Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Vt_VjWbQS0dZ9307zuqyGploF9Q.roa
File: Vt_VjWbQS0dZ9307zuqyGploF9Q.roa (raw, json)
Hash identifier: 9Xt1HXuZUFE7etmP5c0/yqU59PKG+CUXLqoR9Iy/kOA=
Subject key identifier: 56:DF:D5:8D:66:D0:4B:47:59:F7:7D:3B:CE:EA:B2:1A:99:68:17:D4
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018ABD21B41E53269C41F72EE4C1655EBB87
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Vt_VjWbQS0dZ9307zuqyGploF9Q.roa
Signing time: Fri 22 Sep 2023 13:43:37 +0000
ROA not before: Fri 22 Sep 2023 13:43:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 45.147.156.0/24 maxlen: 24
45.147.158.0/24 maxlen: 24
92.61.102.0/24 maxlen: 24
91.190.185.0/24 maxlen: 24
91.190.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:21:b4:1e:53:26:9c:41:f7:2e:e4:c1:65:5e:bb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Sep 22 13:43:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56dfd58d66d04b4759f77d3bceeab21a996817d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:19:ce:5e:58:6c:73:e2:d3:47:42:74:9d:
18:05:4e:1c:11:c2:72:f0:d8:01:63:67:a9:24:95:
10:57:e7:9b:e6:f8:c4:cd:e9:7d:df:18:71:be:d6:
0b:02:92:95:a8:ed:ca:07:7c:4a:06:e8:3c:a2:16:
2c:59:0f:2c:b3:23:c6:67:26:cd:4f:ad:e0:ec:36:
23:61:99:fc:06:cb:82:f9:c4:ec:0d:b2:e1:74:54:
75:e2:5c:24:d2:ab:15:28:a6:f4:6c:d4:51:33:22:
d6:1b:1e:f9:b4:a8:fb:2c:76:d1:2b:37:c7:71:dc:
9b:9a:26:f0:d0:17:ff:45:eb:81:a9:ae:bc:20:15:
27:ac:6a:e1:6c:bd:14:59:6f:7a:c6:44:a2:e6:57:
7b:33:65:46:ef:c1:73:b1:6c:83:b9:9c:bb:f7:d1:
ca:8e:8b:5b:9f:10:5a:39:d2:7a:cc:cb:2b:1f:28:
41:18:fe:2d:60:1b:0d:ac:cf:1e:7d:90:87:28:41:
23:1a:a9:a7:c0:40:da:8f:7e:2a:ce:7f:4a:2c:9e:
05:16:e2:49:80:8b:88:af:e9:20:e7:38:ea:f9:35:
98:79:67:0c:95:62:d8:25:f8:5d:63:30:59:6c:b5:
69:e6:29:fd:95:30:c0:9d:46:4c:46:64:87:84:4a:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DF:D5:8D:66:D0:4B:47:59:F7:7D:3B:CE:EA:B2:1A:99:68:17:D4
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Vt_VjWbQS0dZ9307zuqyGploF9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.156.0/24
45.147.158.0/24
91.190.185.0/24
91.190.188.0/24
92.61.102.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a7:0d:16:da:9b:39:30:03:c3:ff:ce:2a:8c:9b:b8:df:af:
47:01:0a:8e:9a:fb:85:05:0c:46:47:ef:9b:f7:7b:cc:1e:b8:
13:77:51:69:87:c2:db:dc:fe:ac:72:0e:f1:68:f0:c3:0c:2f:
d7:a8:4c:cc:ac:0b:87:20:2c:ea:85:82:01:e6:e0:71:06:37:
0b:49:d2:77:e3:03:e6:c3:80:94:b7:95:3d:40:83:d4:cb:96:
ba:ee:07:8b:e8:5b:11:7b:ad:45:06:a3:02:29:b4:e5:66:ca:
4b:ab:d8:bd:5f:65:dd:7d:69:e2:4c:5f:2b:1c:ba:c1:42:1e:
ac:f8:da:9f:50:d2:a7:d5:47:bb:c1:90:a6:86:5c:26:43:89:
d5:93:2f:80:0b:18:92:50:ca:85:14:83:0f:e8:4d:1c:4e:8d:
2c:f7:09:6c:41:26:75:73:5b:13:30:fa:7a:2a:ae:93:d1:3b:
5c:a7:d3:c4:80:b2:26:c0:ec:8f:ac:86:13:1e:43:fc:7a:bd:
89:af:c1:0c:39:6d:41:df:46:32:54:45:46:1c:dd:50:7f:d7:
ef:50:a6:2c:e2:be:b5:dc:ff:c0:fb:70:9d:33:75:59:13:c0:
29:e3:3c:7d:a1:4e:c1:33:2f:bb:8e:99:e1:67:61:57:32:82:
42:76:8b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:36 2024 by rpki-client on console-fra.rpki-client.org