Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/vepcmXPuhmrBpihBj7kjcr5dvQY.roa
File: vepcmXPuhmrBpihBj7kjcr5dvQY.roa (raw, json)
Hash identifier: YuImXVniqGhhW0Uakl6NUaIhrH8XR4suNaEMdsDJv7E=
Subject key identifier: BD:EA:5C:99:73:EE:86:6A:C1:A6:28:41:8F:B9:23:72:BE:5D:BD:06
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 01877F07654563C6D9AEE00911A45B591D91
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/vepcmXPuhmrBpihBj7kjcr5dvQY.roa
Signing time: Fri 14 Apr 2023 09:10:03 +0000
ROA not before: Fri 14 Apr 2023 09:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198895
IP address blocks: 45.140.133.0/24 maxlen: 24
46.229.242.0/24 maxlen: 24
46.229.241.0/24 maxlen: 24
2a13:2580::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Apr 2023 06:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:07:65:45:63:c6:d9:ae:e0:09:11:a4:5b:59:1d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: Apr 14 09:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdea5c9973ee866ac1a628418fb92372be5dbd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:d2:ae:ea:75:ca:2e:34:ad:5d:33:4a:bd:
b0:d0:66:c5:97:48:9d:2b:02:d1:7f:24:7f:6d:ea:
8b:39:da:e4:cd:6d:61:ac:b0:97:9c:ca:90:1e:2f:
df:84:55:66:ad:80:18:2b:5b:76:ce:1a:1d:5e:1f:
a3:1f:36:20:8c:6a:9d:1f:af:5f:6a:5b:77:37:9a:
f5:e2:57:4a:27:16:c2:17:9f:a7:d6:68:37:32:7a:
44:f9:a2:2f:19:de:d1:ad:a6:40:7a:c3:ce:2b:4e:
eb:d0:a9:1c:60:1e:a3:1f:a4:19:c6:8b:28:ec:7f:
f1:03:cd:c0:81:9f:cd:7b:9a:92:b9:ab:c8:fd:b7:
30:5c:92:18:8f:a4:8c:e7:35:e9:92:16:d3:69:bb:
71:e5:b9:91:f2:c1:1d:80:af:d5:60:ec:4c:62:6a:
d3:54:fa:61:43:db:f7:cb:26:21:6d:14:c8:76:3e:
c1:b9:44:f1:1c:f5:f1:c1:d0:41:1f:41:0b:cc:c9:
0e:3c:17:81:64:bb:be:39:d6:1e:34:e9:90:cd:61:
38:d9:c3:6d:ee:bc:6d:7f:b7:c6:e9:fc:1f:54:dc:
59:1f:91:31:a3:bd:da:57:30:3b:c8:96:c1:17:ca:
42:82:89:a1:6f:2f:9c:e7:b1:79:d8:2f:95:56:63:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EA:5C:99:73:EE:86:6A:C1:A6:28:41:8F:B9:23:72:BE:5D:BD:06
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/vepcmXPuhmrBpihBj7kjcr5dvQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.133.0/24
46.229.241.0-46.229.242.255
IPv6:
2a13:2580::/29
Signature Algorithm: sha256WithRSAEncryption
44:27:19:e2:56:db:98:25:b0:68:bc:d4:64:72:7e:96:fc:71:
84:68:48:ac:33:07:33:16:a1:6d:6a:26:1c:a9:19:00:12:41:
51:31:af:da:aa:99:49:80:d6:61:0c:2b:78:e0:36:a4:52:c4:
0c:eb:fb:32:0a:8b:a9:f5:b6:dc:cb:4e:1a:62:00:04:d8:0a:
ca:f5:7b:97:e0:c6:0a:e1:0d:13:85:30:32:04:41:bd:5e:e9:
a6:b4:3d:ca:8a:32:61:6f:ee:c3:c7:b2:04:d0:70:72:75:67:
5b:87:92:79:74:8d:f0:27:fa:4f:5f:3e:57:e5:e0:e7:1a:96:
7c:cc:b1:1f:59:b9:08:0a:10:82:26:dc:12:e5:b0:85:fd:49:
3b:b6:f4:7e:69:c1:f6:ae:f4:72:56:f0:0c:0e:ed:17:fe:e0:
38:57:f6:c8:48:71:f4:91:bd:0f:32:42:a6:99:93:b3:e9:bb:
2e:2c:64:51:3a:d0:3f:d3:84:37:a6:02:01:86:ea:2d:00:3e:
54:db:d9:16:35:9a:66:b7:9c:46:1a:eb:f6:00:21:ae:f8:0e:
f1:e0:6a:c8:c7:ca:ac:7c:0f:d3:03:44:87:56:1b:fe:0d:f3:
0e:43:91:d7:9d:c3:58:43:6a:76:6c:b3:e7:8e:30:92:c4:1a:
26:a8:16:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:23 2024 by rpki-client on console-ams.rpki-client.org