Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/0bp1Fqn0pT6hLjTCfNaRu4KpNXs.roa
File: 0bp1Fqn0pT6hLjTCfNaRu4KpNXs.roa (raw, json)
Hash identifier: ZfAiTmLE8X28EgONLRaN9qRrg8MfufezuH6UcRRFjZo=
Subject key identifier: D1:BA:75:16:A9:F4:A5:3E:A1:2E:34:C2:7C:D6:91:BB:82:A9:35:7B
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 01856D3860345040F2866ACD68E6BB9648E4
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/0bp1Fqn0pT6hLjTCfNaRu4KpNXs.roa
Signing time: Sun 01 Jan 2023 12:04:49 +0000
ROA not before: Sun 01 Jan 2023 12:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51333
IP address blocks: 185.58.4.0/22 maxlen: 24
188.65.80.0/21 maxlen: 24
194.36.72.0/22 maxlen: 24
2a0c:bdc0::/29 maxlen: 29
2a02:6120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:60:34:50:40:f2:86:6a:cd:68:e6:bb:96:48:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Jan 1 12:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1ba7516a9f4a53ea12e34c27cd691bb82a9357b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:0c:6e:77:1b:51:18:c8:da:e6:8c:95:b0:
3f:4a:d9:6c:ba:3c:bc:3f:a9:dc:62:e0:96:ce:13:
6c:52:5b:40:02:2b:51:dd:c6:50:06:a8:5a:34:76:
5b:39:e3:d8:48:fd:04:d7:84:7c:99:13:93:7a:e1:
97:f6:33:9d:4f:4b:ec:68:04:88:89:d4:eb:7e:35:
91:42:35:82:42:c5:ce:fb:e1:6f:b4:c0:4d:4a:51:
0b:bd:4f:62:25:4a:d0:ab:73:a7:00:e6:90:d7:ad:
44:42:4d:3d:a2:4f:6b:54:be:10:b1:2b:f8:cf:31:
d8:73:61:aa:3e:66:52:f7:da:37:9e:fa:01:52:3e:
24:f7:b1:d5:91:c3:cc:a5:90:c3:e2:b1:6c:30:93:
8a:be:5c:25:dd:58:9b:5a:14:01:81:f5:82:f2:17:
71:a7:f0:3b:9b:6c:2b:e8:ba:6c:07:03:65:d3:31:
96:16:09:a5:33:8d:c8:fd:42:db:7b:f0:8a:92:5f:
b4:d5:8f:72:0f:b9:e3:7f:4e:8e:89:c0:fa:a3:74:
96:e5:10:d9:dc:41:c3:78:47:e2:97:1e:dd:fa:2b:
62:ac:54:b6:e3:db:f6:14:6b:71:bc:cb:62:d8:02:
a5:e9:a8:c7:23:d0:84:f3:09:76:2c:43:73:aa:54:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BA:75:16:A9:F4:A5:3E:A1:2E:34:C2:7C:D6:91:BB:82:A9:35:7B
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/0bp1Fqn0pT6hLjTCfNaRu4KpNXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.4.0/22
188.65.80.0/21
194.36.72.0/22
IPv6:
2a02:6120::/32
2a0c:bdc0::/29
Signature Algorithm: sha256WithRSAEncryption
00:4f:88:01:e3:6f:2e:57:d9:c8:99:9d:b5:6c:11:88:39:10:
7c:b0:e3:ff:b6:98:1a:03:d5:08:91:eb:fb:a0:3e:ff:17:4d:
42:23:f5:fe:60:8d:8a:de:22:4b:5a:d5:92:50:2c:79:2f:65:
a7:88:23:79:1a:c6:14:69:3e:ed:80:52:87:3b:65:d2:20:12:
38:d6:ff:39:72:d1:54:49:21:91:97:75:c5:9c:1f:e1:6a:29:
bb:f2:d3:7f:e4:24:35:0b:e7:e1:36:e4:e3:ff:a5:47:86:1a:
9f:86:5e:74:96:03:25:09:fc:f6:1d:ae:29:a3:58:59:f5:57:
20:a8:58:2d:1a:da:12:1a:25:e1:9c:52:f5:65:73:0f:cf:d4:
a7:77:0c:7a:64:e3:5d:b6:3a:e0:17:a3:fa:52:ba:af:b0:7c:
33:bb:51:d4:f1:e5:c1:e0:4c:11:da:fd:85:fd:29:fc:4a:63:
6b:34:78:cc:2d:3a:b1:e8:a6:ff:ad:1d:af:7e:78:e7:4a:dd:
15:ad:0a:89:f2:59:b9:bb:ba:d0:71:aa:7b:63:ec:73:28:7f:
6f:74:3b:67:ce:85:cf:31:a4:bb:54:04:7c:68:3c:05:91:85:
5a:5d:8c:88:cc:76:56:6e:d3:42:7c:83:4e:54:6d:49:b3:4c:
4d:4b:06:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:41 2023 by rpki-client on console-ams.rpki-client.org