Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/vtru9kJ88Fpd9q0ozuxlxJnqfuQ.roa
File: vtru9kJ88Fpd9q0ozuxlxJnqfuQ.roa (raw, json)
Hash identifier: lbrHi1eGH9b7+A25XHmX948ZWxYnCZwJ9dP6AzgIqz0=
Subject key identifier: BE:DA:EE:F6:42:7C:F0:5A:5D:F6:AD:28:CE:EC:65:C4:99:EA:7E:E4
Certificate issuer: /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial: 018CC801665FEA7A5CDB9E1AB5BD2D0E80F7
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/vtru9kJ88Fpd9q0ozuxlxJnqfuQ.roa
Signing time: Tue 02 Jan 2024 02:29:44 +0000
ROA not before: Tue 02 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198256
IP address blocks: 217.194.129.0/24 maxlen: 24
217.194.128.0/24 maxlen: 24
217.194.128.0/23 maxlen: 23
217.194.159.0/24 maxlen: 24
217.194.158.0/24 maxlen: 24
217.194.158.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 06 Feb 2024 11:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:66:5f:ea:7a:5c:db:9e:1a:b5:bd:2d:0e:80:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bedaeef6427cf05a5df6ad28ceec65c499ea7ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:82:77:2b:ac:67:ad:a7:a2:84:4e:78:dd:ee:
b8:07:18:ac:c9:56:dd:6b:ef:5d:c9:21:f7:09:67:
01:ec:2a:37:c0:31:12:4d:dc:61:67:75:b9:94:ae:
9e:2c:c0:a2:25:06:0e:ee:69:9a:e9:6d:7b:f6:4f:
b6:8e:e8:ba:dd:4a:84:40:51:14:c2:30:89:d7:cc:
2f:6c:bf:3b:01:c2:3f:0b:b2:ae:77:f2:f2:e7:18:
c5:e5:2d:e8:ad:ab:d0:ff:44:29:ec:21:6a:cb:bd:
8e:fe:0a:27:29:6d:db:3f:3f:a7:f2:d9:e4:e7:f3:
4d:11:48:a0:cb:46:2e:65:0e:61:b6:6a:59:cd:b8:
28:67:26:ae:5b:cc:0a:68:3e:14:71:81:20:d8:71:
98:46:a5:c7:7b:65:df:38:a1:94:db:3a:4d:b1:18:
aa:c6:46:02:93:d1:9e:43:03:8a:a3:f3:04:79:f6:
12:78:cd:84:b0:cb:52:0e:85:a5:a0:37:4d:b0:96:
89:b7:c9:b6:4a:79:af:ad:43:9b:bb:81:ca:c9:6c:
df:8c:42:61:fe:48:f8:31:de:cd:7d:c1:e8:2a:1a:
3b:0b:42:3f:50:59:67:f1:9a:91:cb:b7:ab:3f:2f:
93:25:cf:1c:61:57:d3:d1:48:9b:7a:e4:cf:2c:c4:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DA:EE:F6:42:7C:F0:5A:5D:F6:AD:28:CE:EC:65:C4:99:EA:7E:E4
X509v3 Authority Key Identifier:
keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/vtru9kJ88Fpd9q0ozuxlxJnqfuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.128.0/23
217.194.158.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:2d:54:38:92:27:53:cd:c1:32:9a:f5:e1:d8:2c:80:78:2d:
4b:53:50:5a:13:b0:d7:12:5a:94:30:9c:5c:f0:63:28:34:7c:
4b:fd:6d:02:7a:08:06:11:a9:9d:6b:21:c4:62:b9:dc:ea:7d:
61:a6:61:2a:6f:61:1a:8b:4e:47:ee:6d:73:5f:9e:a3:f9:0c:
b1:76:d3:b4:c6:85:45:ed:4d:36:11:ec:fd:82:19:a8:1c:0b:
a9:cc:72:c9:2a:8b:e9:a4:b2:ae:1f:dc:56:df:db:06:48:a7:
f9:e9:33:70:d0:eb:36:fe:76:54:55:28:8e:63:d3:70:06:a8:
73:d1:90:94:b1:34:1b:5d:eb:af:07:27:9d:f9:ff:8d:e0:9b:
f2:9c:48:0b:a0:43:2a:39:7b:e7:fa:2c:6d:ff:03:1f:1d:dd:
ea:55:83:bd:c0:54:2b:30:3d:7b:8d:0e:a8:98:79:db:bc:cc:
c9:bd:af:10:01:f7:1d:7d:8f:e4:71:0f:3e:ef:59:4a:a3:c2:
4f:1e:04:c5:ac:c4:27:a1:e4:00:83:fa:73:e3:79:bc:85:cc:
63:38:ba:70:c8:71:50:bf:a4:98:f1:5b:48:8d:10:22:0d:9a:
6b:ed:9a:e8:22:52:7c:30:99:df:64:70:60:d0:26:94:ad:61:
d3:69:06:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:30 2024 by rpki-client on console-ams.rpki-client.org