Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/VlUdI6OYFmfDcLwC3ZwNVleAx8E.roa
File: VlUdI6OYFmfDcLwC3ZwNVleAx8E.roa (raw, json)
Hash identifier: YXFdAT4EO2Ndhonsbu+6rwRBLR4vJoBRX5gYDLellzg=
Subject key identifier: 56:55:1D:23:A3:98:16:67:C3:70:BC:02:DD:9C:0D:56:57:80:C7:C1
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018C67C13B7A8397DA42EC267914E34861E3
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/VlUdI6OYFmfDcLwC3ZwNVleAx8E.roa
Signing time: Thu 14 Dec 2023 09:56:06 +0000
ROA not before: Thu 14 Dec 2023 09:56:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 94.141.100.0/22 maxlen: 32
92.246.132.0/22 maxlen: 32
Validation: Failed, certificate revoked on Thu 14 Dec 2023 11:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:c1:3b:7a:83:97:da:42:ec:26:79:14:e3:48:61:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Dec 14 09:56:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56551d23a3981667c370bc02dd9c0d565780c7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:79:e3:6b:e5:25:4f:2a:0e:77:c9:19:89:
2f:70:8c:1e:08:24:db:a8:e6:8b:ba:42:23:4c:4a:
5d:5d:88:9f:73:37:47:fb:92:b9:a7:0e:c5:39:36:
89:d3:a4:b3:10:4c:f7:eb:00:17:a6:d4:af:a9:d7:
9a:c0:68:aa:e5:c2:d5:df:1c:38:8d:63:29:56:f4:
32:ac:e7:1a:b5:6a:0b:b3:d5:04:db:0d:a6:4b:c6:
ea:1a:12:03:a9:7b:51:7c:05:2f:3c:55:58:c4:9d:
4d:89:2b:97:7a:36:ab:22:38:cc:cb:53:66:d8:95:
d1:21:6a:8f:de:9a:48:90:ee:2b:43:db:7c:c9:c9:
8c:03:09:ba:de:6f:c4:83:65:83:65:cf:e1:25:6a:
99:b1:f9:79:88:de:7a:aa:72:6b:80:7c:35:df:41:
57:cf:de:e0:2d:ff:43:25:7a:cb:74:03:c4:64:17:
dc:f3:5b:80:5f:bc:9f:28:8d:9e:95:52:92:6b:05:
31:b3:46:7d:70:f4:21:9c:94:af:1a:3a:cd:17:87:
c7:71:ef:48:d2:58:a9:68:1d:16:bd:c5:0c:26:8d:
58:56:50:46:60:54:07:55:14:f2:3e:6e:78:ca:be:
7a:b6:5e:b3:4e:da:d1:c2:f8:c5:3a:9a:f2:15:ed:
98:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:55:1D:23:A3:98:16:67:C3:70:BC:02:DD:9C:0D:56:57:80:C7:C1
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/VlUdI6OYFmfDcLwC3ZwNVleAx8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.132.0/22
94.141.100.0/22
Signature Algorithm: sha256WithRSAEncryption
71:a5:49:f8:4e:c4:74:4c:2f:71:21:39:ee:96:9c:75:17:f8:
a2:43:31:4e:03:bc:11:08:6f:e0:22:99:b2:26:b3:30:6d:c9:
60:e2:04:54:af:5c:4e:d4:ec:75:5d:c8:32:60:6e:13:22:d2:
c6:b8:31:b3:6a:e0:37:e7:9f:4a:5d:e7:85:f4:60:96:15:82:
dd:b7:1d:64:7d:92:ce:c9:66:ae:12:6e:38:da:8b:7d:07:4a:
bb:4b:b8:9e:17:91:82:d7:a9:09:17:82:9f:3e:df:66:4b:54:
0c:75:9b:10:44:e3:ba:f5:2d:e1:d1:99:8a:02:b5:a0:2f:ae:
2a:85:0f:ed:cc:65:07:fa:9a:dc:3b:be:f3:94:86:90:ce:46:
2a:7e:d4:a1:f8:9f:83:8a:b6:01:ed:d7:84:1d:10:c7:85:7e:
5e:d6:35:d0:20:57:04:fa:80:cd:90:63:a7:1f:c6:d3:cb:a1:
2c:3e:21:a1:96:fe:3a:69:29:86:79:e8:b2:8c:71:f4:2e:64:
77:04:d0:54:ce:f2:31:63:91:65:e4:6a:37:36:d4:db:87:b6:
c3:ea:0a:a3:3d:3c:fb:db:af:82:e2:e7:97:0d:53:dc:41:6d:
cd:42:1c:ac:f4:ee:d0:e6:b8:1b:fe:fb:77:fa:00:49:05:04:
7c:44:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:08 2024 by rpki-client on console-ams.rpki-client.org