Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/T_VuLt_TbRtbENXU9sYwRK-XVCA.roa
File: T_VuLt_TbRtbENXU9sYwRK-XVCA.roa (raw, json)
Hash identifier: SKj5uIhD2DnA1/hV4tfUWRUj+OsImQCiHQ4afLRRdhQ=
Subject key identifier: 4F:F5:6E:2E:DF:D3:6D:1B:5B:10:D5:D4:F6:C6:30:44:AF:97:54:20
Certificate issuer: /CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Certificate serial: 018570397989DCB6A94CCB295F29697AE410
Authority key identifier: 76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/T_VuLt_TbRtbENXU9sYwRK-XVCA.roa
Signing time: Mon 02 Jan 2023 02:04:52 +0000
ROA not before: Mon 02 Jan 2023 02:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12637
IP address blocks: 188.211.169.0/24 maxlen: 24
77.81.143.0/24 maxlen: 24
176.223.119.0/24 maxlen: 24
194.76.247.0/24 maxlen: 24
195.200.94.0/23 maxlen: 24
31.14.183.0/24 maxlen: 24
78.40.111.0/24 maxlen: 24
91.233.180.0/23 maxlen: 24
89.47.183.0/24 maxlen: 24
86.106.76.0/24 maxlen: 24
86.106.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:79:89:dc:b6:a9:4c:cb:29:5f:29:69:7a:e4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Validity
Not Before: Jan 2 02:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ff56e2edfd36d1b5b10d5d4f6c63044af975420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6e:df:ed:47:8b:2f:88:25:01:2c:26:d6:ae:
2b:4a:05:13:f0:42:bc:6c:41:e2:9e:ed:76:79:ad:
2b:42:a1:43:ed:b1:05:82:26:7f:6d:2a:a1:25:e3:
2f:25:0f:a1:38:95:cc:9e:fb:62:1d:5a:b9:80:44:
22:1e:64:02:4a:93:50:8e:78:31:30:99:6b:53:c0:
f4:c2:03:ff:02:af:e4:27:ab:80:5c:d8:23:c3:9b:
4b:aa:5a:32:b3:f6:51:68:46:c7:7c:a7:a4:d7:1a:
37:95:3c:d4:73:a2:19:d6:32:9d:28:06:d2:1f:79:
a8:66:89:a5:b6:dc:10:f3:83:f7:aa:a5:9c:f1:52:
1b:cb:82:54:9d:fe:16:d2:46:1a:6b:d0:10:01:8b:
e1:87:b7:63:5c:34:33:31:d8:3c:15:cd:56:53:f5:
a7:8d:48:53:51:91:4c:3c:03:0a:ee:28:03:71:5c:
7c:16:18:45:96:da:0d:30:b5:19:5f:19:92:82:4f:
27:3b:b1:4b:6d:3d:d6:f4:75:76:6b:e4:e2:6e:0d:
c4:68:32:4f:04:e5:76:2c:f5:7b:3b:39:f8:c4:1a:
d1:f2:3c:f0:8a:78:e9:09:fa:e0:25:52:63:ce:46:
0a:01:39:99:a3:73:5f:1c:71:96:a2:8d:99:0a:38:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F5:6E:2E:DF:D3:6D:1B:5B:10:D5:D4:F6:C6:30:44:AF:97:54:20
X509v3 Authority Key Identifier:
keyid:76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/T_VuLt_TbRtbENXU9sYwRK-XVCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.183.0/24
77.81.143.0/24
78.40.111.0/24
86.106.75.0-86.106.76.255
89.47.183.0/24
91.233.180.0/23
176.223.119.0/24
188.211.169.0/24
194.76.247.0/24
195.200.94.0/23
Signature Algorithm: sha256WithRSAEncryption
