Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/vFNKXyLu3-_Zjl_xe32ftDKEir4.roa
File: vFNKXyLu3-_Zjl_xe32ftDKEir4.roa (raw, json)
Hash identifier: czSL5o8CxKMkPgW+DuAX8iCpBkO7QW37wPonnUbHaTU=
Subject key identifier: BC:53:4A:5F:22:EE:DF:EF:D9:8E:5F:F1:7B:7D:9F:B4:32:84:8A:BE
Certificate issuer: /CN=123972ae729848b3995cef1a029b1c66da777e5f
Certificate serial: 018571A7C2BDA207C74B22823C26AAA0E429
Authority key identifier: 12:39:72:AE:72:98:48:B3:99:5C:EF:1A:02:9B:1C:66:DA:77:7E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjlyrnKYSLOZXO8aApscZtp3fl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/vFNKXyLu3-_Zjl_xe32ftDKEir4.roa
Signing time: Mon 02 Jan 2023 08:44:57 +0000
ROA not before: Mon 02 Jan 2023 08:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56851
IP address blocks: 176.105.232.0/24 maxlen: 24
185.91.72.0/24 maxlen: 24
185.91.75.0/24 maxlen: 24
185.91.73.0/24 maxlen: 24
185.91.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:c2:bd:a2:07:c7:4b:22:82:3c:26:aa:a0:e4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123972ae729848b3995cef1a029b1c66da777e5f
Validity
Not Before: Jan 2 08:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc534a5f22eedfefd98e5ff17b7d9fb432848abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:0c:78:94:08:ab:e5:e0:c4:d5:dc:5d:b9:
21:e4:0d:08:40:8d:f3:e1:c1:2a:78:1c:0c:e3:a7:
de:0e:6a:fc:85:8c:4a:6e:d0:44:a2:d8:de:12:26:
7b:76:06:ed:99:66:50:c8:e4:75:da:1e:13:4f:22:
98:56:f0:de:a8:36:90:7b:2c:41:3d:f7:0a:3b:6a:
20:7e:d5:89:5f:c0:83:96:86:52:4d:51:0f:8c:18:
04:b5:3a:20:64:da:21:41:51:53:30:e2:e0:84:54:
bc:f2:e8:51:89:ca:df:3b:86:eb:2d:af:3c:7a:c8:
73:3f:88:7d:1b:92:0a:f1:de:b3:df:8a:ad:62:27:
34:f7:67:25:cf:3f:eb:1b:0d:f6:0d:ed:9f:11:55:
a8:cc:60:12:e1:7e:32:bc:5c:a4:ef:3e:52:75:50:
47:8e:55:c1:69:14:ef:d7:fb:4a:00:49:ac:26:35:
aa:c2:e0:31:02:6f:3a:d7:41:d2:d3:06:e6:af:78:
b9:ba:8f:72:be:56:0e:32:81:4a:19:44:9a:98:18:
4d:8b:85:f2:9e:63:c5:6d:e1:36:48:c6:75:db:e3:
60:b6:75:16:0a:35:3f:9c:12:11:da:86:c8:0a:8c:
67:a9:2a:65:2d:e9:38:3d:be:12:bd:d2:c6:4a:2e:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:53:4A:5F:22:EE:DF:EF:D9:8E:5F:F1:7B:7D:9F:B4:32:84:8A:BE
X509v3 Authority Key Identifier:
keyid:12:39:72:AE:72:98:48:B3:99:5C:EF:1A:02:9B:1C:66:DA:77:7E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjlyrnKYSLOZXO8aApscZtp3fl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/vFNKXyLu3-_Zjl_xe32ftDKEir4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fbd777-b1a2-484e-bf21-61697c39d97b/1/EjlyrnKYSLOZXO8aApscZtp3fl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.232.0/24
185.91.72.0/22
Signature Algorithm: sha256WithRSAEncryption
50:14:f5:c5:1a:1d:17:99:3d:64:e3:d7:1d:cb:e4:51:ef:4f:
f7:bf:d5:82:80:de:cb:55:f3:8b:c0:1f:90:c4:8e:b6:ac:e1:
55:d1:5c:24:fc:2c:01:fe:5f:0a:36:08:18:22:1b:81:08:43:
f2:cc:ee:33:60:27:99:ee:76:84:f4:0f:59:b4:c0:a4:63:1e:
e8:f0:54:da:c8:30:a4:80:04:d1:64:4a:6a:de:de:81:ec:22:
a5:bc:44:3d:51:b6:6b:88:89:43:86:8a:b4:96:0b:12:7d:a7:
a9:9f:fe:06:0d:c3:1a:fa:cf:7a:3f:a4:aa:dd:60:41:32:7f:
1a:5b:2d:be:b5:f8:c9:fd:a1:3a:4a:bb:48:98:ca:dc:a8:b9:
08:99:b6:85:99:ae:83:5c:62:f2:af:da:94:e7:69:e4:fe:3a:
99:fb:8e:13:de:30:44:47:09:62:e8:e4:b9:d3:7a:cf:d7:66:
ab:2a:88:5f:a4:0a:24:3d:89:b3:ae:cd:75:24:31:39:94:78:
98:e0:d8:ff:7e:ce:49:c3:f5:a8:6e:37:8b:8a:3a:51:c0:19:
cc:ba:21:ca:95:c0:71:fc:fe:24:10:af:f0:fe:19:69:c2:64:
b1:26:35:33:10:86:7f:2f:29:a7:21:ed:c3:55:b9:9c:d3:da:
e7:13:ac:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:23 2024 by rpki-client on console-fra.rpki-client.org