Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/vv9nQees3zggW7kQ7iiOiiH76HM.roa
File: vv9nQees3zggW7kQ7iiOiiH76HM.roa (raw, json)
Hash identifier: 3b1urNL6utMqoPJsVXMHnhHe4qi+e9OM87ki6ZDG0bE=
Subject key identifier: BE:FF:67:41:E7:AC:DF:38:20:5B:B9:10:EE:28:8E:8A:21:FB:E8:73
Certificate issuer: /CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Certificate serial: 01880C2BAEB66F40E8CDADCC12B7131F5CD0
Authority key identifier: B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/vv9nQees3zggW7kQ7iiOiiH76HM.roa
Signing time: Thu 11 May 2023 18:56:09 +0000
ROA not before: Thu 11 May 2023 18:56:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47527
IP address blocks: 213.142.140.0/23 maxlen: 23
45.95.208.0/24 maxlen: 24
2a00:b921::/32 maxlen: 32
2a00:b920:200::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0c:2b:ae:b6:6f:40:e8:cd:ad:cc:12:b7:13:1f:5c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Validity
Not Before: May 11 18:56:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beff6741e7acdf38205bb910ee288e8a21fbe873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:32:7a:87:87:9b:69:57:cc:2e:72:c3:4f:0c:
a6:f8:a4:51:0b:f7:41:bc:70:13:17:e6:86:38:57:
3d:bf:94:0c:4f:b3:d5:5e:8f:ee:47:fc:70:81:79:
43:13:8a:98:ff:21:4f:e3:cd:3f:7c:fa:f3:6f:28:
b0:96:bb:94:40:b6:36:39:06:57:e2:c1:91:ba:43:
0f:54:b7:c8:18:70:b2:ad:54:56:81:86:8a:e4:98:
db:4f:ea:8b:55:04:e8:78:8e:4d:dd:fa:64:41:b2:
a9:58:27:e8:0a:ed:20:58:e9:e4:04:43:34:30:25:
aa:d8:79:22:cc:fd:95:c8:5c:bc:4f:4a:83:f3:c5:
26:38:a2:1e:cf:ee:44:1f:38:cc:90:97:78:c0:7e:
41:14:47:d1:c3:48:c6:e9:c0:76:23:fb:1a:8f:5f:
9f:d1:04:d3:30:6f:4b:bb:fd:8f:62:99:9d:43:a3:
6c:61:fa:ba:31:b5:30:9f:fb:cb:bc:4a:5b:7d:b8:
65:fb:f6:cc:38:8b:77:43:1a:a3:67:1e:54:89:d4:
16:e7:de:2e:90:0d:f5:81:4b:7f:65:8b:35:8f:d8:
5e:79:a2:85:b8:34:fb:ab:d0:68:6d:e8:b6:42:74:
bd:de:d7:93:4d:da:4c:0b:45:ed:88:b7:03:0a:45:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FF:67:41:E7:AC:DF:38:20:5B:B9:10:EE:28:8E:8A:21:FB:E8:73
X509v3 Authority Key Identifier:
keyid:B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/vv9nQees3zggW7kQ7iiOiiH76HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.208.0/24
213.142.140.0/23
IPv6:
2a00:b920:200::/40
2a00:b921::/32
Signature Algorithm: sha256WithRSAEncryption
3b:c8:03:47:8e:3e:29:0f:17:d7:83:24:1f:06:a0:a9:ef:07:
00:3e:16:a8:b2:91:d3:e8:06:7a:19:51:50:cc:34:6d:34:c7:
67:cc:2b:1f:7c:fe:e4:2c:b5:86:15:c3:51:e7:17:cd:04:53:
fe:4b:2c:8a:91:9e:d2:51:c6:9b:8f:52:f2:13:1c:38:30:a5:
f7:86:2d:93:a3:2d:e1:56:4d:62:1c:ce:ed:08:80:e9:f2:f9:
ae:ea:ea:1c:2e:53:4a:5e:90:04:f4:56:5b:60:17:8b:57:d2:
cf:b2:ad:b6:31:e0:09:e0:b4:47:c0:2c:ef:d8:49:bb:43:03:
68:e9:7f:50:e9:ed:68:41:24:3f:dd:be:b1:7f:84:df:54:48:
93:6c:a0:3d:b1:48:8f:3c:75:40:25:04:0c:dd:65:d9:85:5d:
61:1f:22:44:0b:df:cb:b4:b7:18:9d:0f:9c:79:e0:25:d9:0a:
e9:fb:da:cb:c6:17:5c:2a:a7:64:bf:7b:89:8f:a1:70:b4:a1:
86:83:41:38:ee:f0:8c:d2:fa:f2:e4:de:0e:0b:aa:df:64:49:
c2:0a:93:bd:12:2a:fc:b4:39:4d:95:12:9c:cc:29:a9:5b:5a:
d7:8d:f7:40:97:34:c7:46:38:cd:28:25:ae:c5:53:1a:bd:df:
ef:5a:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:55 2024 by rpki-client on console-fra.rpki-client.org