Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/VLp_fvtf2WZoEZtCAtkwOhsPZvk.roa
File: VLp_fvtf2WZoEZtCAtkwOhsPZvk.roa (raw, json)
Hash identifier: hLhGQat5Zr33O3/7yV8LIQmRNUTLpNuR472wwlqJFqA=
Subject key identifier: 54:BA:7F:7E:FB:5F:D9:66:68:11:9B:42:02:D9:30:3A:1B:0F:66:F9
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01878E4C16097D2E2D2AD90D37D59BEE17DD
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/VLp_fvtf2WZoEZtCAtkwOhsPZvk.roa
Signing time: Mon 17 Apr 2023 08:19:23 +0000
ROA not before: Mon 17 Apr 2023 08:19:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.246.37.0/24 maxlen: 24
45.143.160.0/24 maxlen: 24
45.149.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Apr 2023 09:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:4c:16:09:7d:2e:2d:2a:d9:0d:37:d5:9b:ee:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Apr 17 08:19:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54ba7f7efb5fd96668119b4202d9303a1b0f66f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:2a:05:b2:9c:3b:b3:cd:82:a6:e6:51:c6:
f8:b9:e2:dc:ac:6e:77:95:9d:f0:64:17:58:f2:bf:
9b:77:41:93:3b:60:c1:f4:e5:05:89:09:62:26:54:
b7:55:53:9a:2c:9c:4b:9f:30:5b:84:55:57:77:0c:
e2:a9:12:85:53:67:38:3b:e7:22:16:49:87:ee:43:
c8:11:ec:8d:19:d6:e9:8a:f2:3b:b7:20:25:9b:be:
73:aa:36:06:31:a5:aa:35:86:dd:67:02:32:a4:4d:
dd:ad:a1:40:50:83:91:9e:15:4b:3e:e4:8a:14:6a:
bb:d2:d9:9c:fd:4e:9f:42:f0:05:f3:14:6a:ce:d8:
57:9e:c4:51:b7:6f:04:9c:d0:ec:c0:e0:59:26:86:
ea:ac:e8:40:c6:5b:ad:91:5a:f0:9f:45:3b:ac:ed:
8b:32:1b:c7:ae:66:a8:cd:8b:d5:4b:56:2b:c6:3c:
0a:2f:0a:b0:49:b1:fa:03:92:61:bd:64:db:c8:71:
3a:5c:40:6b:c7:0b:45:4f:84:02:d7:3a:3a:77:87:
e2:9f:24:1e:8a:0a:7a:87:20:48:69:1e:43:50:cd:
c2:13:85:90:ff:ff:75:8d:66:28:41:77:1d:16:70:
03:9c:cb:be:32:86:c9:f0:c1:48:14:46:4f:ec:0e:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BA:7F:7E:FB:5F:D9:66:68:11:9B:42:02:D9:30:3A:1B:0F:66:F9
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/VLp_fvtf2WZoEZtCAtkwOhsPZvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.160.0/24
45.149.166.0/24
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:3a:9b:1b:ed:4d:dc:34:db:81:92:d2:a1:42:91:3c:e4:72:
d4:ed:c6:43:1d:96:51:ef:c4:3e:93:c8:9a:7e:48:20:19:9d:
e4:b2:9b:39:76:e0:e9:ea:c3:8f:e0:82:32:56:4c:71:cf:58:
01:a1:3a:9e:e5:ab:cb:8e:fa:e3:d3:30:0f:2b:4d:f3:b5:e8:
bc:3f:a4:13:73:3c:f4:b2:c2:9b:b3:b1:76:f2:b7:06:e7:03:
7f:4b:dd:9b:c7:bd:f1:b2:bb:da:b6:69:ec:95:c3:60:83:c0:
eb:0b:fb:80:63:c4:89:2b:94:dd:a4:bc:72:ac:01:91:ee:90:
16:4e:64:50:e4:65:f0:c4:da:03:e6:00:5b:4a:c0:df:0c:15:
7e:29:20:9d:af:0b:20:a6:ef:38:20:1b:a4:8d:0a:d8:bf:5f:
cd:e7:39:32:7f:63:41:25:bf:55:1c:ce:53:9e:eb:33:49:6c:
bd:1b:ee:58:12:2c:b0:a3:09:94:2e:ff:f6:d9:cf:c1:3f:bd:
2e:77:85:4c:52:cf:f8:1d:25:00:c6:d4:9e:00:3a:15:3d:f9:
16:9a:ac:d4:7f:c0:ef:30:be:0f:09:60:8a:f4:43:0d:40:d6:
fb:9f:4a:d0:10:7e:2a:4f:82:bf:47:52:ba:65:07:a9:12:e5:
73:06:40:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org