Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/vsGWwPC6T-wbNQuLPqOmaWl7QvU.roa
File: vsGWwPC6T-wbNQuLPqOmaWl7QvU.roa (raw, json)
Hash identifier: 51OiZ5kAlSoyb40ORsiH18RrX0gAzit9rfG2MeEwoXs=
Subject key identifier: BE:C1:96:C0:F0:BA:4F:EC:1B:35:0B:8B:3E:A3:A6:69:69:7B:42:F5
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0192575A9C3BB4555EC9E1553988AB5CD088
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/vsGWwPC6T-wbNQuLPqOmaWl7QvU.roa
Signing time: Fri 04 Oct 2024 11:46:48 +0000
ROA not before: Fri 04 Oct 2024 11:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 91.184.240.0/22 maxlen: 24
91.184.254.0/23 maxlen: 24
185.197.74.0/24 maxlen: 24
185.230.143.0/24 maxlen: 24
193.188.20.0/24 maxlen: 24
193.188.21.0/24 maxlen: 24
193.188.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 15:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:5a:9c:3b:b4:55:5e:c9:e1:55:39:88:ab:5c:d0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Oct 4 11:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bec196c0f0ba4fec1b350b8b3ea3a669697b42f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:36:ce:b1:58:b2:de:4e:3e:78:28:5a:24:
94:d9:42:62:e6:3e:16:fb:df:25:ab:92:22:7f:0e:
0c:5a:19:ad:c5:e2:c7:fd:a6:c1:6d:96:5e:75:06:
9a:4e:bf:f6:7e:b6:f4:2c:b4:75:c9:f9:f7:91:e5:
ed:17:6b:3d:fb:69:25:87:01:b2:1c:34:17:5e:81:
70:75:22:7f:ba:ba:4e:34:42:06:64:2c:e9:ac:da:
d4:d2:ab:b6:8d:d1:bf:f9:02:48:4d:99:df:fb:7c:
2b:c0:91:4d:7a:0c:27:62:46:35:c5:60:54:9c:3a:
37:97:7d:96:cf:83:5e:ed:3d:2e:11:99:6f:34:d3:
29:3f:0d:c5:43:fd:f7:bf:07:ea:cb:d6:23:58:39:
54:e4:7c:b7:30:fd:11:97:47:bf:0b:41:74:9a:31:
1d:de:12:88:f5:ec:54:70:dd:8f:7d:f0:b5:5f:27:
b5:4e:37:7e:28:8d:64:cd:23:8d:24:e9:17:01:53:
62:e8:5c:71:d1:86:ab:be:1f:c8:e4:64:26:ae:cc:
52:3d:5c:01:e6:5e:92:1c:75:77:6d:52:29:86:3a:
da:51:b7:55:a3:58:fa:f1:7b:c3:3b:54:3e:84:8f:
17:f0:47:cc:20:b6:06:b6:48:a8:5b:20:d6:1f:47:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C1:96:C0:F0:BA:4F:EC:1B:35:0B:8B:3E:A3:A6:69:69:7B:42:F5
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/vsGWwPC6T-wbNQuLPqOmaWl7QvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.184.240.0/22
91.184.254.0/23
185.197.74.0/24
185.230.143.0/24
193.188.20.0-193.188.22.255
Signature Algorithm: sha256WithRSAEncryption
26:54:f8:29:6b:c7:77:5a:47:b7:88:84:6f:5e:9c:e4:49:5b:
47:e1:1d:a1:4e:90:31:bf:3e:5b:ea:d8:a2:d2:90:68:c8:09:
71:1b:90:45:55:c6:b8:21:c8:18:63:a1:f9:33:40:ba:8f:63:
08:30:fd:4e:95:4e:5a:db:72:18:77:ae:88:07:74:c3:e9:07:
df:7d:e8:d9:9c:fb:bc:ad:91:c3:0a:a2:1c:0a:5c:c0:e3:2c:
24:57:33:3c:bb:7b:75:18:ca:3f:13:39:8f:b8:17:b2:d0:81:
cb:d3:39:6c:3e:cc:fd:e7:5e:a0:37:99:fc:ca:e3:7b:40:df:
b0:73:f7:a1:4b:88:ef:7d:34:47:ef:d0:3e:e7:91:64:b2:52:
94:5c:01:8c:bb:6b:09:17:76:48:9d:d2:99:19:69:44:e8:ce:
2b:4f:8e:a6:5e:f6:bb:58:fe:80:cd:2b:a0:02:c1:03:09:b4:
2f:5d:03:3a:87:0c:00:3a:5c:db:43:58:3a:a1:f3:e0:ea:f8:
ed:e8:43:2a:09:52:fc:07:81:27:c9:42:f0:d5:1b:55:57:1a:
13:0d:46:7f:33:b4:81:80:39:68:dc:be:0c:8e:a7:25:8f:58:
25:ef:b2:05:1e:f6:44:25:fe:07:ef:2a:01:b6:80:3f:a8:86:
90:f3:f4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 20:38:01 2024 by rpki-client on console-ams.rpki-client.org