Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/vybvmKCUBX30UdlXGqbwqOOE4Bc.roa
File: vybvmKCUBX30UdlXGqbwqOOE4Bc.roa (raw, json)
Hash identifier: l9Hv7LYGSNtI6YpUwmXBYnW4x7QlEkfVI9rTCUUkq4M=
Subject key identifier: BF:26:EF:98:A0:94:05:7D:F4:51:D9:57:1A:A6:F0:A8:E3:84:E0:17
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 0186642BCD6DAF1C324D305F9ED264FC92F9
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/vybvmKCUBX30UdlXGqbwqOOE4Bc.roa
Signing time: Sat 18 Feb 2023 10:57:17 +0000
ROA not before: Sat 18 Feb 2023 10:57:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.164.4.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
193.164.5.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
2a05:f7c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 22 Feb 2023 13:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:64:2b:cd:6d:af:1c:32:4d:30:5f:9e:d2:64:fc:92:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Feb 18 10:57:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf26ef98a094057df451d9571aa6f0a8e384e017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:46:0f:95:79:9d:d6:38:28:11:c2:17:c0:
63:8f:31:22:73:04:db:e9:c4:5c:f3:85:86:37:84:
9e:96:bd:ba:a5:4c:75:c5:b6:d9:d1:0d:33:cc:e2:
98:c1:6c:5e:ac:29:ad:eb:f6:c8:1c:01:3a:1f:df:
6f:1f:9c:67:03:87:29:e1:d3:49:1f:60:a8:1d:05:
a2:ed:96:67:64:1e:a2:88:72:4e:4f:61:d7:49:b0:
21:e3:f5:96:9f:27:8c:e4:c0:49:1b:3a:6f:59:71:
23:7f:27:27:d1:21:58:d3:80:bd:96:42:5b:a4:50:
eb:46:6e:fe:bb:d6:e2:07:da:88:d2:23:2e:b1:9f:
84:36:f2:8b:c1:ca:d6:fa:77:56:37:a8:80:0f:ab:
44:76:c6:a8:71:f7:db:79:74:3c:12:dd:ce:8a:f7:
f2:30:11:c6:10:86:a4:7f:86:f0:e7:55:ad:4c:fb:
0a:5d:d0:c3:9f:c1:58:94:cf:8b:2b:a1:9a:e4:14:
f2:30:08:8f:9c:4c:38:38:de:6e:71:66:e1:27:20:
f3:28:4a:cb:79:41:97:a4:3d:03:bc:72:d0:a7:5e:
f0:b8:5d:85:cc:f7:09:52:ad:68:84:ce:13:b4:ba:
0f:53:2e:64:83:fa:45:e2:f9:22:f9:2c:e7:16:bc:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:26:EF:98:A0:94:05:7D:F4:51:D9:57:1A:A6:F0:A8:E3:84:E0:17
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/vybvmKCUBX30UdlXGqbwqOOE4Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
185.93.68.0/24
185.93.70.0/24
193.164.4.0/22
IPv6:
2a05:f7c0::/29
Signature Algorithm: sha256WithRSAEncryption
8d:7d:b8:26:2c:b1:77:3b:ec:57:4d:41:30:1e:7d:83:70:74:
55:e9:66:fb:dd:71:bb:d6:01:32:28:9f:ed:9a:b2:a8:aa:e4:
f1:a5:e1:95:de:f5:63:4a:b2:d9:8a:83:cd:67:eb:82:0f:e5:
d7:e7:8d:ca:32:d3:23:13:34:ee:d6:86:0e:7e:40:16:77:c3:
ef:fd:18:ba:3a:69:18:cc:1b:7b:5f:a3:39:e1:70:8c:6e:8e:
79:fb:37:d6:2a:31:69:b0:f3:b1:3d:89:89:1e:f9:79:68:df:
14:7b:3d:5a:78:a4:1b:6e:87:d4:b6:dc:76:80:f3:3c:56:a7:
37:24:54:81:0b:d7:50:39:b4:9d:b8:32:93:91:91:0f:14:ea:
9b:15:f4:65:44:60:5a:d7:ec:58:65:6d:fe:6b:77:ed:53:85:
e5:07:af:da:bf:c6:60:85:75:83:2f:a3:5e:d0:cb:94:8f:69:
a5:bf:f1:36:b9:8f:80:7b:ed:e1:8c:4a:d8:97:74:0b:af:89:
01:7b:75:6f:52:b8:62:5f:25:ab:ba:2b:53:f7:bc:36:4a:76:
ef:ca:99:4b:4d:fb:f3:50:6b:a2:10:f1:f7:35:00:92:dd:1c:
e9:01:55:cc:5b:86:a5:80:ac:9c:60:4a:17:07:45:07:54:f3:
8f:a2:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org