Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/vpXF6xmkxx8rHJO2iY3iob0lNDE.roa
File: vpXF6xmkxx8rHJO2iY3iob0lNDE.roa (raw, json)
Hash identifier: PC/bRsfbvhI6qI+YfPGoRVi5Vy4fVpNa+8ydVpceI88=
Subject key identifier: BE:95:C5:EB:19:A4:C7:1F:2B:1C:93:B6:89:8D:E2:A1:BD:25:34:31
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01856C7814A43B884EA80EF6F6DB35A44925
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/vpXF6xmkxx8rHJO2iY3iob0lNDE.roa
Signing time: Sun 01 Jan 2023 08:34:46 +0000
ROA not before: Sun 01 Jan 2023 08:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210950
IP address blocks: 45.143.201.0/24 maxlen: 24
185.193.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:14:a4:3b:88:4e:a8:0e:f6:f6:db:35:a4:49:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 08:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be95c5eb19a4c71f2b1c93b6898de2a1bd253431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:ae:5c:9e:95:a3:c6:9f:82:21:04:02:a0:
52:98:1e:94:75:8f:7c:b5:7a:40:65:c9:b7:36:cc:
82:fd:3f:9c:51:25:3c:a8:e5:5d:b7:25:da:0a:fe:
25:19:64:2d:a7:7d:06:f3:da:42:f8:84:1f:90:e3:
46:86:54:cc:fe:b2:ae:d7:83:62:c2:eb:a3:71:c0:
67:24:63:be:42:18:c6:1f:d2:d0:a3:83:a2:2d:a1:
a9:b1:a4:20:d0:fb:c4:40:e0:ff:a4:09:a8:91:eb:
ef:36:cb:09:e2:77:75:e1:98:01:4c:03:0b:bd:ed:
e4:44:57:af:85:bd:eb:46:2d:f8:08:b8:5d:29:fe:
47:72:8d:cd:d1:b4:c9:54:60:b2:23:df:47:ed:be:
0f:79:fd:e6:c4:02:b6:b2:b4:e3:ae:02:68:25:3d:
ab:24:01:65:d2:4c:82:be:99:93:68:2c:5b:e2:55:
6a:a6:97:ae:0f:e9:5e:1e:62:a1:b5:2e:21:42:fc:
20:f5:9e:99:77:d9:98:52:a8:c0:c3:ce:6a:f6:7b:
0a:bf:3e:50:82:04:8c:61:d7:ef:3e:e2:fd:f1:66:
50:ce:d7:6b:a0:45:e6:cc:0e:94:b3:db:25:31:9d:
0d:d1:e1:c0:dd:9b:7d:8d:69:07:5f:5e:86:f6:b7:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:95:C5:EB:19:A4:C7:1F:2B:1C:93:B6:89:8D:E2:A1:BD:25:34:31
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/vpXF6xmkxx8rHJO2iY3iob0lNDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.201.0/24
185.193.89.0/24
Signature Algorithm: sha256WithRSAEncryption
37:79:a1:72:cb:5d:a1:05:f1:0e:67:53:b7:9a:79:bc:53:15:
93:3e:24:3c:ef:c2:7b:6c:35:49:c1:84:ed:f8:8d:a6:49:aa:
e4:2c:4e:a4:c2:25:6e:d4:38:8e:4b:e7:b1:a7:e6:4c:2d:b6:
4f:dc:33:44:69:2a:a7:06:85:b5:7b:a6:56:0d:66:4d:81:2f:
90:59:68:33:fc:6f:51:1f:e9:2e:69:eb:44:9f:69:0e:9a:86:
d8:32:ca:9d:d6:93:b5:c2:b9:92:4b:7f:2d:07:7f:a6:1c:fb:
80:65:52:a6:34:65:0b:ba:e0:de:db:46:31:cb:08:c2:58:b7:
93:90:9a:84:04:47:c9:4c:66:da:8f:03:e4:5a:05:6d:3b:f2:
21:a3:70:c7:84:6e:36:b5:63:c9:3a:fb:c9:f0:3a:ad:89:2e:
25:f7:b1:4a:34:ad:88:18:d3:d7:65:d1:f7:c9:23:46:8a:28:
a7:69:7f:23:ad:c6:86:4f:41:03:19:c5:cb:64:b8:97:01:1d:
a2:4a:a1:97:c0:a9:e6:22:46:5b:d1:cb:9a:95:c0:e5:c9:e8:
56:c7:02:01:11:63:7d:dd:a8:fe:27:45:e9:48:4c:7f:d5:f5:
8d:63:0d:c0:17:5e:4f:47:2d:3b:64:6c:ba:4f:94:cd:4c:87:
5f:4d:6c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:44 2024 by rpki-client on console-ams.rpki-client.org