Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/VtZLjYKGT2y5ToUgexEa430Ze_I.roa
File: VtZLjYKGT2y5ToUgexEa430Ze_I.roa (raw, json)
Hash identifier: j4ElZPiZw0lcXjl9so+fOdW0tI96sIyLQtCDFdnpQJs=
Subject key identifier: 56:D6:4B:8D:82:86:4F:6C:B9:4E:85:20:7B:11:1A:E3:7D:19:7B:F2
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 01858370C915AEA8F10F7F78599B32963EFE
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/VtZLjYKGT2y5ToUgexEa430Ze_I.roa
Signing time: Thu 05 Jan 2023 19:38:04 +0000
ROA not before: Thu 05 Jan 2023 19:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211251
IP address blocks: 213.171.64.0/23 maxlen: 23
213.171.66.0/24 maxlen: 24
213.171.66.0/23 maxlen: 23
213.171.67.0/24 maxlen: 24
213.171.68.0/23 maxlen: 23
213.171.74.0/24 maxlen: 24
79.98.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Feb 2023 08:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:83:70:c9:15:ae:a8:f1:0f:7f:78:59:9b:32:96:3e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Jan 5 19:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56d64b8d82864f6cb94e85207b111ae37d197bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:d3:ff:40:a4:df:47:98:f8:97:d0:38:83:
4a:78:3b:f0:c5:79:1c:89:6f:81:c5:15:04:c1:99:
24:83:0d:20:27:91:d1:dd:a4:63:ea:f4:f4:42:1e:
7e:2d:27:63:0c:40:cc:64:74:2a:39:a8:de:1d:e5:
88:b0:5b:48:b3:9a:57:d6:08:68:c2:79:5f:80:22:
51:ba:ce:3f:15:9b:e5:24:c7:a0:44:49:15:66:6d:
73:85:07:69:49:7e:c0:3b:88:86:3d:1a:da:60:1e:
9c:77:7c:33:8b:84:4b:6f:89:91:56:34:c3:96:0b:
43:c3:fe:28:e2:77:4a:22:49:df:d7:4a:93:e5:5e:
92:2f:f6:bf:5d:2e:33:4c:4e:72:37:36:2b:0d:53:
5f:9d:8c:6f:94:56:b5:5d:d8:83:05:4c:60:c3:8f:
a4:09:2f:da:7d:f0:c1:5d:42:42:96:80:11:11:de:
62:15:a2:a8:a6:a6:41:e5:67:fe:65:83:83:b8:23:
12:ec:06:7b:db:bf:f4:f8:25:fb:9f:22:5f:0e:07:
ed:d4:3d:bc:32:2f:58:dc:b5:60:3f:b6:21:70:57:
c4:e7:85:8f:70:14:fa:d7:8f:66:48:64:f9:81:2b:
b6:08:de:c5:12:e9:0f:70:11:27:41:1f:ff:bf:1d:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D6:4B:8D:82:86:4F:6C:B9:4E:85:20:7B:11:1A:E3:7D:19:7B:F2
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/VtZLjYKGT2y5ToUgexEa430Ze_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.176.0/22
213.171.64.0-213.171.69.255
213.171.74.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a5:cf:94:6e:19:fa:b0:32:c2:bf:cb:9d:4a:0b:d3:69:5f:
4f:d8:bd:b3:bd:3b:fb:b9:9d:a5:df:36:53:90:ab:d5:37:cb:
ac:ed:81:5d:fd:8e:29:ce:ec:ad:f9:13:9c:30:f4:13:44:31:
99:a2:61:ec:8d:b5:d4:84:ff:af:7a:39:71:8d:29:f4:0f:3a:
bb:d2:fa:74:aa:55:9a:9d:81:2e:e6:60:cd:d1:1f:ac:eb:e0:
82:4f:ab:21:a8:2f:fd:78:84:c8:be:3c:4b:fa:06:57:5c:48:
02:86:04:3c:d6:33:92:39:8a:c8:c6:18:8c:87:f6:4b:ff:3a:
89:9d:fd:49:08:d7:c0:4c:8c:6d:13:34:84:38:1f:dc:9e:4f:
f6:e6:dc:d7:f3:38:89:58:74:0b:43:78:0b:62:3e:de:d0:3c:
c1:94:40:7e:e0:40:36:76:29:32:41:e8:7c:d6:b2:00:6e:59:
ef:b6:b4:0d:96:c7:12:08:be:a0:12:f8:0a:86:11:f0:28:b8:
5c:5b:70:a4:f7:5f:0b:c3:d5:24:14:aa:c7:61:9f:46:ba:63:
a5:c8:9f:f5:ef:c4:07:9d:f1:14:7b:05:10:59:b9:b4:87:9d:
c7:29:38:e9:3d:9a:bd:03:cb:b7:e4:ae:69:fb:d1:f9:88:1b:
bc:be:81:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:36 2024 by rpki-client on console-fra.rpki-client.org