Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/VmnLUIaCfgSYoTQGQxmp0Fqc4Hc.roa
File: VmnLUIaCfgSYoTQGQxmp0Fqc4Hc.roa (raw, json)
Hash identifier: xI6AVpm4r98lbQ/pNyQMCAkmhwTlMFBr+/FVQsNEfT8=
Subject key identifier: 56:69:CB:50:86:82:7E:04:98:A1:34:06:43:19:A9:D0:5A:9C:E0:77
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C319A3C3B02A183823313AB0FC5F24
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/VmnLUIaCfgSYoTQGQxmp0Fqc4Hc.roa
Signing time: Mon 02 Jan 2023 09:14:49 +0000
ROA not before: Mon 02 Jan 2023 09:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200753
IP address blocks: 185.133.210.0/24 maxlen: 24
2a06:e880:c0::/46 maxlen: 48
2a06:e880::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:19:a3:c3:b0:2a:18:38:23:31:3a:b0:fc:5f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5669cb5086827e0498a134064319a9d05a9ce077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:23:bc:77:bf:28:3d:d2:b5:b5:8f:bb:a2:
51:a7:ec:ca:3f:c2:3b:de:f2:46:84:42:ec:8c:52:
95:52:97:ff:4f:53:8e:39:51:8a:d5:8c:70:5a:c8:
43:bb:de:a8:c0:9d:3e:6c:19:e5:c1:e3:ea:4a:9f:
c4:9d:49:ba:90:9b:fd:b3:ae:a4:ba:6c:68:ba:7f:
75:ee:53:40:14:31:95:75:dd:90:66:c1:9a:c0:65:
73:5e:10:c0:79:5a:de:d1:0f:4e:24:23:ea:8e:1c:
ca:e6:cd:71:2a:a8:c7:2c:97:20:ae:0c:97:05:3c:
37:11:f0:9d:f9:d9:42:45:12:6d:f3:87:54:17:3e:
da:6a:4b:37:e7:29:6d:0e:80:a6:00:bc:3c:ca:45:
1e:02:9a:66:f7:90:02:0c:09:5e:39:3b:2b:6a:6a:
e2:bb:bc:e7:fe:0f:0b:b1:3c:a9:60:83:f2:ca:6e:
c5:9a:d4:1a:6a:77:54:52:d4:f0:34:f7:13:6a:bd:
9c:01:e2:ce:f9:b8:ba:6a:82:3e:a6:09:eb:12:39:
e4:db:37:db:29:9a:7a:3b:8a:82:3b:4d:b8:b1:16:
9b:8c:8a:c8:7a:6f:aa:d6:3b:30:4c:98:a5:ea:18:
64:4d:04:38:65:3b:ce:80:45:17:fe:86:26:1a:0e:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:69:CB:50:86:82:7E:04:98:A1:34:06:43:19:A9:D0:5A:9C:E0:77
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/VmnLUIaCfgSYoTQGQxmp0Fqc4Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.210.0/24
IPv6:
2a06:e880::/32
Signature Algorithm: sha256WithRSAEncryption
1e:41:b8:5d:7c:dd:b3:b9:ed:62:ea:ee:45:3e:ac:36:00:5f:
31:60:f6:1d:49:87:cf:6e:db:45:75:42:a7:f1:37:2e:be:3e:
8c:ed:bb:34:76:5b:6f:e4:ba:50:8c:bd:de:79:01:11:fc:09:
29:12:6c:d6:d2:56:ce:4b:20:0a:f2:2c:d1:47:72:84:9b:cd:
3d:b4:a5:3d:55:31:6e:fa:3c:a7:d3:aa:ea:46:a0:59:3d:f8:
11:6d:5e:e6:d0:9f:35:12:3e:48:11:50:b0:2a:69:55:76:77:
3a:2b:50:47:cb:f1:4f:3a:56:b3:63:a1:c9:39:d8:f3:30:3e:
a2:1f:8d:19:64:9d:d6:31:a3:c2:80:b6:45:2a:de:a5:c1:40:
d6:29:c8:f4:51:0c:7e:1d:96:2e:21:27:4c:2f:e4:67:93:d8:
7e:cb:f4:34:cb:8e:7a:32:e3:2d:e9:d8:2d:0b:46:06:3a:1d:
67:5c:1f:a5:df:84:7d:c1:59:58:63:b5:f2:e8:32:34:01:b2:
a6:cb:9c:cc:b8:7f:ec:2f:d8:69:f1:e8:ab:14:80:d3:d3:bb:
5c:4a:c9:3b:ce:97:10:f9:bc:4a:84:24:c1:34:f3:be:cd:d3:
93:ff:b4:73:5d:99:77:81:1a:a7:fa:0a:fb:d6:ed:3d:b9:13:
a5:df:8d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:40 2024 by rpki-client on console-ams.rpki-client.org