Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/VjSeOyDIAqq-5TKLrjF51XhMn9U.roa
File: VjSeOyDIAqq-5TKLrjF51XhMn9U.roa (raw, json)
Hash identifier: BHn96Srjt7kqHDLzEHxDwOvvRVJoEUlHxMosBwOrXlo=
Subject key identifier: 56:34:9E:3B:20:C8:02:AA:BE:E5:32:8B:AE:31:79:D5:78:4C:9F:D5
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01908F2EF871713E893A9C25798A82A68283
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/VjSeOyDIAqq-5TKLrjF51XhMn9U.roa
Signing time: Sun 07 Jul 2024 21:52:18 +0000
ROA not before: Sun 07 Jul 2024 21:52:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 217.180.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jul 2024 16:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8f:2e:f8:71:71:3e:89:3a:9c:25:79:8a:82:a6:82:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jul 7 21:52:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56349e3b20c802aabee5328bae3179d5784c9fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:71:02:3a:99:d0:df:a1:fc:3b:cf:16:d2:
2e:43:e2:72:ec:1d:ee:d0:45:98:ce:d1:36:f5:4d:
dc:f8:9a:5e:f4:28:c4:f1:81:b2:51:dd:c6:f0:46:
06:c4:a8:4d:9c:6b:8e:f8:a2:26:98:f0:39:bf:50:
4f:9a:fb:61:b2:fb:a4:a9:86:2d:7c:cc:c4:fc:72:
4c:f3:22:05:9d:8f:53:b5:fb:bf:a4:38:28:95:b2:
cf:8a:ad:c2:e2:2c:1f:75:ac:66:f5:43:63:de:2d:
ec:0b:9d:93:5d:8c:25:76:80:6a:2d:c0:e9:f5:7c:
8a:f7:a5:30:a8:17:09:33:ae:de:8e:eb:fe:24:57:
82:e4:4f:a6:c4:0e:94:eb:18:9c:28:bc:5c:02:fe:
e5:11:fa:35:01:43:90:9c:d6:48:e9:f9:c5:d7:df:
0d:ab:13:e9:92:00:43:e2:af:3d:73:6e:05:66:99:
ac:1d:39:d0:db:f4:fc:19:1e:a7:f8:fc:91:42:fb:
f2:b9:2d:e6:a1:a1:33:67:1f:0b:55:05:29:ed:d4:
d9:df:29:6d:33:fd:9f:11:e7:28:9a:21:68:62:de:
9c:d7:e8:92:c2:0c:ab:d7:7e:1c:d8:38:19:14:d3:
6a:dd:0e:ec:51:b1:c8:e6:6b:31:ef:b6:e5:a0:f8:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:34:9E:3B:20:C8:02:AA:BE:E5:32:8B:AE:31:79:D5:78:4C:9F:D5
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/VjSeOyDIAqq-5TKLrjF51XhMn9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.58.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:51:5e:50:00:88:22:81:ba:64:f1:21:57:62:67:99:6a:0f:
64:eb:f5:1b:68:87:73:a5:c6:8f:5d:32:7b:c3:3f:9a:21:7f:
11:d0:c4:3d:3e:67:68:0f:af:75:12:02:9f:16:f2:13:8f:f7:
80:52:36:44:b9:f0:fe:59:d0:a7:d0:86:c0:05:82:ee:f2:58:
43:f6:b8:bd:b5:cd:77:19:84:e5:c2:29:12:52:67:73:a0:01:
a8:f3:db:45:8d:b4:83:65:d1:7e:f7:10:94:0f:a7:4f:4d:e2:
34:93:d9:b7:e1:5f:94:3d:51:49:9b:8f:d7:45:90:d6:cd:22:
62:6e:a3:8b:4f:e5:67:35:2d:5e:92:c5:48:ab:90:98:ae:d6:
b5:3b:fd:2e:50:7b:01:22:29:18:5f:58:9c:56:3a:3e:f8:d7:
15:85:11:de:8c:bb:fe:9d:fc:02:e9:23:39:4a:b5:85:c3:dd:
5b:90:9e:92:cc:e0:ec:12:2b:b5:dd:9a:ab:b4:6c:d3:5b:7a:
e4:d7:68:d0:68:db:7c:41:c0:fd:83:c0:f9:21:8a:e3:00:0c:
af:84:01:2d:0d:dd:fb:7b:b2:11:6d:4e:72:fe:b3:fe:41:be:
ab:48:cf:46:72:6a:b9:1e:32:83:1d:1b:c4:6f:49:fb:07:00:
f3:27:34:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 17:55:53 2024 by rpki-client on console-fra.rpki-client.org