Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/Vc3y1yRhb9YPlRefvjORY3JOrYg.roa
File: Vc3y1yRhb9YPlRefvjORY3JOrYg.roa (raw, json)
Hash identifier: sHKrMFbjNCMotF/OhPbVmQgZsou9cUPebmKvTU8JBzA=
Subject key identifier: 55:CD:F2:D7:24:61:6F:D6:0F:95:17:9F:BE:33:91:63:72:4E:AD:88
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018C690A0E078416459F5579510D64E320B5
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/Vc3y1yRhb9YPlRefvjORY3JOrYg.roa
Signing time: Thu 14 Dec 2023 15:55:15 +0000
ROA not before: Thu 14 Dec 2023 15:55:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43618
IP address blocks: 134.255.241.0/24 maxlen: 24
5.183.150.0/24 maxlen: 24
185.161.186.0/23 maxlen: 23
194.147.23.0/24 maxlen: 24
194.147.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:0a:0e:07:84:16:45:9f:55:79:51:0d:64:e3:20:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Dec 14 15:55:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55cdf2d724616fd60f95179fbe339163724ead88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:4d:93:ca:20:63:6e:15:3e:b0:f6:f7:de:
ac:23:b3:6d:32:02:66:34:4d:87:37:c0:e2:cc:90:
b9:b6:14:ac:e9:85:a5:48:bb:ae:71:4f:1f:ce:85:
5f:c3:51:fb:32:63:eb:36:99:9a:ce:fe:40:f5:fc:
53:8b:8a:b7:03:d4:d9:cd:bd:d4:12:38:d8:d0:97:
57:05:a8:24:58:20:89:6a:87:f5:57:01:76:3f:91:
96:06:68:1c:cb:8c:ff:f3:07:f9:9c:a4:2b:5f:08:
02:77:2c:8e:0c:6d:01:bc:4b:0e:8d:90:4a:f7:b9:
e7:3f:b6:15:58:4d:6f:a3:dc:5c:d9:4b:5a:43:cd:
3d:60:fa:ae:b1:76:78:3f:df:6d:19:1b:f0:ff:da:
0f:54:50:78:71:ca:28:e5:c8:4e:8f:9e:b7:10:45:
8c:7d:60:2f:c8:16:84:da:b5:7f:f1:89:33:37:b3:
b4:9c:79:ff:aa:72:b6:7c:15:92:00:c3:06:d3:56:
a0:47:80:d1:f0:c7:d6:b6:f2:4b:b2:84:67:bc:b4:
42:c5:ba:16:9d:61:14:40:e7:40:83:2c:47:a0:43:
19:1d:33:d1:83:59:48:72:07:e9:1b:fa:01:48:02:
14:0c:58:11:77:a9:2b:01:4a:b6:9c:08:5e:37:db:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CD:F2:D7:24:61:6F:D6:0F:95:17:9F:BE:33:91:63:72:4E:AD:88
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/Vc3y1yRhb9YPlRefvjORY3JOrYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.150.0/24
134.255.241.0/24
185.161.186.0/23
194.147.22.0/23
Signature Algorithm: sha256WithRSAEncryption
65:bc:dd:ce:2d:14:0e:ce:19:06:9a:8e:17:75:34:f6:62:95:
7a:d2:4e:37:65:8d:e6:e9:53:d5:93:2a:c4:da:6b:a9:10:10:
1a:1a:78:2f:c8:01:39:10:d7:5e:21:9b:df:4b:7b:8a:dc:53:
a6:74:91:26:42:0f:3c:fa:b3:ef:58:7d:5e:8f:1b:e5:bc:99:
8d:de:33:fc:ec:50:ef:b0:3b:ec:b2:3d:f4:18:4b:72:1a:94:
70:d9:0c:fe:0d:8f:3c:c0:c3:88:d9:3a:5b:ef:ab:16:0e:bd:
e1:37:04:9c:c5:c0:40:2d:2c:9d:3b:e5:ed:96:90:f6:a5:54:
c9:d1:7a:35:52:ab:3a:47:6f:b1:50:4c:04:fa:a5:5f:80:64:
49:06:a6:08:e4:51:0d:da:4f:a7:b7:3a:7a:e7:3a:a2:13:0f:
8c:ee:e2:3f:0d:23:63:c9:59:fb:8f:a6:62:b5:ee:8f:e5:32:
fd:9b:20:3a:36:46:a8:43:8a:98:68:ee:8b:bd:c1:24:91:c7:
06:b7:1f:96:10:5b:57:4c:b1:b6:c5:a0:87:c5:6e:29:fa:fc:
db:c1:97:db:20:4b:8c:ad:6c:fc:8d:f7:70:2a:51:f8:78:f6:
fc:4a:e1:a2:64:58:74:0a:98:8c:c0:4a:5a:40:59:37:de:89:
5a:ec:8a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:34 2024 by rpki-client on console-fra.rpki-client.org