Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/vp9OoouOORJSJYDBwEvI007nEXw.roa
File: vp9OoouOORJSJYDBwEvI007nEXw.roa (raw, json)
Hash identifier: yyL1gv9l40VgebQnhbLWZDbC/V9Eg85j+sVZwha9CgI=
Subject key identifier: BE:9F:4E:A2:8B:8E:39:12:52:25:80:C1:C0:4B:C8:D3:4E:E7:11:7C
Certificate issuer: /CN=85af77d448a811387a71527fc334dcc4ff71de8f
Certificate serial: 018570B094C6D1D9EF9670B9B91226F39B24
Authority key identifier: 85:AF:77:D4:48:A8:11:38:7A:71:52:7F:C3:34:DC:C4:FF:71:DE:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha931EioETh6cVJ_wzTcxP9x3o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/vp9OoouOORJSJYDBwEvI007nEXw.roa
Signing time: Mon 02 Jan 2023 04:14:58 +0000
ROA not before: Mon 02 Jan 2023 04:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 192.175.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:94:c6:d1:d9:ef:96:70:b9:b9:12:26:f3:9b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85af77d448a811387a71527fc334dcc4ff71de8f
Validity
Not Before: Jan 2 04:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be9f4ea28b8e3912522580c1c04bc8d34ee7117c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7b:b4:d8:68:4a:c0:90:c9:a2:c7:e8:6f:97:
cf:2b:f1:9c:8b:2f:ae:dd:11:f3:c3:0a:6a:fc:05:
2c:79:47:4b:21:3e:15:0a:15:a8:92:36:18:75:cc:
78:ff:9c:1d:7b:57:56:84:f5:bf:7b:e7:a9:e1:d4:
18:e9:08:a4:f8:a7:ac:98:cd:eb:8f:93:6a:c0:84:
3a:1f:f3:65:9f:5b:97:b4:e9:7a:86:31:e4:f5:3d:
f1:26:25:81:49:5b:24:fd:a0:4f:93:80:26:1f:d2:
cd:63:d4:03:4b:c3:ad:0a:14:71:42:94:ad:87:40:
d5:90:b3:3f:ea:2e:c3:e0:a8:4d:95:dd:c8:24:73:
3c:97:14:cc:75:2e:4e:b5:e2:1a:44:ae:6c:9c:c7:
d3:44:7e:3a:4a:9c:63:07:05:36:8f:b0:55:ef:45:
8c:bd:85:46:a9:5c:b3:de:00:87:48:b9:80:c8:b3:
b9:e2:f7:7f:c1:f8:f7:8e:29:98:70:d6:a4:c5:ff:
d5:40:d3:34:0e:0e:ac:98:d0:62:86:cd:a6:82:2f:
4c:12:ec:3b:5a:eb:1d:40:27:4e:ad:80:c7:05:ad:
96:52:0f:46:fb:e4:d2:4f:db:33:8c:ac:9f:eb:5b:
d8:01:06:c7:52:1e:da:85:49:ef:d2:fb:14:c4:ed:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9F:4E:A2:8B:8E:39:12:52:25:80:C1:C0:4B:C8:D3:4E:E7:11:7C
X509v3 Authority Key Identifier:
keyid:85:AF:77:D4:48:A8:11:38:7A:71:52:7F:C3:34:DC:C4:FF:71:DE:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha931EioETh6cVJ_wzTcxP9x3o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/vp9OoouOORJSJYDBwEvI007nEXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.175.1.0/24
Signature Algorithm: sha256WithRSAEncryption
92:4c:9d:4d:cd:32:3b:88:45:70:8f:58:ec:4f:55:05:b2:80:
31:b5:86:56:ea:fc:b0:65:3a:27:76:fb:8a:3e:f0:2b:eb:3e:
d0:5f:f5:b0:ce:b1:4c:24:51:29:76:01:e0:55:76:62:72:a0:
1e:5a:37:ab:46:5f:9a:81:92:10:7b:62:ed:13:70:b3:2b:eb:
50:5f:4e:0b:94:18:81:90:d8:1a:fd:34:c0:66:6d:7b:6c:96:
0f:d0:ce:d6:43:42:cf:c8:a7:72:fd:5c:a5:d3:f4:55:ff:35:
bf:34:6d:1f:34:53:7c:5d:3f:4d:35:6f:29:70:3d:7f:bb:f5:
e0:cf:65:8b:d1:25:d0:b8:6f:e6:ea:be:a2:b1:8c:52:ab:a6:
12:cd:fb:54:93:6c:25:1c:d0:86:2a:bd:fa:49:fc:f0:a1:73:
d5:c6:af:61:e4:c5:fd:ad:dc:3d:df:4a:40:42:24:9f:31:b9:
c8:7e:47:46:44:7c:18:6b:46:83:3a:c1:dc:ad:76:dc:bf:70:
b4:7d:fe:3c:86:50:d5:fc:37:fc:f0:f9:62:5c:aa:66:e0:2b:
11:3f:dc:a1:6c:6c:62:1a:03:48:84:7e:06:04:46:37:48:cc:
51:65:a4:80:cf:24:c5:11:75:7f:a4:34:2c:75:4e:17:e1:1f:
45:7e:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:45 2024 by rpki-client on console-ams.rpki-client.org