Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/VjnS-d2vkLtr6pKAdI6RSK4-Ywk.roa
File: VjnS-d2vkLtr6pKAdI6RSK4-Ywk.roa (raw, json)
Hash identifier: g1owSUpHq7NfWJzjGIubocIswMdwLhiW8Itv6v/hDao=
Subject key identifier: 56:39:D2:F9:DD:AF:90:BB:6B:EA:92:80:74:8E:91:48:AE:3E:63:09
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 01898BF3EDE5121F6BDE80A70F356904DFAF
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/VjnS-d2vkLtr6pKAdI6RSK4-Ywk.roa
Signing time: Tue 25 Jul 2023 07:29:26 +0000
ROA not before: Tue 25 Jul 2023 07:29:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35617
IP address blocks: 45.131.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8b:f3:ed:e5:12:1f:6b:de:80:a7:0f:35:69:04:df:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Jul 25 07:29:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5639d2f9ddaf90bb6bea9280748e9148ae3e6309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:1d:7d:a3:0d:d2:96:8c:12:14:2d:5b:ef:
9e:86:14:1e:6a:2c:c0:43:49:5c:7f:c6:9c:6f:5e:
70:e8:10:50:5d:44:9e:9b:57:ff:57:69:b4:92:56:
f0:65:a7:fa:d6:69:5d:68:19:32:40:22:09:3b:c0:
0c:43:39:33:49:60:83:fb:c6:82:bf:95:a4:eb:6d:
19:de:2f:76:6a:7f:e5:17:12:41:55:20:15:37:23:
fb:71:83:78:2a:8d:0a:fd:42:9e:58:41:04:3e:58:
e4:5d:57:1e:c5:e4:79:bb:d6:2b:c3:c5:5f:55:da:
23:4d:2c:e9:41:bf:6e:2a:49:36:82:aa:57:f6:7b:
e6:be:6c:34:e8:5e:4f:2a:d4:29:d8:0e:65:a2:69:
c3:7e:9a:41:dd:03:b8:86:91:66:ad:e7:df:67:18:
9d:86:e2:d0:60:36:86:a0:1c:69:bd:9e:2a:4d:3c:
b9:af:96:0c:b3:75:43:6e:f2:9d:88:68:c4:11:19:
ad:b8:8e:65:19:17:bd:65:e3:60:af:85:2a:a2:11:
65:9d:ce:ac:45:b7:e4:15:e0:34:12:cd:d0:f9:7a:
32:6b:50:57:f6:4e:a3:66:4f:0b:a6:1b:cc:37:77:
5b:10:7c:9a:e3:51:4b:f5:39:70:44:cf:ac:ff:9c:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:39:D2:F9:DD:AF:90:BB:6B:EA:92:80:74:8E:91:48:AE:3E:63:09
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/VjnS-d2vkLtr6pKAdI6RSK4-Ywk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:16:b8:b5:63:ad:a2:73:8f:2b:17:78:9d:e5:40:ac:0f:5f:
78:88:f1:ef:ea:ca:7b:58:24:4a:4c:74:a4:a1:95:ba:fc:e3:
de:46:d6:06:5d:3a:3e:b6:b9:ce:ca:4f:fe:4c:55:d8:19:7c:
d6:e0:56:23:78:24:f2:7e:34:f2:23:4d:30:93:5a:7b:ad:d4:
38:40:26:d8:78:02:4c:b3:f1:35:9b:ef:11:63:8f:99:ca:96:
c2:3e:65:a8:f0:86:87:a1:2c:39:b3:aa:d3:dc:f5:b1:76:48:
fb:98:b2:f6:8e:52:ca:2a:14:c6:b0:4e:59:b4:81:f2:0b:6b:
67:d7:88:53:5e:91:2e:bc:e2:04:45:84:31:0c:29:c7:62:d4:
e1:ea:6a:5d:c8:83:91:18:8d:e7:37:16:c8:41:42:d7:44:bf:
19:a3:9e:6d:e7:4b:f3:00:c8:4d:5e:e4:30:f8:f7:1d:94:bf:
8d:1a:8b:69:4a:c4:6c:8b:a2:8a:06:65:33:1f:07:e1:50:65:
ad:2d:2a:6c:8f:ac:ca:33:8d:29:e7:95:01:fc:7e:3e:f3:d5:
d1:72:8f:a0:fd:6d:55:19:aa:22:51:3c:6e:50:e5:5b:bb:70:
c7:d6:95:cb:b9:df:c9:65:b9:52:32:fa:8c:64:05:72:a3:5e:
57:d9:f0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:53 2024 by rpki-client on console-fra.rpki-client.org