:cd:a5:66:67:a4:7f:07:25:5b:9d:78:75:12:
3d:ef:40:fc:66:cf:24:45:ce:f4:f7:4a:91:f9:a3:
2e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E9:77:5F:68:2F:34:93:E1:47:BD:20:9D:AE:88:7F:47:3B:DF:3F
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/vel3X2gvNJPhR70gna6If0c73z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.232.0/22
IPv6:
2a0c:c740::/32
Signature Algorithm: sha256WithRSAEncryption
4d:e7:1f:8a:c9:10:55:32:b8:73:4f:6f:78:3a:8a:63:31:4e:
1f:75:09:69:d8:ac:20:44:40:10:d1:9b:dc:2e:6c:50:c1:ce:
10:33:ca:07:58:b2:c3:32:b5:44:55:fa:46:2c:81:38:7c:eb:
b2:ac:6f:8a:d3:ae:0b:1e:28:53:42:3d:c0:f9:e7:da:70:e6:
a2:e9:1e:7d:c9:c8:a1:d2:f7:1c:e6:f8:24:00:33:98:1e:fe:
46:94:f8:d9:44:77:78:08:09:56:02:de:e3:97:24:f8:50:0c:
df:e6:fa:e5:3f:c7:d6:10:33:87:f1:4f:63:34:8e:90:22:47:
b8:c5:0f:64:e5:c6:b7:60:b2:f4:e1:e8:19:d5:84:45:2f:4e:
0b:08:e6:72:f4:16:b9:75:d4:c4:02:d6:ab:84:ca:ad:07:0b:
f7:4c:6b:51:9a:0a:13:96:87:1e:03:c4:23:98:2e:37:e8:0e:
2e:62:31:a1:f0:a6:50:a8:78:0c:18:30:2a:f1:d9:9a:93:1c:
fb:0d:c2:05:c9:34:a1:6e:8d:56:18:e6:23:8d:66:e8:57:fa:
68:6f:05:42:83:ee:a3:7e:c8:05:7b:68:08:e7:08:2f:b0:fb:
fc:f4:15:30:75:1e:46:3a:95:b8:36:57:9c:41:30:0b:1c:5b:
4f:e2:08:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:12 2024 by rpki-client on console-fra.rpki-client.org