Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/VZ-rN0mLi72jy2vUxvswDMQyjig.roa
File: VZ-rN0mLi72jy2vUxvswDMQyjig.roa (raw, json)
Hash identifier: v884jzq1N0cMI+pMLszDL5AGb07MoSFTouzquUD3/P0=
Subject key identifier: 55:9F:AB:37:49:8B:8B:BD:A3:CB:6B:D4:C6:FB:30:0C:C4:32:8E:28
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0185E79C3A26FB8713208E53FB20276B5E2D
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/VZ-rN0mLi72jy2vUxvswDMQyjig.roa
Signing time: Wed 25 Jan 2023 06:27:33 +0000
ROA not before: Wed 25 Jan 2023 06:27:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 86.104.160.0/22 maxlen: 24
89.46.176.0/22 maxlen: 24
92.114.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Feb 2023 07:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:9c:3a:26:fb:87:13:20:8e:53:fb:20:27:6b:5e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 25 06:27:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=559fab37498b8bbda3cb6bd4c6fb300cc4328e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:17:32:79:85:0a:cd:0d:20:8c:08:08:49:
e4:39:9c:92:bf:9b:60:b7:e3:ab:af:cb:bb:49:60:
98:fd:07:c1:1d:ed:5c:28:2f:51:16:91:da:12:fe:
d4:ec:97:2e:9c:aa:c6:b4:dd:54:c9:41:c2:ad:0d:
8e:3a:e3:c4:21:e8:9e:57:0b:52:6a:32:7e:da:79:
94:30:61:f9:93:4b:d9:a8:16:7f:40:a2:11:ac:a9:
54:cc:79:41:56:21:ae:cb:1c:2d:1a:cf:8e:2c:7c:
82:6c:d7:39:4f:58:03:f5:2b:1d:7e:4d:a2:98:96:
a2:a8:d9:34:a9:5d:84:cc:17:7a:6d:43:6d:a5:ad:
d4:06:82:34:e7:a4:14:f0:96:5f:27:ef:df:e0:cd:
77:b4:54:18:14:64:7c:db:d8:a4:f3:ce:77:29:38:
8d:98:f8:6c:29:2e:da:83:fe:1a:c5:e5:8f:18:65:
84:cc:87:4f:ec:17:ad:38:eb:3b:50:8e:b8:f8:4f:
9b:63:01:15:92:fc:74:b8:0e:04:13:81:14:05:ba:
65:8e:31:33:34:07:1d:14:9b:13:40:79:79:b9:bb:
90:6f:94:40:11:fc:6a:8e:c1:54:14:67:e2:ba:b2:
70:5f:72:e2:e6:48:7e:ec:69:28:86:09:e0:3b:16:
ee:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9F:AB:37:49:8B:8B:BD:A3:CB:6B:D4:C6:FB:30:0C:C4:32:8E:28
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/VZ-rN0mLi72jy2vUxvswDMQyjig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.160.0/22
89.46.176.0/22
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:57:b9:be:39:db:24:30:07:cc:a9:55:35:79:d2:ae:bd:d5:
bc:22:f0:2c:9b:b1:ac:96:10:68:52:8b:00:74:61:71:f5:8c:
9e:99:c9:d6:8a:f8:1d:f9:b3:43:25:59:f0:ad:a3:b4:77:9e:
35:99:33:2e:08:15:30:7c:19:09:3c:e6:6d:b7:ef:66:b4:f4:
66:01:8b:3c:8e:49:54:f5:a0:a0:1f:bc:94:8c:fa:fc:f2:75:
f5:a9:3c:5d:69:13:92:4e:8b:1c:f3:0c:ea:39:f6:16:98:e1:
ea:4b:cc:a4:90:f8:49:b3:0b:cc:90:47:bd:fa:28:0e:9a:96:
b6:da:fe:ff:53:05:a8:26:39:63:05:db:81:d4:5f:d2:f2:de:
f2:77:cd:24:fa:12:32:74:69:10:05:a2:b7:55:5f:d7:6c:bf:
cc:86:40:e7:d7:13:fd:42:71:5e:0e:c0:97:d8:2c:18:df:5a:
c3:33:bd:0f:bd:3f:43:13:b5:6c:54:14:e9:25:5b:8f:a1:1e:
74:fa:bb:6b:28:d9:98:e2:21:4a:0a:ba:35:94:4d:8d:10:75:
f4:61:80:0f:26:2a:16:70:32:e2:a2:c4:cf:f3:84:7d:f1:d0:
1d:f3:ab:e2:20:21:69:58:8e:76:22:71:9b:a8:e2:9f:32:bc:
67:35:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org