Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/o-VULKAlLCMms1rE9-fH649_650.roa
File: o-VULKAlLCMms1rE9-fH649_650.roa (raw, json)
Hash identifier: pNDV87iiwfojJOFkY6tc8GfxxbezCaKD4OQ/49me4cQ=
Subject key identifier: A3:E5:54:2C:A0:25:2C:23:26:B3:5A:C4:F7:E7:C7:EB:8F:7F:EB:9D
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 01856F6708B6512B423DF61D0697588514B5
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/o-VULKAlLCMms1rE9-fH649_650.roa
Signing time: Sun 01 Jan 2023 22:15:01 +0000
ROA not before: Sun 01 Jan 2023 22:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213128
IP address blocks: 185.204.138.0/24 maxlen: 24
185.204.137.0/24 maxlen: 24
185.204.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:08:b6:51:2b:42:3d:f6:1d:06:97:58:85:14:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Jan 1 22:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3e5542ca0252c2326b35ac4f7e7c7eb8f7feb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:85:d1:2b:77:d1:57:3f:af:97:43:47:03:
86:7d:fe:e0:a1:ad:b2:25:9d:ef:b6:cf:fa:6a:4a:
7b:a9:af:59:2b:4a:d5:f4:72:9d:3d:89:94:af:cf:
bf:90:2b:45:a3:b7:49:c4:7c:cd:28:28:86:1d:b7:
47:40:22:00:f8:15:59:76:50:89:3f:e7:9f:f2:1b:
5f:fe:e1:5b:8a:a6:43:a1:8a:49:c8:7a:46:15:16:
ea:9f:01:f4:3c:af:69:99:ef:ca:08:37:04:66:26:
64:26:39:ca:05:01:5a:24:fd:ed:03:1c:a4:f2:f1:
ec:1b:9a:08:d8:1c:f7:ab:6d:fc:2c:60:a2:b3:9c:
76:8d:cf:1c:d0:83:f9:97:24:8e:0b:cd:02:5c:5e:
5b:d9:12:d6:5e:8d:28:7a:59:39:1e:1a:0c:3e:a0:
7d:68:c4:e5:f8:51:91:28:c4:2a:7a:b0:29:77:b3:
39:01:d2:c6:48:87:e6:9e:08:e4:60:81:61:f3:df:
a2:8a:bf:98:44:06:5e:d8:dc:1e:05:d6:81:91:cc:
c2:a8:db:e6:f0:cd:a1:dd:c2:d9:40:d2:b3:53:11:
07:56:fb:bc:83:19:9c:9c:4b:e5:62:77:d6:67:88:
18:4f:7b:6d:bd:96:c0:d7:db:2e:77:60:5e:45:ad:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E5:54:2C:A0:25:2C:23:26:B3:5A:C4:F7:E7:C7:EB:8F:7F:EB:9D
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/o-VULKAlLCMms1rE9-fH649_650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.137.0-185.204.139.255
Signature Algorithm: sha256WithRSAEncryption
56:85:68:30:1f:46:8a:ae:d5:60:c2:2a:11:63:3f:f3:77:5f:
9f:9d:6e:fb:8a:6a:6f:75:4f:0f:d6:27:f7:32:fd:97:98:ed:
9c:09:e9:8e:b1:77:77:ec:2f:b9:5f:6f:1b:4e:ea:a5:cd:93:
65:29:41:be:ee:54:7f:a1:5e:1e:2e:bc:2e:98:5a:ad:92:e1:
7c:f0:fa:66:dd:d9:46:37:cc:d7:44:44:0e:d3:cc:0e:77:26:
68:54:58:f7:de:97:b3:09:2f:4a:5d:bd:f4:ad:74:93:27:e2:
d2:b4:a7:99:93:fc:4b:49:06:e9:d7:42:ef:da:e9:24:9f:57:
29:86:0a:76:41:e9:2b:9d:68:9d:7b:c8:7f:c3:46:db:9a:9f:
4b:d0:ef:63:20:77:6a:bd:e2:7f:3b:14:f3:7d:97:fe:08:37:
8d:d2:54:20:8a:55:f4:78:cb:65:55:d0:98:1b:d2:48:95:a7:
f9:54:8e:20:49:04:78:ef:f8:e3:23:f9:d4:69:c9:ae:79:bc:
04:f3:53:7e:4d:a2:1c:1b:26:76:0e:f3:63:75:5b:0c:85:ec:
cf:35:90:40:ea:6a:73:87:47:36:0b:04:4d:bc:6a:90:5a:5c:
37:42:b5:1d:81:de:53:c5:b9:81:a7:a1:52:82:5d:92:14:79:
25:c8:06:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:30 2024 by rpki-client on console-ams.rpki-client.org