Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/vNut4C5CZLUG_kYYR-S6EElh_ew.roa
File: vNut4C5CZLUG_kYYR-S6EElh_ew.roa (raw, json)
Hash identifier: OOAEJbPgdlzjDOIjdA7ehMaE2tnvQnQCBASSSnn4RXk=
Subject key identifier: BC:DB:AD:E0:2E:42:64:B5:06:FE:46:18:47:E4:BA:10:49:61:FD:EC
Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial: 01856F949E3B6E3B197DBBEDE0E90D57FBEF
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/vNut4C5CZLUG_kYYR-S6EElh_ew.roa
Signing time: Sun 01 Jan 2023 23:04:48 +0000
ROA not before: Sun 01 Jan 2023 23:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43128
IP address blocks: 212.44.112.0/24 maxlen: 24
212.44.113.0/24 maxlen: 24
212.44.118.0/24 maxlen: 24
212.44.120.0/24 maxlen: 24
212.44.119.0/24 maxlen: 24
212.44.126.0/23 maxlen: 24
146.247.24.0/22 maxlen: 24
185.148.72.0/22 maxlen: 24
212.44.96.0/20 maxlen: 24
2a02:ec::/32 maxlen: 48
2a02:e8::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 17 Jan 2023 11:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:9e:3b:6e:3b:19:7d:bb:ed:e0:e9:0d:57:fb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
Validity
Not Before: Jan 1 23:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcdbade02e4264b506fe461847e4ba104961fdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:da:2d:f9:3d:e5:8a:b8:a3:6f:e1:99:a4:
f1:c4:ec:7c:7c:9d:2e:99:c3:3c:31:f9:c0:50:0d:
54:7f:5a:a1:4a:d3:2f:09:9f:be:21:6f:0e:ea:2a:
e4:c8:13:76:19:26:2a:f9:59:52:a0:9d:32:cd:30:
40:f1:9c:b8:09:dc:47:76:b1:f3:86:60:d3:f9:cf:
d0:38:fa:5f:f3:43:ba:ef:33:36:3c:36:7b:e5:ad:
05:6c:76:7a:81:09:68:73:66:df:9f:ee:b0:ec:51:
57:cd:8b:d5:34:d1:73:cc:df:0c:ad:a3:47:82:00:
91:55:12:39:4b:bf:ae:e4:30:6a:97:88:71:57:0a:
55:33:22:e4:16:8d:8e:e2:42:c0:5e:75:b0:9c:82:
35:fb:7a:3f:87:dd:72:5d:44:11:34:c3:1c:89:2a:
34:a0:ae:ae:fe:ab:90:08:36:75:00:7c:89:4f:cb:
be:c6:bb:e8:30:fb:ba:09:56:c2:73:aa:5b:e2:95:
bc:8a:ca:7e:18:7c:d9:90:72:8b:a3:4c:5c:d4:74:
9c:6f:f1:80:08:ee:2c:cc:81:89:8b:b7:95:d0:fb:
94:0c:b2:00:1a:6e:ec:05:ed:b3:1c:41:fe:34:ea:
27:cb:98:28:74:45:34:92:7c:16:c6:b1:93:95:cf:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DB:AD:E0:2E:42:64:B5:06:FE:46:18:47:E4:BA:10:49:61:FD:EC
X509v3 Authority Key Identifier:
keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/vNut4C5CZLUG_kYYR-S6EElh_ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.24.0/22
185.148.72.0/22
212.44.96.0-212.44.113.255
212.44.118.0-212.44.120.255
212.44.126.0/23
IPv6:
2a02:e8::/32
2a02:ec::/32
Signature Algorithm: sha256WithRSAEncryption
c7:a6:1a:47:eb:14:c4:45:98:3d:43:3b:b0:35:6e:9d:e3:d6:
0b:5a:d8:35:5d:00:95:99:54:44:d1:73:01:97:34:59:44:fd:
78:b5:55:80:34:5e:5e:5e:3e:03:bd:72:05:0f:54:14:be:fb:
65:79:fd:c2:f4:ab:53:6d:58:0e:2e:1e:77:8a:ea:c4:b1:ec:
70:f1:bc:3e:09:1f:3f:c7:9e:e7:a1:40:24:08:b1:e8:8f:4c:
da:e6:37:36:09:19:70:5e:2e:8b:8a:ed:68:0c:14:30:32:2a:
18:b4:60:94:97:f8:2e:fa:c3:36:d7:d2:4a:21:6d:77:7d:3b:
6e:d2:38:d6:54:78:4f:e3:dd:99:4b:20:b3:86:b4:a0:ed:45:
32:83:a4:da:49:93:35:9e:25:2b:c7:7e:0d:16:f0:4f:4b:87:
79:bf:58:0f:7b:19:98:a4:1e:0f:68:9c:fa:38:8f:b2:d6:4a:
c2:98:e1:ca:22:31:e3:2a:89:02:58:06:77:f3:b4:e0:bb:ad:
c1:24:7b:da:75:0d:78:a4:46:f3:00:cc:29:b2:c2:ea:02:99:
95:8b:78:9a:bb:07:66:29:82:f3:dc:5e:0d:95:29:d0:db:e2:
e9:a9:af:8b:3b:b0:ed:cf:a1:94:ae:5b:07:e4:22:2c:7d:a7:
cd:82:db:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:41 2024 by rpki-client on console-fra.rpki-client.org