Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/vKV_2MaxrCJTEck4aWeOr7JyPlk.roa
File: vKV_2MaxrCJTEck4aWeOr7JyPlk.roa (raw, json)
Hash identifier: dysKnnE2LfqDqqwk+c6kDcfgIx+UilHITJUOQR2devk=
Subject key identifier: BC:A5:7F:D8:C6:B1:AC:22:53:11:C9:38:69:67:8E:AF:B2:72:3E:59
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 01856F5488CFB03D950918385D175D4EB181
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/vKV_2MaxrCJTEck4aWeOr7JyPlk.roa
Signing time: Sun 01 Jan 2023 21:54:49 +0000
ROA not before: Sun 01 Jan 2023 21:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57692
IP address blocks: 194.146.111.0/24 maxlen: 24
91.232.154.0/24 maxlen: 24
91.232.155.0/24 maxlen: 24
91.232.156.0/24 maxlen: 24
2001:67c:1be8::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:88:cf:b0:3d:95:09:18:38:5d:17:5d:4e:b1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Jan 1 21:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bca57fd8c6b1ac225311c93869678eafb2723e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:17:75:1e:b3:4e:13:34:e1:48:6f:d3:ae:
95:4d:6e:aa:db:cb:cc:9f:65:73:b9:56:4d:f9:f7:
12:fe:85:32:55:8a:bf:65:cf:47:f5:55:8c:8b:a9:
c2:1f:c0:25:a6:53:52:a9:7b:8e:96:b3:cb:62:f3:
c2:1a:3c:60:41:74:8d:05:88:e5:a5:62:97:fb:70:
59:b8:be:e7:06:4d:02:7e:9e:d0:62:55:94:45:dd:
b9:40:07:5a:b5:c0:09:8a:d1:ed:b1:98:23:52:f6:
a1:ae:92:12:dc:07:99:aa:2e:20:2c:9e:92:ad:00:
fc:c8:71:b6:bc:5c:e0:43:cb:3f:de:10:a2:0e:66:
64:ed:0c:a6:5c:2b:b1:a3:5a:a6:77:a1:ac:fe:5d:
e4:0e:20:e4:fc:0f:dd:6e:ac:02:ca:cf:85:69:e3:
05:df:40:9a:6d:bf:a8:71:54:12:93:06:81:04:f5:
89:fb:13:b7:c6:7d:2f:28:02:9f:e1:00:fc:57:25:
cb:1b:83:0c:38:49:53:fc:c6:10:cc:df:68:c3:ea:
20:bd:bc:ba:04:e1:9f:99:01:98:6f:38:26:46:5f:
2b:0c:82:e8:65:7c:d8:f5:7d:d2:3f:87:08:e4:0e:
40:23:45:e2:eb:c5:82:e5:73:3b:99:ee:90:87:b3:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A5:7F:D8:C6:B1:AC:22:53:11:C9:38:69:67:8E:AF:B2:72:3E:59
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/vKV_2MaxrCJTEck4aWeOr7JyPlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.154.0-91.232.156.255
194.146.111.0/24
IPv6:
2001:67c:1be8::/48
Signature Algorithm: sha256WithRSAEncryption
5a:29:0a:46:2b:ad:d5:b3:0f:48:88:b8:36:c1:32:0d:77:03:
fc:72:87:f8:e8:fc:f6:ed:a6:a1:60:c8:72:0f:03:cf:c4:7d:
01:df:c9:af:d4:c8:41:2c:0e:31:db:2e:90:bd:eb:17:60:06:
31:9d:a3:22:4c:3d:e6:2d:ce:98:50:9f:5f:fb:23:11:95:31:
d4:ad:a1:62:82:aa:48:44:ab:c7:cc:1a:25:a2:af:9c:89:a4:
14:b6:9f:5e:d1:03:e4:8b:01:28:48:c0:d4:3a:c3:30:67:29:
7f:65:6a:fd:8f:77:30:c2:ef:16:89:80:57:29:1b:9d:9f:b3:
76:a2:63:ed:87:6c:6b:04:dc:ec:b5:34:22:d1:20:cb:e1:10:
20:71:67:85:52:b4:71:c2:17:8e:6e:3b:81:e5:08:54:a6:01:
50:d9:bb:43:0c:9e:78:5d:78:e6:5f:00:3c:9b:b1:60:c7:b0:
21:67:70:0c:57:c3:9c:20:18:3f:b4:58:f2:69:f1:e0:06:0d:
a4:1a:81:a1:80:e1:de:c2:65:d4:e7:1a:61:c8:cc:c6:bd:89:
1b:6d:d5:d8:5c:10:0f:e6:88:f2:4a:f4:19:3b:74:72:e3:f4:
8a:86:ec:7b:5a:5b:6b:af:a8:53:2e:52:57:44:3c:5a:ca:7b:
c4:63:b1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:44 2024 by rpki-client on console-ams.rpki-client.org