Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/vAtMNSNnkXggTOGzG2urWfLwkCk.roa
File: vAtMNSNnkXggTOGzG2urWfLwkCk.roa (raw, json)
Hash identifier: ByovAMkulcqtYkXO3cGIimckU1KC6U8HCb2Lc/wpcBA=
Subject key identifier: BC:0B:4C:35:23:67:91:78:20:4C:E1:B3:1B:6B:AB:59:F2:F0:90:29
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 0189EF9D6FD06B0F445FB0038CC980EFB3F0
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/vAtMNSNnkXggTOGzG2urWfLwkCk.roa
Signing time: Sun 13 Aug 2023 15:56:59 +0000
ROA not before: Sun 13 Aug 2023 15:56:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203059
IP address blocks: 45.95.211.0/24 maxlen: 24
185.234.101.0/24 maxlen: 24
134.255.242.0/24 maxlen: 24
45.91.120.0/24 maxlen: 24
91.218.77.0/24 maxlen: 24
2a13:5080::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 13 Aug 2023 16:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:9d:6f:d0:6b:0f:44:5f:b0:03:8c:c9:80:ef:b3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Aug 13 15:56:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc0b4c3523679178204ce1b31b6bab59f2f09029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:40:e0:c8:52:25:0f:0c:48:95:be:f3:a4:63:
10:67:27:ae:64:34:dc:a4:ed:c3:70:d9:df:7b:96:
01:7d:fb:b1:3d:88:f8:5b:f6:03:13:2e:5f:e8:4a:
15:16:2d:62:66:bb:e0:e2:d9:34:19:49:55:5c:52:
31:e8:f2:f9:75:62:29:64:40:11:0e:e4:fe:de:b9:
db:e8:fb:15:02:d4:d3:96:b3:01:6d:cf:69:d2:6f:
cb:0d:02:3b:61:30:f7:8f:cb:58:dd:40:b7:12:e2:
ae:e3:ba:50:0d:e4:06:f3:1b:02:ee:46:47:43:60:
dd:a8:92:b0:48:63:5c:ca:ba:eb:b4:a5:e9:5e:74:
2c:20:e3:ff:32:5d:7e:e7:9a:cb:92:da:9f:25:1a:
e3:72:d2:6a:30:91:0b:0c:b4:6a:3e:07:35:43:2d:
cd:75:08:6c:90:6b:8f:cb:da:1f:3e:e1:b5:52:d5:
95:ce:21:8d:77:fc:36:3e:b7:1c:93:05:d8:a1:33:
bf:73:88:f0:8d:f8:a1:a0:a2:10:7e:d2:1e:39:4c:
10:09:7b:9d:02:27:ea:12:f8:34:cb:c3:a4:8c:f7:
03:5e:50:da:8d:01:ea:ea:2b:5d:2f:ff:0f:66:74:
01:4b:4d:75:4b:fe:d0:a0:49:23:9f:a4:18:d5:ab:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0B:4C:35:23:67:91:78:20:4C:E1:B3:1B:6B:AB:59:F2:F0:90:29
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/vAtMNSNnkXggTOGzG2urWfLwkCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.120.0/24
45.95.211.0/24
91.218.77.0/24
134.255.242.0/24
185.234.101.0/24
IPv6:
2a13:5080::/29
Signature Algorithm: sha256WithRSAEncryption
1f:e8:81:7a:a6:4f:2e:6a:61:0a:bb:c9:05:78:9f:70:f7:eb:
21:25:1c:79:1e:22:c2:13:69:d8:ff:15:8d:51:65:db:45:d7:
87:6e:7a:61:c9:40:57:6a:a5:df:b9:88:4b:52:1c:d4:4d:72:
da:89:5c:52:33:06:2a:cf:5a:d1:be:41:c0:9b:81:13:22:f5:
ac:ea:64:39:86:ef:d0:ab:f0:eb:b5:0b:18:c3:21:7c:99:ea:
02:f8:2c:f3:e3:ad:e3:8b:ed:c2:a7:fe:cd:ad:d3:f5:11:33:
22:a2:8f:6d:08:08:70:d0:37:24:78:68:ea:f5:ef:34:73:3d:
0e:4f:7b:3c:ab:ae:6c:82:6e:99:b2:17:12:42:10:31:55:97:
61:93:0f:99:23:7f:9d:c6:1f:09:b7:44:22:c4:56:3f:e1:d6:
ca:bc:91:f0:b0:20:03:9b:53:22:f2:b2:da:e5:bc:4e:1c:1c:
d5:d7:b6:36:44:42:88:92:56:ee:58:4d:e4:1e:d6:42:c8:89:
cf:88:a0:ce:be:41:ea:7b:3b:d2:03:4f:de:15:0f:b5:76:21:
cf:fc:7d:42:25:96:7c:b8:df:0f:d7:10:a9:ff:e7:6b:3a:d5:
1d:43:e8:f3:b1:15:e0:ff:e7:94:14:2f:1d:1d:ec:c4:b7:bd:
88:db:93:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:50 2024 by rpki-client on console-ams.rpki-client.org