Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/VctpUV3TBrWdxZ9Kyc3MUskLdyc.roa
File: VctpUV3TBrWdxZ9Kyc3MUskLdyc.roa (raw, json)
Hash identifier: o27UiidG5oy63R3sDiDbvekrPHc0Y8Jsqgfhfphih7c=
Subject key identifier: 55:CB:69:51:5D:D3:06:B5:9D:C5:9F:4A:C9:CD:CC:52:C9:0B:77:27
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 0189D4BB654CE510FAF12BAF04157FDD91B5
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/VctpUV3TBrWdxZ9Kyc3MUskLdyc.roa
Signing time: Tue 08 Aug 2023 10:39:58 +0000
ROA not before: Tue 08 Aug 2023 10:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 194.62.162.0/24 maxlen: 24
91.205.223.0/24 maxlen: 24
46.254.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 16:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:bb:65:4c:e5:10:fa:f1:2b:af:04:15:7f:dd:91:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Aug 8 10:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55cb69515dd306b59dc59f4ac9cdcc52c90b7727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:56:88:83:d7:01:ee:84:6e:0d:de:56:62:
0c:93:a5:ad:1c:9d:57:bc:47:c1:5b:e5:6d:b5:90:
f8:be:32:bc:07:20:92:29:8d:17:e4:f8:c8:77:7f:
f2:f6:f1:e9:59:3e:c7:3b:1c:bf:90:19:cf:85:6a:
70:94:73:8e:f1:40:be:0a:82:01:33:d7:d4:97:99:
5b:71:07:a4:18:53:c2:39:9c:17:14:6b:ee:0a:2b:
e0:aa:63:b1:25:61:a4:4e:f8:d0:af:04:21:ba:81:
11:b0:14:5d:af:e5:57:99:36:e0:04:b6:5f:ec:83:
f9:1c:d6:be:e2:b6:e8:32:0e:86:bc:d0:8f:a7:68:
0a:7f:68:91:4b:5b:91:00:07:05:cf:16:00:32:61:
f4:50:fb:6c:18:46:8c:ba:52:09:d9:88:c3:66:cc:
a4:4d:09:fb:2f:d6:f2:e4:8e:af:39:d2:b2:0a:f3:
f0:b0:d2:17:06:83:f8:4f:f9:12:b8:42:c5:db:e8:
c6:fd:d2:00:9b:21:61:6a:b6:12:c2:a8:9a:23:40:
e0:d6:11:29:69:a2:e4:4f:92:3f:17:42:df:6b:4e:
00:75:c9:e1:ff:5d:bd:9b:dd:1d:d0:9f:a7:44:e5:
6f:03:4a:7f:e7:2f:8a:13:06:05:d6:26:03:9f:4b:
47:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CB:69:51:5D:D3:06:B5:9D:C5:9F:4A:C9:CD:CC:52:C9:0B:77:27
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/VctpUV3TBrWdxZ9Kyc3MUskLdyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.108.0/24
91.205.223.0/24
194.62.162.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:98:5f:00:ce:51:32:39:80:cb:93:6f:cb:f5:ce:28:a8:a0:
d5:0f:ff:c4:ef:7a:f3:b1:49:14:0f:09:0f:de:d9:59:c9:7a:
d5:d3:ed:b8:0c:ad:9b:e0:ea:c9:9c:7b:54:e6:c0:16:a0:00:
ba:2d:b8:57:ff:2d:8f:c3:77:4f:f4:21:3c:82:a0:f1:ee:b3:
78:7b:fe:e4:8c:07:c5:ac:2c:d0:42:48:02:71:34:b5:85:68:
38:ed:35:8e:fb:6e:43:94:75:36:3e:5a:82:e0:8e:b6:00:7e:
15:85:2d:9e:c7:c1:7f:ac:04:aa:81:80:f1:9c:95:60:9e:b6:
f4:d3:93:33:53:1c:ab:3c:2b:2d:b9:b7:24:bd:71:61:3d:98:
a1:e9:7d:b8:d2:60:4d:e2:f8:bd:67:54:9c:54:de:56:69:89:
ce:37:29:09:8a:80:94:a9:7d:d6:07:ed:72:b2:0e:a1:27:8b:
d0:a1:e9:29:90:8f:37:0a:79:17:b6:83:b3:04:2c:76:77:37:
77:3f:6a:a1:31:5f:65:6f:bd:40:f2:8a:8a:df:8e:df:e6:ac:
fb:56:7a:fb:2f:5d:d6:3b:3d:ea:55:6c:de:00:85:6b:bd:6b:
1d:59:74:03:4c:c6:65:67:03:12:c8:27:78:24:4e:79:f9:80:
43:7b:e1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:14 2024 by rpki-client on console-fra.rpki-client.org