46:1e:a8:31:57:4a:89:4a:8e:83:5a:ca:c8:09:5d:b0:60:04:
03:e3:9a:33:e7:13:88:97:61:89:3b:22:40:67:97:de:ce:6e:
70:96:7e:45:12:dd:af:19:85:2f:82:56:92:89:77:ec:8c:19:
18:5b:6b:84:da:7e:d9:07:d4:58:2b:f5:ed:6e:d7:b6:2f:c1:
4a:8b:e0:c4:e4:4f:bc:4c:ca:e5:ed:e8:73:ef:54:b4:cf:6d:
c6:56:59:84:e8:d9:fd:22:2d:23:0e:67:47:fc:c5:f7:b7:d0:
1c:51:a6:6a:e8:30:cd:71:a6:0f:ff:b8:84:d5:52:91:47:a8:
c5:0a:cb:e6:02:52:f4:d8:1d:9e:67:ee:a0:be:42:13:a6:a0:
0f:b9:00:3e:0e:82:7a:b0:cc:46:1b:cb:65:34:7d:c1:c0:49:
b1:c6:e6:28:bb:d6:f4:b9:ce:1d:45:cd:28:f8:bf:db:55:9e:
f0:2d:77:96:81:46:17:b9:2d:9b:54:43:4a:00:7c:26:34:e8:
d6:74:d2:fc:9a:7b:8a:33:23:b4:1c:57:89:b1:da:56:52:07:
65:8f:5e:3b:18:2f:83:9d:8c:86:8f:46:48:dd:c4:8d:16:6d:
8e:32:86:4b:d3:bc:ba:59:9e:ff:da:0b:b3:94:6a:ff:ed:23:
37:bf:71:9d
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAYVwOXmJ3LapTMspXylpeuQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDU2OTJkNGJkMzBjZjllOTg5ZDU1YmFjOGQwOGU3NzE0
NDkzYWIwHhcNMjMwMTAyMDIwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmY1NmUyZWRmZDM2ZDFiNWIxMGQ1ZDRmNmM2MzA0NGFmOTc1NDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi27f7UeLL4glASwm1q4rSgUT8EK8
bEHinu12ea0rQqFD7bEFgiZ/bSqhJeMvJQ+hOJXMnvtiHVq5gEQiHmQCSpNQjngx
MJlrU8D0wgP/Aq/kJ6uAXNgjw5tLqloys/ZRaEbHfKek1xo3lTzUc6IZ1jKdKAbS
H3moZomlttwQ84P3qqWc8VIby4JUnf4W0kYaa9AQAYvhh7djXDQzMdg8Fc1WU/Wn
jUhTUZFMPAMK7igDcVx8FhhFltoNMLUZXxmSgk8nO7FLbT3W9HV2a+Tibg3EaDJP
BOV2LPV7Ozn4xBrR8jzwinjpCfrgJVJjzkYKATmZo3NfHHGWoo2ZCjhe/QIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFE/1bi7f020bWxDV1PbGMESvl1QgMB8GA1UdIwQY
MBaAFHZFaS1L0wz56YnVW6yNCOdxRJOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtWcExVdlREUG5waWRWYnJJMEk1M0ZFazZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kMDdmMDEtNzdjMC00YTQwLTk1NjMt
ZDZiYjU4MGFmNzg1LzEvVF9WdUx0X1RiUnRiRU5YVTlzWXdSSy1YVkNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kMDdmMDEtNzdjMC00YTQwLTk1NjMtZDZiYjU4MGFmNzg1
LzEvZGtWcExVdlREUG5waWRWYnJJMEk1M0ZFazZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAHw63AwQA
TVGPAwQATihvMAwDBABWaksDBABWakwDBABZL7cDBAFb6bQDBACw33cDBAC806kD
BADCTPcDBAHDyF4wDQYJKoZIhvcNAQELBQADggEBAEYeqDFXSolKjoNaysgJXbBg
BAPjmjPnE4iXYYk7IkBnl97ObnCWfkUS3a8ZhS+CVpKJd+yMGRhba4TaftkH1Fgr
9e1u17YvwUqL4MTkT7xMyuXt6HPvVLTPbcZWWYTo2f0iLSMOZ0f8xfe30BxRpmro
MM1xpg//uITVUpFHqMUKy+YCUvTYHZ5n7qC+QhOmoA+5AD4OgnqwzEYby2U0fcHA
SbHG5ii71vS5zh1FzSj4v9tVnvAtd5aBRhe5LZtUQ0oAfCY06NZ00vyae4ozI7Qc
V4mx2lZSB2WPXjsYL4OdjIaPRkjdxI0WbY4yhkvTvLpZnv/aC7OUav/tIze/cZ0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:10 2024 by rpki-client on console-fra.rpki-client.org