Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/VQF74uPT0YR6Ld8vzNLy2VjM5a8.roa
File: VQF74uPT0YR6Ld8vzNLy2VjM5a8.roa (raw, json)
Hash identifier: iKNfVQ5Yy3yD5k0jZWvZYDzvmEimceir41eyr2XrHU0=
Subject key identifier: 55:01:7B:E2:E3:D3:D1:84:7A:2D:DF:2F:CC:D2:F2:D9:58:CC:E5:AF
Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial: 01856CF855D1D1A99E099E221546B6DC3197
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/VQF74uPT0YR6Ld8vzNLy2VjM5a8.roa
Signing time: Sun 01 Jan 2023 10:54:52 +0000
ROA not before: Sun 01 Jan 2023 10:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208034
IP address blocks: 193.169.170.0/24 maxlen: 24
185.194.248.0/24 maxlen: 24
193.169.106.0/24 maxlen: 24
193.169.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:55:d1:d1:a9:9e:09:9e:22:15:46:b6:dc:31:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Validity
Not Before: Jan 1 10:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55017be2e3d3d1847a2ddf2fccd2f2d958cce5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:85:0d:e1:8f:10:28:72:e5:de:a4:3e:26:
ac:ee:04:0d:dc:5c:cb:b7:c5:45:dc:15:33:09:9d:
05:ec:b7:ed:13:f5:86:7e:92:d9:c6:f7:90:29:fe:
fe:fd:50:92:00:06:6a:fd:d1:9d:2b:12:95:f3:4a:
f1:20:a5:25:77:6c:8d:7e:02:bc:a6:82:68:a9:e1:
fd:e4:4f:d9:73:7e:d1:ef:30:ee:98:22:42:ee:c7:
7c:52:95:b4:e0:90:6c:03:59:3c:2d:2e:23:f2:4e:
b3:ef:8b:aa:6a:8b:18:3a:32:96:03:56:dd:7c:37:
88:cc:48:06:3f:4f:e1:c6:6b:60:ac:32:c3:fd:bd:
65:f1:28:34:7e:95:98:1f:97:4a:d0:b7:c3:8d:12:
40:14:dd:07:db:c1:e4:88:df:36:a0:47:d2:97:93:
c2:02:22:55:52:22:cd:6a:79:21:6a:42:e0:ad:01:
50:96:38:64:93:3b:55:09:42:1d:37:71:9e:9a:86:
c0:1f:db:90:c6:b6:5d:57:aa:10:b2:d0:97:7f:ac:
f1:48:af:4c:ec:7e:20:00:14:3f:fa:84:d6:65:d7:
b3:a0:47:56:2f:5b:94:a6:fe:53:53:8a:db:2e:e6:
7b:6a:a8:1f:b6:5c:0b:f9:55:57:ba:6f:59:77:b1:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:01:7B:E2:E3:D3:D1:84:7A:2D:DF:2F:CC:D2:F2:D9:58:CC:E5:AF
X509v3 Authority Key Identifier:
keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/VQF74uPT0YR6Ld8vzNLy2VjM5a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.248.0/24
193.169.106.0/23
193.169.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:6b:51:c8:ab:bc:94:70:fc:c6:e8:12:4a:32:81:c4:1a:1c:
ad:30:46:bf:9c:fa:b8:ef:6e:e9:8c:f2:8b:d5:08:ae:32:b1:
15:7c:32:e3:a3:90:26:fd:20:0f:e4:d0:27:82:f5:d9:0e:2c:
ac:19:ff:45:3e:62:a9:f2:ba:17:7c:c0:02:51:44:1a:60:ac:
11:24:22:11:b3:97:21:c4:d3:80:a7:0f:28:95:26:ce:bd:40:
30:10:ff:3e:d0:e8:42:b5:1b:24:5d:08:63:80:8a:ca:53:68:
78:7a:ea:61:88:9f:9c:7b:f5:aa:e7:7a:f6:29:fb:e2:8a:d1:
f6:ff:ec:cb:2d:8f:f5:58:f2:21:e3:5f:65:f2:07:12:e1:d1:
56:04:dc:a9:f5:35:81:4f:b1:5c:cd:70:79:98:e6:2e:47:77:
5f:f5:ca:0b:16:7f:c0:29:dd:f5:78:9b:aa:3b:e2:61:ec:66:
4b:0a:71:77:4c:94:f1:a7:7c:b2:9d:22:a2:c5:73:02:22:3d:
ef:b6:37:bc:a3:1f:f8:d8:56:80:be:c4:18:0f:1c:32:eb:84:
76:b7:ad:60:e0:95:c1:59:52:b5:3a:27:f6:12:eb:92:05:66:
00:55:28:62:c2:fd:04:12:41:bd:a9:15:50:81:a2:47:11:03:
65:82:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:11 2024 by rpki-client on console.sobornost.net