Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VaU3AMbWzz3teltoyJ8o5isplDA.roa
File: VaU3AMbWzz3teltoyJ8o5isplDA.roa (raw, json)
Hash identifier: ZrOpj5732N+yODbpsZuHx1Lk2FqmD7XpzCEQkvR1enw=
Subject key identifier: 55:A5:37:00:C6:D6:CF:3D:ED:7A:5B:68:C8:9F:28:E6:2B:29:94:30
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018BA009733A3DA76E25E3C703E00425889F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VaU3AMbWzz3teltoyJ8o5isplDA.roa
Signing time: Sun 05 Nov 2023 15:10:55 +0000
ROA not before: Sun 05 Nov 2023 15:10:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 92.52.214.0/24 maxlen: 24
178.210.248.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
178.210.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:09:73:3a:3d:a7:6e:25:e3:c7:03:e0:04:25:88:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 5 15:10:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55a53700c6d6cf3ded7a5b68c89f28e62b299430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:60:7d:6b:89:f4:df:e8:39:48:56:47:6b:
e2:50:a9:11:db:38:7c:54:6c:00:c3:19:2a:8b:a1:
50:16:ec:ac:c5:0d:00:86:5a:85:a8:89:f5:b0:4a:
28:69:d9:b0:9c:9f:14:0a:61:6f:a3:02:68:d3:5f:
eb:a3:55:e2:7e:89:87:54:be:75:3b:83:ac:0e:2d:
d6:8d:86:76:ac:9a:14:5b:f3:af:f6:c7:8f:59:71:
e7:9f:4d:bc:1d:17:6e:7b:f9:64:98:8d:0c:44:dc:
a6:bb:bc:5e:be:f6:eb:fe:5a:de:4f:71:31:88:63:
77:ab:1b:ba:37:54:c8:da:01:ce:a3:03:b4:7a:1f:
e5:aa:71:ca:dc:4e:bd:74:af:d4:59:a7:18:bc:ee:
2e:60:db:e4:e0:37:07:f1:3b:de:d5:54:0f:d1:f7:
fe:64:64:13:c9:39:21:6a:cb:16:94:2b:e4:71:77:
a9:d0:84:d1:9d:64:a7:94:bf:10:8f:89:e3:1f:0f:
fe:1f:87:ad:14:7d:5b:40:a3:29:4e:08:b8:e0:ea:
7c:5c:cb:a9:fd:c5:45:48:da:f2:ea:a4:c5:70:23:
32:df:cd:b5:f3:68:54:ec:9e:c9:d6:22:f5:f5:28:
c9:89:de:b8:e3:6b:de:df:bf:9f:67:0e:30:ca:42:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A5:37:00:C6:D6:CF:3D:ED:7A:5B:68:C8:9F:28:E6:2B:29:94:30
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VaU3AMbWzz3teltoyJ8o5isplDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.214.0/24
178.210.248.0/23
178.210.251.0-178.210.252.255
Signature Algorithm: sha256WithRSAEncryption
b1:1a:9a:16:b8:1a:ab:cf:19:91:50:96:f7:0a:e3:75:90:fd:
c0:4d:6f:61:bc:51:21:52:11:0d:30:3d:90:54:fd:b3:5d:ac:
01:75:e3:1d:79:b8:69:da:ea:3f:f2:21:98:66:6d:b8:29:73:
8f:dc:28:cc:fb:ec:70:c7:0d:1e:a7:98:a8:69:c6:7b:e2:29:
64:da:50:e3:09:bb:57:5c:36:5c:63:3b:9c:f2:33:d0:e3:92:
92:6c:11:1a:bc:18:33:f3:ad:f7:3d:d4:32:71:0a:c7:f3:84:
ee:bb:0f:a5:07:28:ec:6f:eb:a7:dd:93:59:13:e1:26:d1:4e:
2a:d0:9e:eb:90:c8:5e:ec:26:fe:26:7c:29:2d:36:ac:c4:c5:
d9:68:24:20:e8:b9:88:8f:5b:30:65:d5:22:8c:f7:d2:d0:49:
0a:5c:89:80:0d:c4:d0:18:79:53:45:b0:ee:90:35:a0:9a:63:
4d:c1:4a:24:69:11:0d:c1:dc:70:94:42:a8:a5:f1:66:a4:49:
64:12:6a:e7:e7:a9:c2:c1:e3:89:5f:9a:83:e2:7b:dd:19:62:
e5:de:fe:2a:7f:85:6f:7f:33:8b:dc:18:c7:9a:46:32:a8:8a:
fd:7b:d1:5d:f7:0a:3d:77:82:e5:66:47:26:4b:e7:11:27:bd:
1d:7e:f4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 08:37:47 2023 by rpki-client on console-ams.rpki-client.org