Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/vm0VeEBPfV23H93NNasY699avlc.roa
File: vm0VeEBPfV23H93NNasY699avlc.roa (raw, json)
Hash identifier: GRMMCEBWLEs/aOVgcZ9gFbdT+ZfjM7OBm4AvRmHrxHM=
Subject key identifier: BE:6D:15:78:40:4F:7D:5D:B7:1F:DD:CD:35:AB:18:EB:DF:5A:BE:57
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0185C2C355E0D14E264713B10F2ECE092196
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/vm0VeEBPfV23H93NNasY699avlc.roa
Signing time: Wed 18 Jan 2023 02:44:19 +0000
ROA not before: Wed 18 Jan 2023 02:44:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 45.149.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Feb 2023 16:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c2:c3:55:e0:d1:4e:26:47:13:b1:0f:2e:ce:09:21:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 18 02:44:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be6d1578404f7d5db71fddcd35ab18ebdf5abe57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:24:7e:5b:7c:d7:5a:e2:fe:35:ce:0c:8e:a4:
60:1d:d1:f2:1a:82:5b:af:9e:e3:fb:db:6f:94:c2:
bc:ca:e7:d2:9f:a8:fb:19:4b:03:b2:32:95:92:82:
e3:71:a5:49:dd:5a:df:aa:8b:ae:20:f8:ab:a2:d4:
ea:c5:50:96:42:67:20:34:93:10:4d:a3:a3:03:bf:
4b:9f:1a:30:17:69:74:a8:99:0f:39:4a:ea:b3:fe:
e5:52:f7:29:aa:ff:cc:8f:e9:44:42:99:c5:07:b3:
c3:23:97:1b:b8:ec:c0:6e:19:90:a4:ce:e7:a4:4a:
3b:88:0e:04:a7:2f:46:08:9c:d9:9b:72:34:9e:06:
3f:5a:f2:fe:ac:6b:18:4c:81:1a:b4:05:b4:db:2c:
53:2f:b2:23:3e:a3:11:ac:e1:2c:c9:76:cb:81:bd:
6c:c5:21:3d:a7:c5:23:f4:cc:4e:f2:85:bf:c0:29:
47:69:a7:7c:26:34:d5:12:2e:bd:a5:b2:fd:59:8d:
d1:1b:66:bb:48:b6:f8:66:15:71:31:49:0e:52:96:
1f:f8:49:b4:1b:95:6e:6f:93:c1:d5:39:5c:b0:da:
36:6d:e5:95:8c:77:bf:03:4e:d6:03:cf:b7:ba:5e:
0c:70:34:72:a8:79:e7:47:3c:ce:14:ac:d9:7a:1b:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6D:15:78:40:4F:7D:5D:B7:1F:DD:CD:35:AB:18:EB:DF:5A:BE:57
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/vm0VeEBPfV23H93NNasY699avlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.165.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:96:56:59:23:3d:b6:0f:95:b0:4e:fd:23:53:f2:26:b1:50:
3a:cf:6b:12:c3:02:c3:49:83:fd:f9:5c:32:2d:7a:d4:a7:32:
d0:b9:5b:c2:c0:33:84:59:d1:d3:45:f8:54:8a:ad:a6:3d:2a:
d6:bd:4d:74:10:27:0e:d7:ce:59:ce:4f:61:8a:5b:b1:2b:ff:
f8:2a:30:dd:89:14:06:61:fb:60:ce:4f:6f:84:70:29:ee:e7:
68:68:c3:51:04:0d:d1:7f:f9:70:fb:23:84:e2:bd:80:80:57:
fb:bd:ec:85:f2:b7:ec:90:cc:3e:cb:e2:97:e4:35:bc:56:18:
5e:7e:01:12:59:26:a0:6b:33:2c:34:15:eb:d4:d2:1c:d7:77:
ed:c2:9a:21:1c:9d:d5:26:a9:c1:dd:98:86:bb:81:a6:f3:99:
72:42:c3:15:33:1e:f8:2b:a7:aa:4b:cf:c2:95:4a:6d:a5:06:
e7:fd:9c:3a:8b:84:4a:19:1e:06:b3:5d:06:59:cb:5e:4e:39:
c8:16:83:d0:01:38:29:97:e3:2e:ef:5a:d9:d7:78:ab:24:fe:
66:29:dd:91:28:ea:08:43:59:66:74:3a:28:a8:59:f2:2f:39:
c7:e0:6d:01:0a:4e:a1:32:ea:6c:4e:ad:81:fe:a1:ca:30:41:
ef:f7:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org