Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/VTiJH-5W0nRPwEixrkOBqP-fmhI.roa
File: VTiJH-5W0nRPwEixrkOBqP-fmhI.roa (raw, json)
Hash identifier: uiFoODTUxeHkxovTOWG+1nMc4X3Cp4aDlqarYtCr0qY=
Subject key identifier: 55:38:89:1F:EE:56:D2:74:4F:C0:48:B1:AE:43:81:A8:FF:9F:9A:12
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 018D5129A3E6EF33B646ADFC560492F81CE7
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/VTiJH-5W0nRPwEixrkOBqP-fmhI.roa
Signing time: Sun 28 Jan 2024 17:41:39 +0000
ROA not before: Sun 28 Jan 2024 17:41:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215845
IP address blocks: 77.247.108.0/24 maxlen: 24
185.53.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 11:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:51:29:a3:e6:ef:33:b6:46:ad:fc:56:04:92:f8:1c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jan 28 17:41:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5538891fee56d2744fc048b1ae4381a8ff9f9a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:b2:96:f7:15:21:07:ad:55:c4:8b:c0:04:
84:df:18:05:e2:e1:09:f5:72:b3:20:06:8b:4e:35:
f0:79:6a:3a:46:8c:89:b9:d9:59:e4:58:ba:55:75:
df:e9:27:d9:b9:62:7b:2b:98:42:f0:8b:2d:d5:84:
f7:af:91:50:c9:46:74:6e:f0:14:11:c6:e6:89:f4:
52:24:cd:eb:32:36:31:7b:c8:a9:51:ba:a3:80:4e:
61:bb:75:d0:65:c5:15:fa:d7:b8:20:27:ae:13:0a:
1a:02:0d:6c:a1:8f:ef:33:6c:70:38:41:ad:63:51:
f5:00:23:bb:d8:5d:4f:ed:61:24:18:25:52:54:6f:
b4:5b:e6:85:ff:fb:08:6e:a6:d2:55:74:f2:45:f9:
43:48:04:5b:3d:6c:cd:c5:d3:b7:d6:18:c2:20:d0:
4a:13:ef:4a:39:c0:90:bf:ee:66:05:b3:e2:e6:0a:
69:91:e6:e7:15:5b:24:a8:76:fd:f9:84:5e:65:58:
88:05:3e:10:f7:07:d0:7b:ad:0f:4a:5c:e2:44:be:
16:23:7f:7d:ea:c9:b9:dc:be:20:9c:48:4c:3a:2c:
a8:49:90:2a:46:7c:db:04:27:93:14:a3:30:85:c2:
85:fa:62:b9:51:3c:fa:dd:b9:db:99:48:53:fb:98:
a2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:38:89:1F:EE:56:D2:74:4F:C0:48:B1:AE:43:81:A8:FF:9F:9A:12
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/VTiJH-5W0nRPwEixrkOBqP-fmhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.108.0/24
185.53.90.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:c5:57:17:e0:9b:7f:9d:6c:66:ea:9f:86:bd:18:32:71:7b:
56:12:22:94:42:07:df:1b:da:5e:df:eb:50:cc:f4:8f:cb:be:
db:d7:0f:5e:d5:84:b2:d3:dc:19:68:7b:19:ce:4c:87:91:e2:
36:0f:65:6d:49:fb:0a:ba:1a:8e:eb:fc:5b:01:7c:8b:85:d2:
d4:b8:ca:19:d6:d5:52:53:c0:e9:72:a2:c5:5b:4f:85:75:23:
45:26:34:2e:16:f3:25:8e:c6:61:ac:4e:56:7b:9f:81:a3:8c:
1c:65:32:a2:e6:37:55:ab:fb:42:c4:ad:ca:fc:59:3b:99:46:
ed:77:85:d0:13:3a:17:a3:b1:f4:fb:15:f6:87:d1:52:9c:4d:
c1:8d:f3:f6:5f:a1:c7:64:11:2d:58:2b:fd:84:ee:fd:1b:bc:
e3:d7:a5:f4:75:e0:22:57:d4:04:ff:c5:a5:b5:06:c7:95:98:
6c:9e:64:09:29:5b:7e:d7:da:db:00:a7:00:05:00:b8:fb:b3:
83:c6:07:f7:3b:6a:8f:b4:b9:fc:09:c2:8b:b6:f8:31:98:82:
2a:a4:80:58:24:8f:c0:b6:25:a5:1b:03:47:5b:23:e9:6c:a9:
64:ab:21:7c:4a:3b:66:54:5c:e5:ef:04:7f:a6:76:41:86:42:
f5:e6:ab:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 15:38:42 2024 by rpki-client on console.sobornost.net