Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/vkrCscULIQYsL0zTiaIiZfJUNwY.roa
File: vkrCscULIQYsL0zTiaIiZfJUNwY.roa (raw, json)
Hash identifier: X0jBif2f/iHhIxAR6qHhi0rgeWHVnhRjqviumL7yiUk=
Subject key identifier: BE:4A:C2:B1:C5:0B:21:06:2C:2F:4C:D3:89:A2:22:65:F2:54:37:06
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01864C3B77C58F9D5E34A0593CBE7D7D0EF0
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/vkrCscULIQYsL0zTiaIiZfJUNwY.roa
Signing time: Mon 13 Feb 2023 19:23:30 +0000
ROA not before: Mon 13 Feb 2023 19:23:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201005
IP address blocks: 151.237.142.0/24 maxlen: 24
85.187.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 09:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4c:3b:77:c5:8f:9d:5e:34:a0:59:3c:be:7d:7d:0e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Feb 13 19:23:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be4ac2b1c50b21062c2f4cd389a22265f2543706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ae:e1:d5:e4:da:1c:5a:62:09:81:d8:e1:f8:
5b:83:9b:26:3d:79:1a:64:06:eb:98:dd:c2:97:9d:
27:dc:aa:ee:10:57:54:c4:31:67:a9:06:65:1d:b7:
bb:60:77:f8:7e:f9:9f:4d:40:06:9d:aa:ec:80:81:
10:3a:d3:11:1a:90:23:b3:f3:99:ae:76:09:60:b7:
a3:e2:74:4c:e4:78:df:78:8d:0d:9b:74:dc:e3:2f:
97:c7:d1:b2:b1:22:c4:21:fb:a2:4f:1c:88:f7:f5:
e0:12:bb:37:20:ae:3a:70:fd:73:20:c2:26:42:f8:
eb:65:44:50:2c:0a:f1:8d:45:21:7b:26:5d:d6:61:
9c:24:9a:9d:a0:b5:ab:ac:8d:6c:8e:ca:83:81:d1:
57:fb:20:61:df:a8:f8:6c:ed:6a:86:b5:1a:37:93:
91:ee:d7:e7:59:20:dc:4d:a8:f6:91:8f:5f:3e:5e:
85:ec:2a:b4:38:45:50:66:3f:fe:99:a9:e2:4f:08:
7b:bf:fa:63:4b:b9:a2:80:b0:2e:46:f0:92:a1:d8:
d3:76:ed:71:88:fb:db:d4:aa:68:0d:73:06:cd:ba:
47:c5:d3:be:50:3f:d9:23:5d:2e:f0:09:44:2f:e6:
09:71:c2:31:99:89:ee:84:05:27:ca:d3:7f:42:14:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4A:C2:B1:C5:0B:21:06:2C:2F:4C:D3:89:A2:22:65:F2:54:37:06
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/vkrCscULIQYsL0zTiaIiZfJUNwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.250.0/24
151.237.142.0/24
Signature Algorithm: sha256WithRSAEncryption
98:63:b8:bd:64:90:27:9d:94:6d:c2:41:10:14:c6:6b:90:63:
d5:82:b5:1d:e1:66:c1:66:05:56:52:8e:30:12:ba:85:3a:82:
95:ec:96:90:51:4c:60:94:56:78:ba:f3:ff:04:71:94:8e:31:
5d:1e:91:c0:1d:40:f8:9b:05:97:8e:ea:76:6b:16:4a:fd:f7:
1d:4f:4f:46:02:c6:c9:12:b3:1a:ae:9f:40:24:4c:5e:b1:eb:
18:3a:f9:61:7b:6e:5d:4d:fc:4f:4e:67:c0:00:b0:9a:c8:36:
95:3e:d5:36:54:6f:6b:c9:4b:08:73:84:52:72:82:04:ca:db:
64:bd:58:f4:09:56:4f:52:4c:85:99:52:6f:5d:b6:29:4c:a1:
9e:f5:5f:f8:fa:f8:06:2f:a4:a8:29:43:d4:27:08:4f:69:2c:
2c:cf:02:8f:df:65:6b:cf:35:db:0f:a8:d8:23:49:08:ce:6b:
0e:4b:09:95:35:11:9d:df:a6:3e:14:d0:60:ce:06:68:cc:15:
5c:1d:5a:f2:db:b1:a5:d0:82:df:c0:37:fa:9b:8c:c3:30:fa:
fc:6b:99:16:03:6a:15:33:f8:87:1b:aa:1c:81:f2:a7:a5:8f:
f1:6b:65:6f:51:f2:21:56:60:d5:a3:66:cc:f9:72:96:c5:99:
0d:14:33:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org