Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/vnrVpt4k0_UruzGwL1ybbAHbk8g.roa
File: vnrVpt4k0_UruzGwL1ybbAHbk8g.roa (raw, json)
Hash identifier: Go2qRxxV2UpQmQbiOvTvZ29tKMVB38hImuEFHppDygc=
Subject key identifier: BE:7A:D5:A6:DE:24:D3:F5:2B:BB:31:B0:2F:5C:9B:6C:01:DB:93:C8
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 0185728CAC96402B14650601664B4AE2DB40
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/vnrVpt4k0_UruzGwL1ybbAHbk8g.roa
Signing time: Mon 02 Jan 2023 12:54:59 +0000
ROA not before: Mon 02 Jan 2023 12:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199629
IP address blocks: 185.10.144.0/22 maxlen: 24
2a03:3a40::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:ac:96:40:2b:14:65:06:01:66:4b:4a:e2:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Jan 2 12:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be7ad5a6de24d3f52bbb31b02f5c9b6c01db93c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:28:ca:42:dd:76:fa:24:c9:fa:fa:bf:6c:1d:
35:7e:25:2c:58:d2:a6:93:64:ae:48:63:fc:29:f3:
56:dc:60:81:b9:91:5b:12:6f:61:25:2f:6f:ce:9c:
fd:45:38:71:52:be:a2:39:33:f4:20:b5:c2:6c:ac:
c3:eb:27:85:90:48:c8:65:cb:21:d8:33:d8:90:29:
30:fe:f9:f2:18:07:b8:7a:7a:36:9c:05:3d:db:85:
6a:e1:6b:c5:b2:23:31:0b:52:91:b6:31:1e:50:86:
f6:27:0b:ca:62:1d:d4:9d:b6:d0:af:99:aa:06:b7:
1b:d1:b4:18:cc:77:69:3a:a5:a7:1f:af:c9:ab:c0:
29:aa:50:d9:8c:ed:76:bd:c1:56:48:10:4b:85:64:
63:ed:3d:d0:15:78:9a:8e:44:e8:50:91:fc:3d:3b:
d6:f9:60:69:84:e2:6e:2b:b5:4b:43:d7:9c:2e:27:
3b:60:4d:ad:58:94:d3:a3:3e:a8:e0:cf:4b:c4:73:
99:c4:69:8b:aa:10:8b:30:2a:86:3b:0a:cf:76:93:
57:76:7d:61:57:52:51:e1:79:3e:d3:26:c1:72:7f:
7a:43:2d:5f:ca:68:1a:be:65:1b:ba:c4:09:f3:c4:
0c:f7:e8:65:a7:18:74:f2:ac:69:e2:26:cd:a6:a0:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7A:D5:A6:DE:24:D3:F5:2B:BB:31:B0:2F:5C:9B:6C:01:DB:93:C8
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/vnrVpt4k0_UruzGwL1ybbAHbk8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.144.0/22
IPv6:
2a03:3a40::/32
Signature Algorithm: sha256WithRSAEncryption
24:ae:9d:c7:75:f2:9b:ba:89:e4:16:8c:69:e1:1e:a8:8f:ac:
7b:ad:ec:b8:90:83:18:ae:ef:a9:fe:23:98:04:80:5b:43:9e:
d6:cf:52:58:a5:6d:b3:bc:97:01:b7:f8:41:5b:5d:e5:67:a4:
91:fe:82:1a:63:82:8f:ad:d4:08:61:d9:e0:9f:df:83:89:e9:
0b:78:08:a5:91:f9:00:85:b3:02:ca:43:2a:8b:1e:ee:7e:f3:
63:b8:53:ac:20:95:2b:15:a7:35:e5:71:ce:26:1a:ea:0b:2f:
36:d2:eb:01:7a:d6:e5:33:e3:7d:fb:ea:7a:26:5c:90:f6:22:
23:ad:c7:21:2a:2d:ea:41:38:5a:f4:45:71:be:a5:f7:03:08:
be:2e:0d:50:f4:de:d1:46:db:ae:05:1b:ac:24:0a:8a:bf:6f:
54:97:ba:9b:c2:49:e6:db:e8:aa:c8:59:f5:f8:a0:e9:88:e1:
d8:10:69:2d:b8:ef:68:bf:01:bd:21:04:b4:68:a4:4e:77:9f:
ab:e3:ca:22:b5:76:26:30:d9:8b:3d:6c:98:ac:ba:b9:ea:b3:
e5:05:79:06:53:3a:fc:4e:35:dc:ee:f9:a7:e6:92:c2:a7:c9:
ec:2e:62:19:89:b6:85:b9:c9:18:20:b1:98:f0:ea:65:f2:72:
b1:31:3e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:14 2024 by rpki-client on console-ams.rpki-client.org