Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/VLbemURZC-qhJDMZhwBFVTIEyAM.roa
File: VLbemURZC-qhJDMZhwBFVTIEyAM.roa (raw, json)
Hash identifier: iaTMVsYj50D/sYBYakYqN7W1RnkvqW6kiIgv7Ly799I=
Subject key identifier: 54:B6:DE:99:44:59:0B:EA:A1:24:33:19:87:00:45:55:32:04:C8:03
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018C6F976EFE894B3CCA89E84D19E0403E29
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/VLbemURZC-qhJDMZhwBFVTIEyAM.roa
Signing time: Fri 15 Dec 2023 22:27:24 +0000
ROA not before: Fri 15 Dec 2023 22:27:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.177.24.0/24 maxlen: 24
45.150.55.0/24 maxlen: 24
45.150.53.0/24 maxlen: 24
212.115.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Dec 2023 20:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6f:97:6e:fe:89:4b:3c:ca:89:e8:4d:19:e0:40:3e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Dec 15 22:27:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54b6de9944590beaa1243319870045553204c803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:33:d9:5e:f5:f2:82:64:79:c4:33:26:71:
ca:61:11:88:c5:6e:3e:23:54:e5:f3:0a:d0:70:22:
6f:71:41:9b:99:4e:41:69:84:78:5e:ff:69:18:4d:
a9:9a:d1:09:c9:74:7a:f6:36:f2:b7:06:df:0a:a8:
c4:58:26:9f:f7:47:a2:76:75:6f:f0:73:38:db:14:
df:e3:bd:65:9b:80:8a:ad:92:45:49:42:56:5e:d9:
2b:e8:60:a0:a2:79:45:87:e3:e5:72:d2:40:bd:19:
75:a7:e8:e0:d1:79:7c:3f:e7:f2:c2:cc:18:9e:09:
db:cb:a8:d7:45:8d:ec:e5:51:4f:b3:7c:2e:44:d5:
c2:f9:89:8d:56:6f:46:85:51:0a:16:d7:16:af:92:
c5:1a:04:9e:4a:cb:46:ae:5b:72:7e:82:b5:2a:6b:
49:65:d6:51:fe:37:9f:c0:3f:27:84:4a:5e:94:43:
59:b1:7b:2a:ce:de:21:c2:a1:4c:04:15:d2:5b:ff:
2e:18:7a:77:23:0e:e0:22:f0:59:4c:87:c2:a4:d0:
c3:cc:a6:9c:d5:8e:26:af:12:e7:23:e4:7f:4b:d2:
3d:90:63:04:0d:be:5c:ce:16:15:fc:97:9e:48:4b:
6d:72:c0:29:ee:ba:78:16:96:17:ec:bd:9e:9e:77:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B6:DE:99:44:59:0B:EA:A1:24:33:19:87:00:45:55:32:04:C8:03
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/VLbemURZC-qhJDMZhwBFVTIEyAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.53.0/24
45.150.55.0/24
185.177.24.0/24
212.115.126.0/24
Signature Algorithm: sha256WithRSAEncryption
32:54:a6:3d:0a:2d:46:eb:0c:5a:e4:74:0e:fb:e0:0a:e2:65:
01:c8:c8:a5:9c:93:07:fb:25:9b:5b:84:4d:d0:10:fc:9c:eb:
2e:39:6e:24:32:c9:de:2c:88:3e:a7:93:46:e6:21:eb:45:c8:
48:d0:8c:99:a5:b8:c5:b3:fa:1c:76:5a:10:a8:86:9d:34:4f:
cb:2f:54:20:46:4f:25:8d:57:84:57:b9:41:16:b6:b8:44:f4:
99:22:a9:98:c1:ab:e5:c5:a5:1a:cc:03:45:5e:d7:62:94:a2:
d8:27:e6:30:38:ef:55:26:0f:93:15:7f:00:58:d2:99:97:72:
fc:a8:08:e3:d3:3a:93:42:de:f6:5c:72:9d:ac:20:53:39:8e:
5f:4d:f8:7d:61:c5:39:3e:cf:60:67:a3:c3:6a:fd:01:64:a2:
c9:74:5b:f3:63:8f:9b:ef:cb:6b:80:f5:c4:64:f0:31:48:e7:
18:c2:34:f9:ae:f5:28:6b:e2:55:f4:cc:84:fc:bd:fd:9f:24:
8c:17:0d:31:78:9d:5d:ac:b0:30:c1:81:88:8c:fd:25:48:af:
4e:af:f6:0e:56:bc:c7:8c:75:de:24:b1:32:8a:f1:98:8a:cf:
4b:4f:74:7b:56:30:ca:3e:cf:a8:6d:ed:40:2a:0b:86:61:3e:
e8:f0:80:03
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYxvl27+iUs8yonoTRngQD4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMxMjE1MjIyNzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGI2ZGU5OTQ0NTkwYmVhYTEyNDMzMTk4NzAwNDU1NTMyMDRjODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS0z2V718oJkecQzJnHKYRGIxW4+
I1Tl8wrQcCJvcUGbmU5BaYR4Xv9pGE2pmtEJyXR69jbytwbfCqjEWCaf90eidnVv
8HM42xTf471lm4CKrZJFSUJWXtkr6GCgonlFh+PlctJAvRl1p+jg0Xl8P+fywswY
ngnby6jXRY3s5VFPs3wuRNXC+YmNVm9GhVEKFtcWr5LFGgSeSstGrltyfoK1KmtJ
ZdZR/jefwD8nhEpelENZsXsqzt4hwqFMBBXSW/8uGHp3Iw7gIvBZTIfCpNDDzKac
1Y4mrxLnI+R/S9I9kGMEDb5czhYV/JeeSEttcsAp7rp4FpYX7L2enndUsQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFS23plEWQvqoSQzGYcARVUyBMgDMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvVkxiZW1VUlpDLXFoSkRNWmh3QkZWVElFeUFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALZY1AwQA
LZY3AwQAubEYAwQA1HN+MA0GCSqGSIb3DQEBCwUAA4IBAQAyVKY9Ci1G6wxa5HQO
++AK4mUByMilnJMH+yWbW4RN0BD8nOsuOW4kMsneLIg+p5NG5iHrRchI0IyZpbjF
s/ocdloQqIadNE/LL1QgRk8ljVeEV7lBFra4RPSZIqmYwavlxaUazANFXtdilKLY
J+YwOO9VJg+TFX8AWNKZl3L8qAjj0zqTQt72XHKdrCBTOY5fTfh9YcU5Ps9gZ6PD
av0BZKLJdFvzY4+b78trgPXEZPAxSOcYwjT5rvUoa+JV9MyE/L39nySMFw0xeJ1d
rLAwwYGIjP0lSK9Or/YOVrzHjHXeJLEyivGYis9LT3R7VjDKPs+obe1AKguGYT7o
8IAD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org