Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/vdiH1ZMvOvJ2etsgHc0Vp9NkXHI.roa
File: vdiH1ZMvOvJ2etsgHc0Vp9NkXHI.roa (raw, json)
Hash identifier: EEi42AJwc7vWHEk+ii+Yiz5D+UEzSFr+4INalEM5YaQ=
Subject key identifier: BD:D8:87:D5:93:2F:3A:F2:76:7A:DB:20:1D:CD:15:A7:D3:64:5C:72
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 01857102C9B7EF377FFAB6F90EB971307726
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/vdiH1ZMvOvJ2etsgHc0Vp9NkXHI.roa
Signing time: Mon 02 Jan 2023 05:44:46 +0000
ROA not before: Mon 02 Jan 2023 05:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58011
IP address blocks: 188.244.108.0/22 maxlen: 24
164.138.245.157/32 maxlen: 32
164.138.240.0/21 maxlen: 24
164.138.244.208/32 maxlen: 32
2a0d:55c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:c9:b7:ef:37:7f:fa:b6:f9:0e:b9:71:30:77:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Jan 2 05:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdd887d5932f3af2767adb201dcd15a7d3645c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:0e:de:a3:ce:a1:76:1c:c1:78:06:3f:a9:
54:af:06:fc:e7:44:6b:f8:e4:bb:f8:8d:ea:cc:74:
90:e4:d9:db:15:93:8b:7f:4d:c1:af:db:4b:d5:bd:
2f:cd:4f:ed:51:8a:0f:56:95:62:a7:76:99:e9:c7:
e0:5b:f9:f6:5a:59:c7:b5:5b:e5:22:ad:14:52:73:
39:82:93:fb:51:c6:b7:8b:ca:f7:43:46:3b:c1:2f:
59:7a:f3:bf:63:a6:e3:6d:df:8f:8f:9b:f4:7f:23:
57:12:8a:b7:b6:3d:cb:53:7b:78:d4:3f:4d:6c:16:
9c:cc:6f:12:64:58:ab:bc:7d:0d:3c:76:5e:3e:c3:
53:75:3a:7a:f0:cf:0c:0b:77:fe:7e:43:0b:57:f6:
a1:0a:95:87:9d:b9:af:44:93:7d:7a:9c:e7:d1:a7:
81:85:33:fa:ae:4e:2c:4c:0c:0b:83:a2:ae:66:37:
ae:92:64:c2:f9:47:9d:de:2e:22:72:be:f3:05:f3:
09:e0:b7:4b:06:81:c2:ff:57:3e:ca:5f:46:fa:47:
8d:2e:e0:08:0e:55:f0:47:63:dc:4b:64:96:d7:33:
24:9d:bf:21:5b:16:8a:50:c5:22:d2:70:df:4e:19:
53:4b:90:c4:6f:87:93:9c:9e:c1:94:bd:0b:9c:f9:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D8:87:D5:93:2F:3A:F2:76:7A:DB:20:1D:CD:15:A7:D3:64:5C:72
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/vdiH1ZMvOvJ2etsgHc0Vp9NkXHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.240.0/21
188.244.108.0/22
IPv6:
2a0d:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:71:d1:22:f9:aa:dd:65:4a:46:64:aa:b3:d1:69:87:05:ca:
a6:34:1f:bf:09:b4:32:3c:8b:78:ba:31:58:97:d4:0c:a0:eb:
1f:24:d8:0e:23:e2:44:cb:57:74:14:e5:4b:c7:d0:14:34:43:
b7:6f:34:af:0d:32:d8:d4:14:7c:a3:d7:44:ed:2b:b2:af:c8:
64:90:3d:f8:6c:05:98:d4:ef:a4:18:08:ac:18:52:9a:9b:40:
93:58:dd:0b:69:cf:68:8e:05:af:7e:9f:30:60:82:44:4d:ab:
9a:59:87:18:52:b1:f3:b4:60:13:ca:03:01:f9:da:75:32:89:
11:63:b3:46:96:9b:a0:e3:7b:b4:99:2b:6c:34:69:b7:9f:0f:
d9:cc:90:e9:82:ab:71:18:72:fc:df:d8:1c:e6:89:e1:2f:01:
d3:50:cc:aa:ef:63:e8:08:1c:c1:ea:9e:1e:0e:64:09:93:35:
99:67:53:04:2e:54:f0:5a:a2:18:c1:98:22:7b:23:94:a3:0e:
a1:6c:b7:ca:eb:32:c0:52:bf:fa:1c:2a:2a:b6:eb:5d:3b:1e:
e8:34:6a:4a:04:4e:c8:af:b4:5d:49:d7:36:2b:43:5b:d6:cd:
89:84:5f:6d:16:96:4c:85:d5:57:b8:37:9f:0b:48:72:cb:4a:
07:1a:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:47 2024 by rpki-client on console-ams.rpki-client.org