Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/Vtr9Wxmucq49AZ7lQ48kOnBbNkg.roa
File: Vtr9Wxmucq49AZ7lQ48kOnBbNkg.roa (raw, json)
Hash identifier: eSIyraSopzrqc27aFupQtD3zF9h0p3h/AjfRZ1byZv8=
Subject key identifier: 56:DA:FD:5B:19:AE:72:AE:3D:01:9E:E5:43:8F:24:3A:70:5B:36:48
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 01856FF03342422279717FE390CF43730A2A
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/Vtr9Wxmucq49AZ7lQ48kOnBbNkg.roa
Signing time: Mon 02 Jan 2023 00:44:50 +0000
ROA not before: Mon 02 Jan 2023 00:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137
IP address blocks: 193.42.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:33:42:42:22:79:71:7f:e3:90:cf:43:73:0a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Jan 2 00:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56dafd5b19ae72ae3d019ee5438f243a705b3648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:41:c6:48:92:98:22:97:2f:89:a7:ad:ad:
8f:d0:0b:76:c0:f4:97:49:93:3f:17:9e:44:a7:eb:
fa:94:bd:1f:70:dc:e1:bc:d8:3f:00:27:84:cd:c2:
69:3d:ff:ef:d0:36:b4:64:3e:92:0a:fc:bb:56:c9:
15:a2:bd:9c:9a:0f:a4:22:53:9d:07:a1:de:71:69:
13:9d:64:23:78:63:50:13:78:27:a7:6b:39:f5:5c:
cb:31:45:86:f2:ba:f3:c6:ec:07:c8:34:d0:2a:1b:
4e:3a:0b:51:8a:c3:22:60:68:b3:74:28:ff:1d:5c:
31:54:dc:ac:89:da:ed:45:f0:be:f3:08:40:c0:9a:
63:a2:e4:4b:30:8d:53:ab:7d:2e:87:11:4a:61:b5:
e7:3e:01:01:70:70:ac:ab:e8:41:1d:e5:4f:c9:af:
a4:0e:1f:4c:03:7d:e1:90:ee:c6:c1:a4:8d:e8:ea:
b2:7c:30:f2:d5:0e:cd:c0:03:93:b9:4b:ed:53:56:
b9:a9:a4:22:59:5e:ac:2f:f6:a9:04:60:7e:71:7b:
b1:0c:16:45:f7:57:ca:97:b4:64:d5:65:98:b6:9b:
c7:38:c3:82:1d:7d:77:dc:78:68:d1:db:b7:56:e5:
41:ca:54:a4:13:b7:f5:1f:9a:e6:71:6d:80:b4:10:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DA:FD:5B:19:AE:72:AE:3D:01:9E:E5:43:8F:24:3A:70:5B:36:48
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/Vtr9Wxmucq49AZ7lQ48kOnBbNkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ad:7e:5f:03:c7:cc:e6:7d:54:96:34:a6:26:1c:8f:1a:32:
3d:a8:61:61:65:91:9f:c3:c6:37:23:4c:c7:10:cf:b4:02:d5:
89:df:19:f6:dd:68:5d:44:f2:80:23:b5:0a:ac:f7:c2:38:dd:
a1:ff:0c:e3:95:73:7a:75:fa:c0:13:81:2f:5e:92:50:ac:27:
91:69:a7:25:8f:b9:0c:fb:18:61:48:d8:dc:3e:98:bd:21:86:
4a:df:cb:79:3e:d8:28:f8:43:cd:2b:38:fa:e2:99:4c:3c:f7:
83:27:f7:06:11:01:b2:f4:af:6c:93:21:95:9c:79:77:ea:e2:
e3:54:be:7a:e9:e9:ae:cf:b8:a4:df:ee:22:c0:18:64:10:38:
da:2a:06:f7:dd:d7:15:a5:41:34:b9:91:1e:f4:f7:e8:2b:86:
45:3b:e8:0f:63:8a:50:75:b0:93:7d:4d:29:0c:6d:f3:2e:f7:
16:2a:1f:0f:01:c3:f0:79:61:93:d8:f3:16:76:5d:75:6e:8a:
a7:53:bf:d3:36:3a:18:35:09:e5:1d:ec:03:e0:8d:9d:26:79:
d0:db:a6:a4:1b:a8:7e:80:fe:31:31:f6:32:45:4c:f7:dd:67:
dc:6e:5a:91:4a:d4:35:0c:5e:69:a2:0a:12:b8:89:ca:c1:d1:
ed:2e:6b:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv8DNCQiJ5cX/jkM9DcwoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDhmYjljZjE3ZGVjZTZhZGRiMDhlZWZkOWJlZTg0MmMx
ZTJiNjAwHhcNMjMwMTAyMDA0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmRhZmQ1YjE5YWU3MmFlM2QwMTllZTU0MzhmMjQzYTcwNWIzNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys9BxkiSmCKXL4mnra2P0At2wPSX
SZM/F55Ep+v6lL0fcNzhvNg/ACeEzcJpPf/v0Da0ZD6SCvy7VskVor2cmg+kIlOd
B6HecWkTnWQjeGNQE3gnp2s59VzLMUWG8rrzxuwHyDTQKhtOOgtRisMiYGizdCj/
HVwxVNysidrtRfC+8whAwJpjouRLMI1Tq30uhxFKYbXnPgEBcHCsq+hBHeVPya+k
Dh9MA33hkO7GwaSN6OqyfDDy1Q7NwAOTuUvtU1a5qaQiWV6sL/apBGB+cXuxDBZF
91fKl7Rk1WWYtpvHOMOCHX133Hho0du3VuVBylSkE7f1H5rmcW2AtBCGdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFba/VsZrnKuPQGe5UOPJDpwWzZIMB8GA1UdIwQY
MBaAFP9I+5zxfezmrdsI7v2b7oQsHitgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzIt
OTA1NDA3ZWIwZjUzLzEvVnRyOVd4bXVjcTQ5QVo3bFE0OGtPbkJiTmtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzItOTA1NDA3ZWIwZjUz
LzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSqLMA0G
CSqGSIb3DQEBCwUAA4IBAQAMrX5fA8fM5n1UljSmJhyPGjI9qGFhZZGfw8Y3I0zH
EM+0AtWJ3xn23WhdRPKAI7UKrPfCON2h/wzjlXN6dfrAE4EvXpJQrCeRaaclj7kM
+xhhSNjcPpi9IYZK38t5Ptgo+EPNKzj64plMPPeDJ/cGEQGy9K9skyGVnHl36uLj
VL566emuz7ik3+4iwBhkEDjaKgb33dcVpUE0uZEe9PfoK4ZFO+gPY4pQdbCTfU0p
DG3zLvcWKh8PAcPweWGT2PMWdl11boqnU7/TNjoYNQnlHewD4I2dJnnQ26akG6h+
gP4xMfYyRUz33WfcblqRStQ1DF5pogoSuInKwdHtLms8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:20 2024 by rpki-client on console-fra.rpki-client.org