Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/vlLchoy_N8gZ_yyBE1oHgHxZ_FA.roa
File: vlLchoy_N8gZ_yyBE1oHgHxZ_FA.roa (raw, json)
Hash identifier: OkeSIBz2ADvFPlNEg/bI2Lp9vpL5IRBFIFvshIVQo7A=
Subject key identifier: BE:52:DC:86:8C:BF:37:C8:19:FF:2C:81:13:5A:07:80:7C:59:FC:50
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 0188D35BBC192EDBAEED8C6F43F6355E3194
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/vlLchoy_N8gZ_yyBE1oHgHxZ_FA.roa
Signing time: Mon 19 Jun 2023 11:13:04 +0000
ROA not before: Mon 19 Jun 2023 11:13:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 85.159.228.0/24 maxlen: 24
85.159.229.0/24 maxlen: 24
46.29.238.0/24 maxlen: 24
46.29.234.0/24 maxlen: 24
46.29.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:5b:bc:19:2e:db:ae:ed:8c:6f:43:f6:35:5e:31:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jun 19 11:13:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be52dc868cbf37c819ff2c81135a07807c59fc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:0b:ab:5a:d4:79:81:3a:54:49:64:9b:74:
93:ee:f5:f8:ae:32:7a:b1:06:36:73:43:c9:81:6e:
83:55:84:a6:90:11:67:c2:3a:17:3f:06:22:9c:3d:
c2:42:fd:3b:cd:8d:8e:08:5d:4c:c4:2b:5f:dc:b7:
83:22:46:84:79:c6:cb:ab:fc:e2:ca:5c:b1:43:1f:
3f:48:21:8f:29:7d:c7:f3:64:a3:fd:42:b8:38:d2:
df:40:b2:c6:08:3c:59:96:22:b0:93:f5:ae:19:ea:
f1:fe:f0:17:a9:b7:5a:4a:5a:e9:aa:ae:0d:1b:17:
4e:a3:d5:c9:82:4d:31:00:db:d4:0b:a8:c0:0c:e7:
73:b1:4c:e0:55:31:c3:4f:80:ca:a2:03:e4:18:a5:
da:cc:e4:7b:7d:00:fc:c5:7c:6a:59:16:b9:a6:b7:
20:eb:a7:d6:5e:4b:ec:2b:28:49:f4:23:a6:0d:db:
0e:1b:67:08:07:3e:4e:cd:9b:e0:30:32:c7:82:cc:
9a:22:32:64:b3:f5:1b:db:78:ea:44:b7:ba:03:1b:
98:13:7e:6f:e4:23:36:9d:11:3a:94:60:26:f9:0e:
b4:c5:95:4c:10:d0:75:d8:8b:b2:83:31:34:94:17:
19:75:61:c9:44:3c:be:be:a1:1b:65:87:36:8a:94:
6e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:52:DC:86:8C:BF:37:C8:19:FF:2C:81:13:5A:07:80:7C:59:FC:50
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/vlLchoy_N8gZ_yyBE1oHgHxZ_FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.234.0/23
46.29.238.0/24
85.159.228.0/23
Signature Algorithm: sha256WithRSAEncryption
68:cd:f4:12:67:d0:25:a7:89:43:14:71:e9:f2:fd:3c:55:f0:
e8:c8:5e:bc:99:db:f2:36:88:b0:d4:24:35:1d:51:31:5b:ad:
88:ed:75:17:c3:d5:0a:8d:fe:77:6c:65:4c:bc:8a:99:4e:09:
10:c4:63:a5:f8:ac:50:4f:06:5f:c4:13:f6:d8:49:d1:b3:98:
32:1b:75:2d:c5:9c:4d:a5:67:f4:01:0f:99:a0:02:9b:cb:61:
40:3c:82:b5:47:d2:8c:3e:82:0f:a0:e5:b3:61:d0:4e:c8:37:
8a:49:2e:a2:be:2b:20:eb:4a:b9:eb:0c:4b:ec:8d:4f:08:f0:
ac:c1:e6:51:d8:9d:a1:c1:b7:4f:85:7b:30:4c:27:e4:23:c6:
75:e3:e6:82:72:d2:35:0e:06:b3:b0:1e:65:06:84:d8:b0:7f:
b7:35:71:6e:eb:c3:e2:a5:0f:94:fa:2d:30:44:ef:02:5b:92:
f5:53:92:77:89:86:80:48:c7:24:f4:3b:9f:ad:37:67:a2:db:
9e:2c:1b:4c:78:5c:9f:7e:52:c9:b1:1f:90:54:3d:86:c4:1f:
b3:67:ec:6d:06:36:ad:7c:5a:d3:3a:77:24:f2:16:b8:44:73:
dd:4f:1e:8d:e8:a5:f9:4e:8a:27:60:50:dc:71:dc:a9:fc:5d:
a5:d7:3c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:37 2023 by rpki-client on console-ams.rpki-client.org