Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/vu0g7g_NT2RavB2qOzvPD2THqgQ.roa
File: vu0g7g_NT2RavB2qOzvPD2THqgQ.roa (raw, json)
Hash identifier: S+yOOdT//bI4iErTACOjnWaRfZlgvnGvB/YRU038L04=
Subject key identifier: BE:ED:20:EE:0F:CD:4F:64:5A:BC:1D:AA:3B:3B:CF:0F:64:C7:AA:04
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 018888875BA44893BECB32B50D73C6C2C820
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/vu0g7g_NT2RavB2qOzvPD2THqgQ.roa
Signing time: Sun 04 Jun 2023 22:29:12 +0000
ROA not before: Sun 04 Jun 2023 22:29:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29695
IP address blocks: 178.16.64.0/20 maxlen: 20
80.89.32.0/19 maxlen: 19
82.148.128.0/19 maxlen: 19
89.162.0.0/17 maxlen: 17
185.65.152.0/22 maxlen: 22
185.10.28.0/22 maxlen: 22
77.222.192.0/19 maxlen: 19
141.0.224.0/19 maxlen: 19
77.110.192.0/18 maxlen: 18
194.182.224.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:88:87:5b:a4:48:93:be:cb:32:b5:0d:73:c6:c2:c8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Jun 4 22:29:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beed20ee0fcd4f645abc1daa3b3bcf0f64c7aa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4f:e4:dd:50:c6:3a:25:70:8d:19:f4:54:bd:
fc:01:bb:c5:69:49:28:82:af:10:35:98:a0:71:d7:
f0:14:5f:65:68:80:9e:a4:4f:85:0d:8c:94:d6:49:
6e:56:d1:e8:47:55:a6:9c:6f:67:ac:e4:b5:32:6f:
b3:e0:02:4e:44:33:33:a5:b3:bb:ad:c5:80:46:dc:
91:fc:da:de:fe:65:73:4a:a0:43:13:70:26:88:13:
35:e8:cf:09:b7:b0:d7:59:dc:02:1e:5f:ef:22:71:
4d:da:e7:dc:e2:65:a1:1b:59:9c:d3:a9:8d:a8:4e:
b3:45:d0:9a:94:93:2b:26:b8:f7:cf:5c:10:6e:e4:
e7:ba:d7:25:41:b8:0e:da:93:29:6f:ea:fd:55:c2:
01:9b:9b:4c:e3:92:d3:d4:54:ad:7f:45:d3:a1:c3:
25:a6:d5:10:ec:6b:9e:03:f4:a6:6b:2f:97:02:48:
c1:a6:3b:52:52:7d:8e:e5:f4:8b:5f:e4:4c:cf:b3:
d7:de:68:07:bc:56:a1:84:58:36:4e:63:33:ad:90:
a9:9a:5f:3e:9d:d4:e6:db:4c:29:46:82:0f:2b:56:
d3:09:88:46:1b:63:a0:fd:88:00:13:b7:c0:45:f5:
f5:8c:23:25:2a:59:be:25:b4:59:cc:cd:89:b6:9b:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:ED:20:EE:0F:CD:4F:64:5A:BC:1D:AA:3B:3B:CF:0F:64:C7:AA:04
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/vu0g7g_NT2RavB2qOzvPD2THqgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.192.0/18
77.222.192.0/19
80.89.32.0/19
82.148.128.0/19
89.162.0.0/17
141.0.224.0/19
178.16.64.0/20
185.10.28.0/22
185.65.152.0/22
194.182.224.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:3d:a6:31:d5:c5:53:92:90:64:29:85:07:65:dc:0d:1a:50:
b0:b5:3f:3f:db:7f:6c:33:31:b5:56:e2:a0:32:06:54:35:ff:
31:68:76:65:6a:eb:16:c6:ae:26:35:a9:f7:43:24:05:0d:c7:
19:bc:59:59:94:1c:70:a0:e1:aa:1a:40:fa:e7:0b:20:1a:b7:
01:95:65:3b:d9:84:8c:44:c4:02:2b:51:dc:2e:00:30:ea:b3:
b6:2e:42:fe:f6:a2:bf:da:26:f4:9f:24:c1:fc:a3:8a:44:8b:
04:40:ca:5c:d7:1e:10:80:eb:0a:5b:85:9c:76:da:f3:16:86:
59:d1:01:f7:ea:3f:07:8a:97:a5:7b:06:86:12:22:c5:0e:e4:
32:5b:c3:0c:9d:05:8d:18:82:f1:7c:68:67:31:85:38:0f:4d:
5e:43:4f:96:e2:1b:76:b8:72:b5:2c:85:50:f6:28:ae:89:71:
12:0f:0f:57:72:1e:10:a9:2a:b7:1a:68:55:2c:60:0b:f2:ba:
2a:0b:1e:b8:13:ea:a2:e4:a3:2e:e1:7e:ed:f0:d9:33:42:fb:
ca:11:3e:07:ac:73:e9:3d:52:1a:79:48:76:3b:28:e4:69:5c:
5c:da:e3:c5:14:43:5e:8f:95:73:5d:7c:7c:c5:e3:f1:3d:87:
33:3f:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:06 2024 by rpki-client on console-ams.rpki-client.org