Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/VkZjGRsFOmce-4Zd4u8Tk0gIGts.roa
File: VkZjGRsFOmce-4Zd4u8Tk0gIGts.roa (raw, json)
Hash identifier: OS/L/cSy7rJEFqPjAOHuMUEl4aQ6xNVOIrjkTWdIFjw=
Subject key identifier: 56:46:63:19:1B:05:3A:67:1E:FB:86:5D:E2:EF:13:93:48:08:1A:DB
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 018CC8DEC9A47D18C5BCCF9022F00EDCF661
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/VkZjGRsFOmce-4Zd4u8Tk0gIGts.roa
Signing time: Tue 02 Jan 2024 06:31:32 +0000
ROA not before: Tue 02 Jan 2024 06:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 86.107.58.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 29 Jan 2024 16:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:c9:a4:7d:18:c5:bc:cf:90:22:f0:0e:dc:f6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 06:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=564663191b053a671efb865de2ef139348081adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:d2:67:b4:b5:3c:8e:b8:6d:d0:99:cf:9b:
1f:41:ca:1c:d6:86:da:2a:75:6b:eb:25:5a:22:a1:
d2:e0:0e:89:51:4f:3c:5c:d7:cd:bd:9e:69:b9:e2:
57:de:7d:36:6a:d6:51:2e:a8:2f:17:00:c0:60:97:
cf:9c:af:0d:86:92:f1:85:d8:6e:ed:bd:71:56:14:
22:3d:00:df:fb:08:c1:1a:5d:d2:a7:d3:1d:9f:43:
dd:03:c7:98:3b:ba:c1:fb:cb:a8:c6:56:79:2f:35:
52:84:94:69:73:33:f3:0c:b8:4d:12:ee:11:72:75:
e8:29:16:8a:5f:34:1e:c5:6e:a6:71:43:67:03:82:
39:06:92:79:c4:a3:30:ee:78:ec:cc:7d:05:93:9b:
a5:6d:89:d7:d9:9a:ea:8e:7c:7a:f6:c5:e4:a9:e9:
05:ef:31:1f:2a:6f:af:d7:17:dd:d0:65:14:d2:14:
5a:df:ee:7d:0a:9f:3a:5c:60:e4:a5:ea:66:c1:9c:
89:6d:2a:05:8b:05:3f:95:5b:db:a7:a9:31:c5:c1:
7e:fc:b3:aa:d3:55:15:99:15:4b:5d:9a:4d:8b:39:
16:7b:bd:ec:ed:96:5d:38:90:3c:4a:77:49:7d:41:
c0:6a:c8:50:cc:41:53:82:7e:b2:12:38:39:c6:b1:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:46:63:19:1B:05:3A:67:1E:FB:86:5D:E2:EF:13:93:48:08:1A:DB
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/VkZjGRsFOmce-4Zd4u8Tk0gIGts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.58.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:ab:68:17:04:e1:60:a9:f9:7d:52:59:6f:a1:19:81:d1:66:
b9:7f:06:95:db:6f:68:e1:63:d9:5b:bf:9c:df:55:47:c7:84:
56:6f:a8:50:2f:30:92:b6:d4:a7:7b:cd:f9:0c:b9:be:61:6a:
47:27:73:36:07:7d:67:dd:a6:e3:23:13:09:bc:e8:14:a9:6e:
3e:fa:ee:34:5f:63:8d:92:2f:7b:9a:4b:d1:0b:45:2a:57:7b:
74:69:91:33:2c:f9:f8:c5:0a:bb:8a:79:32:06:2a:75:74:5a:
6f:28:93:3a:5f:b0:3c:45:5d:46:b4:f8:43:a0:26:52:91:f6:
22:95:f0:75:43:45:61:ae:fd:a7:6c:59:12:b2:74:b4:5a:15:
c2:02:9c:fd:ae:65:87:13:f5:ea:98:4f:79:1c:73:f3:7f:72:
b9:fc:8e:0c:8e:07:16:ad:1d:7b:7f:4e:bc:c7:2b:91:82:74:
68:fd:55:a3:7b:14:79:b9:5e:1e:d4:18:7f:62:99:4b:29:5d:
3c:46:63:8d:79:e5:59:5e:5f:f5:ce:3d:61:b7:26:2b:88:a7:
49:91:29:20:76:40:25:2c:92:e9:a7:78:8f:14:39:08:00:d0:
e4:31:ec:a6:a6:62:77:7b:ae:ad:ae:26:43:83:9f:85:a8:e3:
30:ed:d2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:40 2024 by rpki-client on console-ams.rpki-client.org