Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Vp_kh6xeYdOKeSaDidrnYlNwbEM.roa
File: Vp_kh6xeYdOKeSaDidrnYlNwbEM.roa (raw, json)
Hash identifier: 76G2h0OfwBSQwRFEAwupWqY7HUZaurIdezxEpUZ5ZEc=
Subject key identifier: 56:9F:E4:87:AC:5E:61:D3:8A:79:26:83:89:DA:E7:62:53:70:6C:43
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018AB18AADA588CC0CCE5FEF8638CDEC2F4F
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Vp_kh6xeYdOKeSaDidrnYlNwbEM.roa
Signing time: Wed 20 Sep 2023 07:42:50 +0000
ROA not before: Wed 20 Sep 2023 07:42:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.94.0/24 maxlen: 24
80.246.224.0/24 maxlen: 24
80.246.225.0/24 maxlen: 24
80.246.232.0/24 maxlen: 24
80.246.228.0/24 maxlen: 24
80.246.236.0/24 maxlen: 24
80.246.236.0/22 maxlen: 24
80.246.237.0/24 maxlen: 24
80.246.238.0/24 maxlen: 24
80.246.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:8a:ad:a5:88:cc:0c:ce:5f:ef:86:38:cd:ec:2f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Sep 20 07:42:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=569fe487ac5e61d38a79268389dae76253706c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:e0:09:c5:d6:ec:25:66:f3:3a:d2:71:99:
b2:34:d4:0e:80:b2:68:46:fe:1e:3b:96:1d:89:df:
fd:42:7d:16:30:21:c0:2f:61:fe:49:9a:cf:47:aa:
71:47:76:5e:52:44:59:fe:fd:98:50:e4:9f:3b:14:
e2:96:46:e0:b0:78:86:7e:0f:0b:31:e3:0e:3b:e5:
8a:7f:a9:5e:7b:f0:8f:48:41:43:0d:98:72:ad:c7:
fa:57:20:f2:84:24:3c:92:b1:93:3b:45:af:7d:d9:
a2:0e:ce:58:9e:84:55:e6:79:b6:cd:6c:9c:32:31:
86:8e:67:d7:ad:47:17:d9:b9:fc:52:b8:55:cd:3a:
33:23:3b:4e:21:b1:5f:9d:7f:4b:ad:f4:5f:69:b3:
49:23:5a:cb:e4:a0:a9:b7:e3:6f:56:0f:d5:7b:b8:
23:14:0c:58:57:a2:26:4e:9e:e0:06:a1:4e:6c:10:
d5:07:77:68:76:fd:4a:45:55:30:ff:9c:71:2a:44:
bf:a7:52:df:21:51:ae:85:cd:c6:95:3e:00:5b:a8:
ab:6e:8e:0f:b0:31:64:54:d2:5a:fc:64:91:1f:36:
ef:df:0d:8a:ce:a9:7a:e5:79:a5:6d:42:32:ce:39:
b8:3c:d4:bc:33:5f:45:76:c0:da:1f:e4:9d:0c:d3:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9F:E4:87:AC:5E:61:D3:8A:79:26:83:89:DA:E7:62:53:70:6C:43
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Vp_kh6xeYdOKeSaDidrnYlNwbEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
80.246.224.0/23
80.246.228.0/24
80.246.232.0/24
80.246.236.0/22
Signature Algorithm: sha256WithRSAEncryption
81:47:79:b7:a2:7e:e6:e7:39:68:e8:a5:6a:f8:a1:51:2a:2c:
7e:09:de:3d:b9:c6:db:78:c3:a5:7c:d3:ad:5b:5e:c7:2c:1c:
ef:24:3d:cd:9b:61:af:cd:84:2c:7e:4b:c4:91:ea:ed:01:e3:
f0:21:ea:42:9c:0f:9f:93:fd:c3:fd:ee:48:66:65:93:53:e8:
f2:52:8b:e6:23:1b:92:ce:48:0b:ef:24:02:81:0e:66:50:86:
6f:a8:5c:10:07:71:f7:d3:f7:94:87:6f:e1:b8:6c:39:78:0e:
b6:f1:cd:c3:3d:f6:6c:b7:9a:bd:06:07:e5:d2:b0:b2:3f:bc:
ab:ed:93:6d:73:43:b5:d7:1c:a3:00:9a:70:12:04:6f:af:96:
14:47:b0:05:c8:8c:70:ce:79:b7:83:fb:79:79:cf:91:ee:5a:
40:c1:b4:cd:16:4f:85:02:36:94:ba:5d:d4:92:aa:50:5a:74:
22:18:6c:b5:ec:0a:29:aa:bc:d4:d0:75:22:3e:8b:86:98:04:
c9:73:0e:11:8e:89:1e:4c:1a:04:de:65:73:aa:b6:bc:a8:de:
5e:73:0a:4a:5f:a6:f4:1e:db:54:5f:07:a6:98:ee:0a:b2:8c:
68:a7:4a:ea:5b:4e:ce:52:20:5f:0a:c0:02:7a:5e:21:ad:a5:
28:ce:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 09:03:10 2023 by rpki-client on console-fra.rpki-client.org