Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/VFqEBB-h_Xz5tTbpZz9LEaXIZ9Y.roa
File: VFqEBB-h_Xz5tTbpZz9LEaXIZ9Y.roa (raw, json)
Hash identifier: wdUpaQlBC7HvOL70nHoLu9IgD037VMuy7DsZ6EgkztI=
Subject key identifier: 54:5A:84:04:1F:A1:FD:7C:F9:B5:36:E9:67:3F:4B:11:A5:C8:67:D6
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018611F58A7C582017076577650533756183
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/VFqEBB-h_Xz5tTbpZz9LEaXIZ9Y.roa
Signing time: Thu 02 Feb 2023 11:49:09 +0000
ROA not before: Thu 02 Feb 2023 11:49:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48716
IP address blocks: 91.200.151.0/24 maxlen: 24
91.200.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:f5:8a:7c:58:20:17:07:65:77:65:05:33:75:61:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Feb 2 11:49:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=545a84041fa1fd7cf9b536e9673f4b11a5c867d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:ad:a5:3c:fa:ae:ea:a1:f0:12:8d:38:e6:
ee:90:d7:13:0f:c4:38:75:d0:0e:3c:e0:80:9b:e2:
78:b9:94:38:6c:fb:0c:76:37:80:e5:2a:1c:ac:9b:
12:26:37:ec:d0:94:50:9f:b5:b5:73:ea:2a:cc:38:
a0:d0:62:2d:2c:f8:81:c8:76:55:e4:35:4c:67:d0:
9c:7e:c5:54:d9:f1:3f:d9:95:75:e4:b0:5b:2d:20:
51:d8:0f:c6:c3:2a:84:42:22:a3:f0:fc:49:05:ef:
2e:a7:4c:49:bd:26:6f:98:f0:a8:cc:62:2b:74:f5:
d7:16:0e:fc:08:b7:29:b9:f0:4b:5c:03:74:e3:58:
5f:bb:44:b4:86:d2:51:fa:7a:6c:e6:e7:a3:15:e3:
b9:5a:37:a3:56:71:a3:92:64:c6:61:9c:b6:bf:91:
c0:f2:80:d7:39:68:c9:3f:6a:1c:be:59:7e:80:0d:
b0:6f:32:3c:45:d0:83:80:77:76:68:9a:8d:a2:86:
3f:16:47:90:54:a4:45:8b:47:15:4e:82:7c:c7:59:
27:4f:ec:8b:7b:d0:19:52:af:66:6a:1d:b6:9f:b8:
06:b9:a8:da:c3:46:ea:dd:4e:76:53:98:c3:75:85:
2a:b0:e5:16:b3:64:7b:52:cd:f2:b6:23:52:b8:dd:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5A:84:04:1F:A1:FD:7C:F9:B5:36:E9:67:3F:4B:11:A5:C8:67:D6
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/VFqEBB-h_Xz5tTbpZz9LEaXIZ9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.148.0/24
91.200.151.0/24
Signature Algorithm: sha256WithRSAEncryption
01:da:9e:e4:62:30:b0:b9:85:54:9b:b8:e6:40:db:32:29:f0:
34:a4:a0:10:3b:2d:af:d9:17:cc:3b:2d:dc:17:53:8f:cf:34:
21:27:64:be:26:df:62:fc:a6:d1:56:1d:bd:02:ec:fb:b9:ca:
ee:53:c7:46:6d:c1:5e:93:0b:ab:33:33:b6:26:dc:e0:05:b6:
4f:7b:38:63:ce:a4:53:0a:25:1c:4a:c0:4e:79:bb:d9:eb:9b:
eb:1b:0b:e0:09:5a:99:ec:e9:0f:b6:cb:f3:14:01:65:bf:d2:
12:8e:be:3a:89:08:52:bd:e5:c3:12:5d:67:54:d2:07:36:8f:
f8:ed:23:7d:a4:a2:58:fb:24:26:c2:15:fd:fa:e1:a6:18:b9:
70:e4:9c:d8:f7:ab:17:f1:6c:21:d7:16:c7:fa:5b:e7:c2:e8:
6e:aa:29:57:6b:50:3c:e3:4f:d2:09:47:25:7e:37:79:91:d9:
9d:9b:36:ea:bb:68:e2:02:52:af:ca:3b:ca:87:4c:06:3f:a0:
fb:1e:ee:4c:9f:cc:d9:f2:75:56:95:33:43:12:10:58:d0:39:
1c:81:ef:92:c2:ed:1f:2c:f9:15:48:5b:10:ac:ba:e2:e3:7e:
ee:91:5e:a5:0c:ec:a0:13:37:bc:bc:3a:ff:cb:46:1b:de:e8:
26:4f:8a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org