Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1vCA_VOWKELheXYCgP4C5C3lYfE.roa
File: 1vCA_VOWKELheXYCgP4C5C3lYfE.roa (raw, json)
Hash identifier: oQT9NbOiS1lVXQkVA/XqvipKHIhjeJTPtT8JpPsgTQE=
Subject key identifier: D6:F0:80:FD:53:96:28:42:E1:79:76:02:80:FE:02:E4:2D:E5:61:F1
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01896564EFCF0D8E387C89F4FCA9A37137DD
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1vCA_VOWKELheXYCgP4C5C3lYfE.roa
Signing time: Mon 17 Jul 2023 19:47:41 +0000
ROA not before: Mon 17 Jul 2023 19:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.115.211.0/24 maxlen: 24
85.115.208.0/23 maxlen: 24
85.115.208.0/24 maxlen: 24
85.115.209.0/24 maxlen: 24
85.115.210.0/24 maxlen: 24
85.115.210.0/23 maxlen: 24
213.145.88.0/21 maxlen: 24
213.145.88.0/24 maxlen: 24
213.145.95.0/24 maxlen: 24
213.145.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jul 2023 21:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:64:ef:cf:0d:8e:38:7c:89:f4:fc:a9:a3:71:37:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 17 19:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6f080fd53962842e179760280fe02e42de561f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b9:c3:b5:ce:cf:c4:4a:22:66:d9:30:4e:81:
4b:df:11:e5:9d:fb:73:9d:d2:ed:98:c7:10:6b:96:
a5:4f:b3:21:c0:a6:01:84:b3:63:fb:87:89:9e:a0:
6a:6c:56:46:b6:e2:bb:0c:73:6f:3c:fb:b1:05:db:
e3:95:cd:ca:ac:72:d6:75:e7:04:c3:54:29:11:39:
be:b3:14:ad:68:f9:7b:73:37:d4:bf:a6:37:a0:29:
a8:2b:0e:6f:dd:f3:50:45:bc:83:aa:fb:0c:92:68:
94:65:b5:11:84:c3:99:1c:53:5b:c2:f3:cc:ff:bc:
64:4a:b2:92:6b:62:ce:75:15:af:2c:c6:e0:b5:63:
ba:3e:32:6a:c9:40:b0:83:d9:2c:b4:74:84:5c:42:
96:71:c1:e1:a8:91:b0:fd:95:4a:96:e4:b6:12:73:
93:7a:ef:2b:40:bd:ee:d6:ea:63:ca:09:f7:07:c4:
4b:08:40:66:78:26:1e:d5:fb:ce:a9:69:67:33:9b:
85:15:bf:49:db:83:a7:04:e2:4c:2a:cf:06:d9:93:
76:29:05:22:ba:49:85:e7:05:f3:35:80:be:41:3d:
53:17:05:e6:63:73:5a:98:31:cd:ee:f2:37:37:1a:
1c:06:83:cf:cb:c6:a2:63:a6:ac:09:1f:06:18:6b:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F0:80:FD:53:96:28:42:E1:79:76:02:80:FE:02:E4:2D:E5:61:F1
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1vCA_VOWKELheXYCgP4C5C3lYfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.88.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:d6:69:80:35:e1:e6:73:d8:31:89:6f:d0:99:05:09:d8:75:
af:e7:73:d7:3e:44:c6:a0:51:a8:56:e9:a2:3d:ab:15:1c:3a:
0c:81:72:04:35:55:d7:08:f8:29:6f:15:40:44:26:d8:8a:52:
73:1c:b2:3c:f7:de:52:34:47:3c:9f:80:e3:4e:34:82:7b:0d:
d9:b8:7b:39:3c:76:23:d2:80:5e:4d:c5:3c:82:55:6a:29:bb:
fd:95:29:15:ce:87:74:6e:f5:bc:44:10:85:06:30:85:fc:67:
f3:69:54:8d:6b:64:4f:41:b2:cf:22:30:87:03:93:40:3d:40:
d5:65:a5:49:79:7e:61:81:d5:9b:e1:cf:ea:d5:4c:93:ef:f5:
1e:a3:17:a3:dd:2e:85:8b:96:05:d4:a1:3c:d7:3a:cd:e5:92:
4b:49:45:46:a7:c1:15:5a:e6:2f:2a:1b:cf:7e:15:3f:e9:27:
60:ae:8f:87:6e:c8:0f:a5:cf:93:38:04:d6:d0:01:55:0d:b5:
22:27:b3:63:00:cc:da:1a:1d:d2:0c:de:5e:c8:a4:2e:31:8d:
8a:cb:8a:93:f9:17:c8:e2:6b:4b:93:da:7b:57:de:1e:2b:ab:
b6:d9:14:d3:ab:34:05:e3:dd:29:f2:0d:ee:55:1c:b2:40:57:
a4:2d:e0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org