Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VxDrCRFsPUyZ8JiVLkVusZOGYYU.roa
File: VxDrCRFsPUyZ8JiVLkVusZOGYYU.roa (raw, json)
Hash identifier: 7lCfb8eE1RIcR8bgzBTguChK/SXAEH0q67ZqrpuIn7A=
Subject key identifier: 57:10:EB:09:11:6C:3D:4C:99:F0:98:95:2E:45:6E:B1:93:86:61:85
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190793A8E4FBDD9EBD16A2BF4B8ADC7FFC2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VxDrCRFsPUyZ8JiVLkVusZOGYYU.roa
Signing time: Wed 03 Jul 2024 15:33:18 +0000
ROA not before: Wed 03 Jul 2024 15:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 81.5.189.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jul 2024 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:3a:8e:4f:bd:d9:eb:d1:6a:2b:f4:b8:ad:c7:ff:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 3 15:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5710eb09116c3d4c99f098952e456eb193866185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:97:3f:5b:f7:c3:78:22:a0:b4:fb:99:0b:
85:84:c4:1f:f2:67:c3:3b:c9:90:68:e6:02:cc:32:
21:69:cd:dd:db:3e:ac:2f:4d:48:d0:b8:78:0d:e7:
26:cc:c7:8d:64:ec:cd:b8:63:a5:df:05:09:74:f7:
d1:16:7e:76:80:f5:68:fc:25:29:98:f8:a6:23:07:
e1:09:db:ef:92:b4:c5:30:8e:8a:26:25:f9:65:d4:
fd:fd:97:07:bb:e1:76:58:ca:ad:fd:5e:43:14:0c:
d6:5d:67:64:a4:19:43:98:8c:fc:2c:7d:f0:48:e7:
d4:7b:d3:f1:e9:a6:f8:ca:a9:03:21:e5:e3:0d:3e:
e6:ba:16:55:7c:e4:a8:53:f3:3e:d5:47:92:eb:0f:
8c:68:b7:f7:a9:8e:52:f7:ea:bf:ba:da:76:29:9d:
ec:bb:59:56:5a:89:11:90:bd:18:4b:17:ff:8e:be:
05:bf:4f:61:c8:69:b2:5d:18:73:6f:b3:f6:2a:26:
b7:91:aa:f3:f6:7d:19:05:d0:6d:72:ab:84:be:90:
00:3b:e5:b9:a1:17:ac:03:e4:e5:ce:81:92:9f:ba:
31:b7:57:76:65:29:15:f4:da:d7:bb:20:c0:a4:0d:
11:25:49:83:50:94:57:5e:e3:4b:64:7f:8f:c5:04:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:10:EB:09:11:6C:3D:4C:99:F0:98:95:2E:45:6E:B1:93:86:61:85
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VxDrCRFsPUyZ8JiVLkVusZOGYYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
89.213.146.0/24
89.213.152.0/24
89.213.176.0/24
89.213.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:cc:18:1c:11:58:57:0b:a5:95:00:72:03:d0:ef:f5:7f:5a:
db:ac:14:e2:7e:cd:e1:ec:6b:61:07:34:69:ed:ed:ec:04:10:
71:c1:fe:de:35:de:e2:39:02:9b:4b:2b:5e:4a:ab:62:a9:32:
8e:70:f7:67:ea:8a:70:88:1c:58:b3:e4:66:31:0b:84:91:38:
f1:2f:03:89:86:7f:62:2d:d7:6f:f2:47:33:b3:3e:2b:da:f0:
1d:8f:10:34:49:df:d2:74:ad:d7:d8:eb:86:52:2e:12:eb:c6:
96:a8:c0:57:18:9e:1f:65:9f:5c:30:5a:d5:0b:e8:e4:2c:2c:
d2:19:50:c1:46:da:08:1f:25:84:e2:d2:ae:41:26:f9:2c:8b:
5a:be:4e:f8:7d:9d:c7:d3:ec:ca:a7:6d:23:c2:4a:86:c8:c0:
f0:86:fd:8d:21:43:2e:0d:af:91:92:08:b8:61:a6:98:1e:9d:
da:5d:9e:3b:63:c0:bc:0e:6a:34:8f:69:f9:47:63:40:0a:6f:
53:55:09:cd:bb:75:26:86:81:06:ad:ad:3a:62:95:7f:91:b3:
c3:6d:fa:b6:f3:2d:44:f6:14:f4:f6:6f:14:e9:98:f2:a0:84:
1a:45:d4:0a:ca:7f:ec:59:88:b6:4f:d2:18:76:fc:e5:f3:9f:
12:eb:e3:b8
-----BEGIN CERTIFICATE-----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Generated at Sat Jul 27 16:30:46 2024 by rpki-client on console-fra.rpki-client.org