Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/VKFwWgF-5hXXQppQJdgl2LY570A.roa
File: VKFwWgF-5hXXQppQJdgl2LY570A.roa (raw, json)
Hash identifier: rZP+cknXm/dotgWQLc6VcRNwnXlNa0qj4K9XB0Pc3lM=
Subject key identifier: 54:A1:70:5A:01:7E:E6:15:D7:42:9A:50:25:D8:25:D8:B6:39:EF:40
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0188527C1A786D853FC82054EAC8F59F6E35
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/VKFwWgF-5hXXQppQJdgl2LY570A.roa
Signing time: Thu 25 May 2023 10:37:24 +0000
ROA not before: Thu 25 May 2023 10:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30846
IP address blocks: 212.170.114.0/24 maxlen: 24
195.53.217.0/24 maxlen: 24
212.170.33.0/24 maxlen: 24
195.235.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:7c:1a:78:6d:85:3f:c8:20:54:ea:c8:f5:9f:6e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: May 25 10:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54a1705a017ee615d7429a5025d825d8b639ef40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:73:42:ff:60:ed:9b:ba:2e:08:d4:f3:4a:3b:
74:2a:26:93:71:45:be:8e:6a:86:13:2b:dd:88:e1:
54:5b:f6:f5:aa:40:f9:0b:d2:f5:29:8e:05:99:a4:
62:2a:1e:bd:82:b7:f1:35:8a:26:73:ca:74:e1:19:
b1:0e:90:9e:b9:ed:8d:0c:a2:75:96:2d:f0:b6:b9:
07:8a:4b:26:9d:42:18:70:00:4c:af:b0:da:5f:6c:
9d:21:e6:3a:c3:e1:8c:cb:a0:46:7b:4d:28:eb:54:
68:47:1c:54:b1:4f:ea:91:22:6a:ee:32:d5:57:f6:
53:d8:c9:25:89:99:aa:76:ad:3e:10:ac:fe:fc:88:
3e:cf:16:3f:6d:11:50:44:52:de:4c:a9:58:c4:93:
29:47:7c:bb:d6:5b:b1:cd:82:a8:10:85:10:9d:ee:
72:2d:f4:c4:6a:0a:92:dc:83:c7:34:f6:ae:a9:bc:
e3:23:46:08:a4:ff:5e:8f:bc:90:a5:05:9b:5c:b7:
77:9e:2c:c1:94:36:d5:fc:d9:f7:3b:84:92:b4:8b:
b3:69:04:2e:20:66:cd:0e:20:93:06:3e:7d:93:72:
ef:f2:94:2f:2f:25:55:9c:e4:d4:b6:1b:b5:41:ac:
3e:bd:b5:f5:2f:f7:30:ec:05:39:78:9d:a8:97:d4:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A1:70:5A:01:7E:E6:15:D7:42:9A:50:25:D8:25:D8:B6:39:EF:40
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/VKFwWgF-5hXXQppQJdgl2LY570A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.53.217.0/24
195.235.248.0/24
212.170.33.0/24
212.170.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:9f:4f:5c:c5:c3:20:8d:48:52:e2:46:c0:32:6c:f4:02:d5:
1d:3b:f4:82:ba:c1:61:6b:fb:02:6c:f2:1f:2d:32:f4:3d:ec:
85:0b:9c:3c:ba:85:a5:09:9d:b0:e1:6a:a2:44:a4:cb:22:3e:
8d:e1:d8:23:78:26:da:16:19:73:14:53:de:61:10:75:e4:cc:
70:59:3d:68:7b:0c:87:d6:1e:cf:5c:3d:95:9a:e2:26:77:47:
c6:96:2e:e1:87:f4:c6:ad:63:63:09:22:c1:05:2c:34:36:d4:
55:73:a0:47:ce:e7:16:e7:8e:ad:34:93:7f:8e:0e:53:0e:98:
ef:04:e2:f6:94:6d:d4:b5:b9:2e:d3:8c:7a:70:05:d0:cc:b6:
32:01:39:d7:da:6e:e0:f0:2b:a4:e4:f4:cc:c6:7a:dd:12:ec:
aa:7a:85:ef:26:c8:ca:fd:85:fd:d3:51:c2:4d:0a:ad:1f:f2:
d3:af:93:f2:1f:f5:a3:7b:ac:f4:48:5f:d1:47:11:82:95:8a:
d3:14:9f:54:d6:11:7a:de:21:e3:30:fa:05:b9:79:fb:90:25:
24:db:80:36:de:ad:5c:a1:2a:52:be:08:db:6e:50:7a:6e:43:
2f:96:ca:3d:bd:a9:ad:b3:58:09:48:62:b7:ab:53:da:d4:2b:
f4:be:7f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:35 2024 by rpki-client on console-ams.rpki-client.org