Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/Vpre-6dK4rs9Fe8OmJ8tlWop_XI.roa
File: Vpre-6dK4rs9Fe8OmJ8tlWop_XI.roa (raw, json)
Hash identifier: Gx4WwHiYWvEB8Yoi4yJ1U3VhagjMmP+par75/pc8Eek=
Subject key identifier: 56:9A:DE:FB:A7:4A:E2:BB:3D:15:EF:0E:98:9F:2D:95:6A:29:FD:72
Certificate issuer: /CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Certificate serial: 01856C0A409914360D039D2A6A1CF1AC1414
Authority key identifier: 3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/Vpre-6dK4rs9Fe8OmJ8tlWop_XI.roa
Signing time: Sun 01 Jan 2023 06:34:49 +0000
ROA not before: Sun 01 Jan 2023 06:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199837
IP address blocks: 185.128.148.0/22 maxlen: 24
185.44.212.0/22 maxlen: 24
2a06:cfc0::/29 maxlen: 29
2a04:9f00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:40:99:14:36:0d:03:9d:2a:6a:1c:f1:ac:14:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Validity
Not Before: Jan 1 06:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=569adefba74ae2bb3d15ef0e989f2d956a29fd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4d:f6:87:06:60:00:21:68:65:bb:2e:24:22:
bf:37:74:50:10:cb:ea:85:80:07:b4:1a:92:45:18:
5c:ee:b9:9d:a2:92:07:8d:1b:d0:d2:b5:ae:cf:93:
07:03:1e:c6:35:5e:6b:d4:b0:ec:61:bb:38:7a:c4:
2f:2e:da:bb:ca:61:82:de:4f:50:07:3a:cd:bc:d6:
76:7c:e4:89:18:d5:ab:cf:fe:03:bd:fe:f2:db:38:
58:81:15:77:95:be:bf:8f:7b:da:a3:c8:a0:ce:a1:
76:40:7e:7b:5a:78:d2:23:3c:50:39:a6:04:ce:eb:
29:d1:aa:75:b4:27:78:a5:3f:51:61:df:dc:66:65:
e0:f6:0d:cb:72:3d:22:c2:c0:a4:ac:34:a6:32:3b:
72:d6:11:aa:d9:d4:86:2b:77:4b:1f:07:1c:33:60:
3c:0b:d2:78:9c:c3:8c:5c:0f:be:5f:7a:6a:e5:83:
15:9e:1b:71:e8:c5:cc:e0:3b:9a:0a:f8:6b:11:36:
76:21:46:c1:76:71:34:99:62:ba:c7:d7:c1:da:63:
3c:9a:46:e0:b9:36:49:48:3c:8f:dd:b0:14:2f:3f:
2e:e1:f1:95:24:c7:fc:d3:b8:eb:0f:2e:9b:ff:3b:
18:e7:20:ce:90:a6:0b:06:a1:23:91:34:a9:45:60:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9A:DE:FB:A7:4A:E2:BB:3D:15:EF:0E:98:9F:2D:95:6A:29:FD:72
X509v3 Authority Key Identifier:
keyid:3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/Vpre-6dK4rs9Fe8OmJ8tlWop_XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.212.0/22
185.128.148.0/22
IPv6:
2a04:9f00::/29
2a06:cfc0::/29
Signature Algorithm: sha256WithRSAEncryption
4f:af:11:b4:f1:40:d0:ab:50:c1:0a:3c:c9:d0:c0:19:01:fb:
56:ba:23:69:f6:fa:06:7e:44:52:71:8d:e8:0c:93:62:2b:80:
c9:5f:f1:f8:9b:f4:43:c8:2a:48:80:df:3f:22:2d:e6:14:e3:
