Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/vMOBsXD1-LsrayLiVDlevaceGG0.roa
File: vMOBsXD1-LsrayLiVDlevaceGG0.roa (raw, json)
Hash identifier: yDoLjUfxkvBM+osOVqNrWfErverw9Q29kA9vlessvL4=
Subject key identifier: BC:C3:81:B1:70:F5:F8:BB:2B:6B:22:E2:54:39:5E:BD:A7:1E:18:6D
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 01856E26537DAAEEF02B883EDBEF57064B99
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/vMOBsXD1-LsrayLiVDlevaceGG0.roa
Signing time: Sun 01 Jan 2023 16:24:43 +0000
ROA not before: Sun 01 Jan 2023 16:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35829
IP address blocks: 193.151.172.0/22 maxlen: 24
206.190.220.0/22 maxlen: 24
2a0d:e8c0::/29 maxlen: 31
2a0d:e8c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:53:7d:aa:ee:f0:2b:88:3e:db:ef:57:06:4b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Jan 1 16:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcc381b170f5f8bb2b6b22e254395ebda71e186d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:e2:e4:fe:b5:a6:20:9a:66:01:a1:9b:4e:
2d:26:0e:09:1f:29:2b:9e:f8:82:b4:59:65:9d:ba:
9c:53:ca:2d:60:8c:a4:7a:3c:41:01:f1:39:7e:02:
19:77:ca:2d:37:63:e8:3d:af:99:5f:fe:17:29:d4:
65:82:56:9b:84:63:14:3c:01:57:2a:a6:ac:fe:92:
1c:ed:1a:b2:82:b8:50:ad:24:8b:2c:ec:59:03:2b:
ca:78:11:b2:c2:75:c8:19:44:c5:ad:33:a5:73:54:
df:90:2f:dd:b3:27:67:d6:30:c5:12:42:e1:ef:09:
21:b7:2b:41:d4:80:71:c3:b6:02:40:0f:e3:33:d9:
9d:94:f4:9a:bf:05:09:a6:8a:b2:e4:8e:0a:a6:d3:
10:4b:1a:e8:ce:ff:5f:5d:a2:6d:9e:65:3d:2d:17:
36:b1:76:69:c8:5c:c5:9c:d9:3d:ba:18:33:e9:72:
3a:86:a2:fc:0d:52:b8:30:b7:01:9d:87:cf:7a:ab:
ba:82:63:a0:5c:f3:c7:79:c2:96:cc:f4:a9:1a:2f:
61:a2:aa:81:2a:cd:8a:d1:7c:de:03:25:71:ae:8c:
10:10:a8:46:5f:bf:b0:44:24:4b:89:c5:a7:0f:35:
c8:d3:89:8c:e9:24:ae:67:53:3f:4f:86:c1:14:77:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C3:81:B1:70:F5:F8:BB:2B:6B:22:E2:54:39:5E:BD:A7:1E:18:6D
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/vMOBsXD1-LsrayLiVDlevaceGG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.172.0/22
206.190.220.0/22
IPv6:
2a0d:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
a6:40:7e:15:67:37:21:a7:63:8b:ab:02:82:c5:c7:94:c7:e7:
22:31:72:65:12:8a:12:b6:bc:b7:9a:3e:ba:70:20:c0:09:47:
4d:21:7f:e6:47:5f:ad:c1:da:19:cb:39:ab:5b:83:23:ec:cb:
a3:5b:dc:6f:e5:fd:d0:ad:01:e1:1d:c2:7d:ab:9f:97:35:13:
e6:86:08:1f:58:fa:27:8e:1d:46:a0:d4:ce:63:58:55:81:9b:
ab:3a:36:e7:bf:90:7b:eb:24:7d:eb:9e:c4:e2:27:08:df:18:
bd:7c:9b:c6:19:29:c2:be:c1:8b:7d:e2:f4:23:18:3c:68:2c:
16:d1:99:95:1f:02:bf:4e:1e:88:9d:5d:5d:f7:d1:f7:db:6a:
10:ba:fa:04:7f:ac:47:83:04:df:a8:bf:eb:57:09:78:99:28:
e9:4c:b9:99:61:e5:2d:17:44:86:6e:19:42:d9:2d:f5:cf:79:
68:5c:97:a2:fd:57:93:b3:62:f4:dc:35:25:c9:d6:86:88:ef:
07:e6:c9:99:3b:b6:80:af:79:1e:16:13:84:89:b7:65:19:c4:
b3:a4:4d:64:4c:20:58:9a:4f:9c:75:e1:ba:26:f4:01:13:82:
ce:1c:34:0b:11:d6:2e:e5:5c:bb:9c:b8:37:0d:1d:4a:b5:6b:
51:a6:b5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:12 2024 by rpki-client on console-fra.rpki-client.org