0f:0b:9e:60:24:f7:ac:2b:15:92:aa:fe:dd:78:a1:b8:12:7b:
93:0e:bb:bd:27:20:5e:04:10:97:15:6a:44:58:ba:30:c2:59:
c6:f2:8a:6c:7d:95:ce:1f:30:c5:ed:92:03:dd:85:9b:09:f9:
42:ce:72:8a:fd:6e:ad:69:89:fd:11:94:0a:df:c1:46:58:22:
74:ff:e1:1b:bb:4b:ca:e3:74:d5:e4:b3:0d:02:8f:74:53:96:
e3:d5:03:fe:c5:11:73:11:ed:05:57:e8:c2:f3:1f:32:6f:22:
a8:61:46:38:8d:ed:f6:ae:c2:0a:e9:ed:34:02:c7:18:ba:4a:
ae:fb:04:96:6c:3d:31:04:9c:96:b1:b0:73:fd:f1:41:af:6d:
b3:d1:54:64:6e:90:fc:99:ea:0b:96:7f:6a:a4:92:d8:c0:4c:
85:4c:76:78:4f:35:0d:ab:3f:50:d8:a3:2a:4d:a8:cf:d0:e0:
c7:35:3b:71:1e:b1:e5:bf:0c:e4:eb:fe:48:81:4d:ac:85:40:
ad:7b:ca:0e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYVsCkCZFDYNA50qahzxrBQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTE0ODQyZDg3N2UyN2JjNDA2OGI5ODFmZTc0YWViOGJl
ZTdlNzMwHhcNMjMwMTAxMDYzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjlhZGVmYmE3NGFlMmJiM2QxNWVmMGU5ODlmMmQ5NTZhMjlmZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8U32hwZgACFoZbsuJCK/N3RQEMvq
hYAHtBqSRRhc7rmdopIHjRvQ0rWuz5MHAx7GNV5r1LDsYbs4esQvLtq7ymGC3k9Q
BzrNvNZ2fOSJGNWrz/4Dvf7y2zhYgRV3lb6/j3vao8igzqF2QH57WnjSIzxQOaYE
zusp0ap1tCd4pT9RYd/cZmXg9g3Lcj0iwsCkrDSmMjty1hGq2dSGK3dLHwccM2A8
C9J4nMOMXA++X3pq5YMVnhtx6MXM4DuaCvhrETZ2IUbBdnE0mWK6x9fB2mM8mkbg
uTZJSDyP3bAULz8u4fGVJMf807jrDy6b/zsY5yDOkKYLBqEjkTSpRWCavwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFaa3vunSuK7PRXvDpifLZVqKf1yMB8GA1UdIwQY
MBaAFD6hSELYd+J7xAaLmB/nSuuL7n5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFGSVF0aDM0bnZFQm91WUgtZEs2NHZ1Zm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83OTcwNTctMjc4YS00ZjczLTgwYTEt
NGRjZTRmM2VhMTNlLzEvVnByZS02ZEs0cnM5RmU4T21KOHRsV29wX1hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83OTcwNTctMjc4YS00ZjczLTgwYTEtNGRjZTRmM2VhMTNl
LzEvUHFGSVF0aDM0bnZFQm91WUgtZEs2NHZ1Zm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuSzUAwQC
uYCUMBQEAgACMA4DBQMqBJ8AAwUDKgbPwDANBgkqhkiG9w0BAQsFAAOCAQEAT68R
tPFA0KtQwQo8ydDAGQH7Vrojafb6Bn5EUnGN6AyTYiuAyV/x+Jv0Q8gqSIDfPyIt
5hTjDwueYCT3rCsVkqr+3XihuBJ7kw67vScgXgQQlxVqRFi6MMJZxvKKbH2Vzh8w
xe2SA92Fmwn5Qs5yiv1urWmJ/RGUCt/BRlgidP/hG7tLyuN01eSzDQKPdFOW49UD
/sURcxHtBVfowvMfMm8iqGFGOI3t9q7CCuntNALHGLpKrvsElmw9MQSclrGwc/3x
Qa9ts9FUZG6Q/JnqC5Z/aqSS2MBMhUx2eE81Das/UNijKk2oz9DgxzU7cR6x5b8M
5Ov+SIFNrIVArXvKDg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:56 2024 by rpki-client on console-fra.rpki-client.org